Solution Architect

Work Location: Denver, CO (Onsite)
Minimum Experience: 8 10 Years

• Auth0 FGA / OpenFGA 5+ Years
• RBAC, ABAC, ReBAC (Fine-Grained Authorization Models) 5+ Years
• Authorization Architecture & Entitlement Management 5+ Years

We are looking for an experienced Solution Architect with expertise in Fine-Grained Authorization (FGA) and Identity & Access Management (IAM) to design and implement secure, scalable authorization solutions for enterprise applications. The ideal candidate should have strong hands-on experience with Auth0 FGA/OpenFGA, authorization architecture, entitlement management, and access control models including RBAC, ABAC, and ReBAC.

Key Responsibilities

• Design and implement authorization frameworks for enterprise and multi-tenant applications.
• Build and maintain fine-grained authorization models using Auth0 FGA/OpenFGA.
• Design and manage RBAC, ABAC, and ReBAC authorization models.
• Develop and maintain entitlement management solutions for secure access control.
• Model and manage relationship tuples and authorization policies within OpenFGA/Auth0 FGA.
• Integrate authorization checks into backend applications and APIs.
• Collaborate with application development teams to implement secure authorization across distributed systems.
• Define and enforce IAM best practices, including least privilege access and multi-tenant security.
• Support architecture reviews, security assessments, and troubleshooting of authorization-related issues.

• 8 10 years of experience in Solution Architecture, IAM, or Security Architecture.
• Strong hands-on experience with Auth0 FGA/OpenFGA.
• Solid understanding of Fine-Grained Authorization (FGA) concepts.
• Expertise in RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control), and ReBAC (Relationship-Based Access Control).
• Experience in authorization architecture design and entitlement management.
• Hands-on experience integrating FGA authorization into applications using one or more of the following:
  • Java
  • Node.js
  • Python
  • .NET
  • Go
• Strong understanding of IAM concepts including:
  • Roles
  • Permissions
  • Groups
  • Least Privilege
  • Multi-Tenant Access Control
• Experience designing scalable and secure enterprise authorization solutions.
• Excellent analytical, communication, and problem-solving skills.

• Experience with OAuth 2.0, OpenID Connect (OIDC), and JWT.
• Knowledge of enterprise Identity and Access Management solutions.
• Experience working in cloud environments (AWS, Azure, or GCP).
• Familiarity with microservices and API security best practices.
• Experience with CI/CD and DevSecOps practices.