> Markdown version of [/jobs/ext/570609-solution-architect](https://www.wearedevelopers.com/jobs/ext/570609-solution-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Solution Architect - **Company:** The Lever Group LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** PHP (Programming Language), Software as a Service, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Role-Based Access Control, Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, Pulumi, Okta, Infrastructure Automation Frameworks, Information Technology, Terraform - **Published:** June 18, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ed48ea5909f9e225 ## About the Role Do you have experience in SSO?, * 10+ years of overall IT experience. * 5+ years of experience as a Solution or Enterprise Architect with a focus on identity and access management. * Strong hands-on knowledge of IAM protocols: OAuth2, OpenID Connect, SSO, RBAC. * Proven experience with Auth0 or a comparable Identity Provider (Okta, Azure AD B2C, Keycloak, etc.). * Solid background in PHP and/or Python ecosystems. * Experience designing and enforcing architectural standards across multiple engineering teams and products. * Strong communication skills: ability to drive alignment, facilitate technical decisions, and present to mixed technical/non-technical audiences. * Upper-Intermediate English (B2+) - working language with the client. * US-based project with daily communication; availability during the Central US time zone (CST/CDT) is required. nice-to-have skills: * Experience with SAML 2.0 and federation protocols. * Familiarity with SOC 2 / ISO 27001 compliance requirements. * Background in SaaS multi-tenant architecture. * Knowledge of IaC tools (Terraform, Pulumi) for identity infrastructure provisioning. * Experience in US-based product companies or client-facing delivery roles. ## Description This is a high-visibility, strategic role at a US-based SaaS product company in the data collection and analytics space. The engineer will have genuine ownership over the Identity layer across a multi-product ecosystem - not just execution. The tech stack is modern (Auth0, OAuth2/OIDC), the client team is senior and technically strong, and the engagement has a long-term outlook with potential to grow into broader platform architecture ownership. The project operates in the Central US time zone with daily sync calls with the client team., * Own and evolve the Identity layer that connects multiple products within a large-scale SaaS platform. * Define and enforce architectural standards and best practices across engineering teams for authentication and authorization. * Drive cross-team alignment on identity-related design decisions, acting as the primary technical authority on the topic. * Design and oversee the implementation of SSO, RBAC, and authentication/authorization flows for new and existing integrations. * Lead design reviews, contribute to RFC processes, and participate in architectural governance. * Collaborate with product managers, engineering leads, and client stakeholders to translate business requirements into scalable identity solutions. * Monitor and continuously improve the security posture of the identity infrastructure. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Solution Architecture: A Startup Perspective](https://www.wearedevelopers.com/videos/778-solution-architecture-a-startup-perspective) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)