Senior Enterprise Engineer

Duolingo
New York, NY, United States
6 days ago
Apply on www.juju.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Compensation
$162,400.0 - $219,700.0
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Software as a Service Continuous Integration Identity and Access Management OpenID Role-Based Access Control Security Assertion Markup Language (SAML) Systems Integration Okta Slack Atlassian Tools Gsuite
+2 more
Terraform Data Pipelines

Job description

Duolingo’s Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day. We apply modern engineering practices-infra as code, CI/CD, and internal tools-to deliver secure, reliable, and scalable employee experiences. As a Senior Enterprise Engineer, you will design and ship high-impact projects across identity and access, SaaS integrations and governance, device/endpoint platforms, and employee lifecycle automation. You’ll partner closely with Security, Finance, Legal, and Platform to reduce toil through automation, improve reliability, and turn policy into maintainable workflows and code. This role is based in New York City or Pittsburgh. We believe exceptional candidates come from all backgrounds. If you meet only some of the qualifications below, we encourage you to apply!

  • You will…

  • Design and implement foundational enterprise services (e.g., identity and access management, SaaS integrations, MDM/endpoint, internal tooling) with reliability, security, and scalability in mind.

  • Build and evolve infrastructure-as-code, CI/CD, and configuration-as-code patterns; contribute modules/templates and participate in reviews to raise the engineering bar across Enterprise Engineering.

  • Automate employee lifecycle workflows (onboarding, transfers, offboarding), RBAC/SCIM provisioning, and policy enforcement across core systems like Okta, Google Workspace, Slack, and Atlassian.

  • Define and measure SLOs for internal services; create dashboards, alerts, and runbooks; participate in incident response and on-call for enterprise platforms.

  • Partner with Security, Finance, Legal, and Procurement to implement SaaS governance, license optimization, and risk controls-codifying processes into auditable, testable workflows.

  • Deliver cross-functional initiatives end-to-end: author clear specs, align stakeholders, de-risk launches, and land durable outcomes with strong documentation.

Requirements

  • Proven impact shipping multi-stakeholder engineering projects that improve reliability, efficiency, or employee experience at scale.

  • Hands-on experience with infrastructure-as-code and CI/CD (e.g., Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration.

  • Strong background in identity and access management concepts and integrations (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems.

  • Proficiency building automations and internal tooling that integrate with APIs for systems like Okta, Google Workspace, Slack, and Atlassian.

  • Operational excellence: you define SLOs, build dashboards/alerts/runbooks, and contribute to on-call/incident response for internal platforms.

  • Clear, concise communication and documentation skills; you collaborate effectively with Security, Finance, Legal, and Platform partners.

  • The ability to work from or relocate to New York City or Pittsburgh.

  • Exceptional candidates will have…

  • Experience implementing SaaS governance and license optimization programs with Finance/Procurement and Security partners.

  • A track record building reliable joiner/mover/leaver automation at scale, including data pipelines and policy guardrails.

  • Experience defining and landing engineering standards for internal platforms (module libraries, templates, checkers, documentation patterns) adopted org-wide.

  • Prior ownership of MDM/endpoint platforms and fleet-level automation for security/compliance baselines.

  • Incident leadership experience for enterprise systems and the ability to drive lasting post-incident improvements.

The offered salary is dependent upon several factors, including work experience, skills, and internal peer comparisons. The posted range is subject to change in the future. For this role, base salary is supplemented by equity compensation. We encourage you to talk with your recruiter for more information related to compensation for this role!

About the company

Our mission at Duolingo is to develop the best education in the world and make it universally available. It’s a big mission, and that’s where you come in!

At Duolingo, you’ll join a team that cares about finding innovative solutions to complex technical problems (https://blog.duolingo.com/tag/engineering/?utm_source=greenhouse.com&utm_medium=referral&utm_campaign=engblog_gh_091224) , running countless experiments (300+ at a time!) with our massive user base to make data-driven decisions, and educating our users and employees alike. You’ll have limitless learning opportunities, mentorship and collaboration with world-class minds, and a variety of projects with large scopes - while doing work that’s both fun and meaningful.

Join our life-changing mission to develop education for our half a billion (and growing!) learners around the world.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.juju.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:20 min

Identifying multi-disciplinary talent for developer experience engineering roles

Hazal Mestci +1 · Coffee With Developers

4:35 min

Setting up passwordless federated identity configuring OpenID Connect patterns

Marcel Lupo · LIVE

1:14 min

Automating user bug triage and resolutions using Slack agents

Brian Lovin Brian Lovin · World Congress 2026 Europe

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann +2 · LIVE

2:52 min

Implementing IAM with Keycloak and OpenID Connect

Thomas Südbröcker · LIVE

5:36 min

Integrating agentic coding models into Slack

Chris Heilmann +2 · LIVE

Videos

See all

Related articles

See all