The opportunity
Our mission at Duolingo is to develop the best education in the world and make it universally available. It’s a big mission, and that’s where you come in!
What you'll do
Design and implement foundational enterprise services (e.g., identity and: access management, SaaS integrations, MDM/endpoint, internal tooling) with reliability, security, and scalability in mind.
Build and evolve infrastructure‑as‑code, CI/CD, and configuration‑as‑code: patterns; contribute modules/templates and participate in reviews to raise the engineering bar across Enterprise Engineering.
Automate employee lifecycle workflows (onboarding, transfers, offboarding),: RBAC/SCIM provisioning, and policy enforcement across core systems like Okta, Google Workspace, Slack, and Atlassian.
Define and measure SLOs for internal services; create dashboards, alerts, and: runbooks; participate in incident response and on‑call for enterprise platforms.
Partner with Security, Finance, Legal, and Procurement to implement SaaS: governance, license optimization, and risk controls—codifying processes into auditable, testable workflows.
Deliver cross‑functional initiatives end‑to‑end: author clear specs, align stakeholders, de‑risk launches, and land durable outcomes with strong documentation.
What they're looking for
- Proven impact shipping multi‑stakeholder engineering projects that improve: reliability, efficiency, or employee experience at scale.
- Hands‑on experience with infrastructure‑as‑code and CI/CD (e.g., Terraform: and modern pipelines) to manage identity, SaaS, or internal platform configuration.
- Strong background in identity and access management concepts and integrations: (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems.
- Proficiency building automations and internal tooling that integrate with: APIs for systems like Okta, Google Workspace, Slack, and Atlassian.
