Sr. Software Engineer – Platform Services

Job description

POSITION SUMMARY This is a Senior-level individual contributor on the Platform Services team. The team builds the foundational infrastructure that all MeridianLink products depend on: centralized authentication, authorization, user management, and the shared services layer that enables a multi-product SaaS platform to operate as one system. Platform Services runs lean by design, engineers own their domain deeply, and ship production features with minimal oversight. The immediate focus is federated identity and authorization infrastructure: extending the identity platform, hardening what's already in production, and supporting product teams as they integrate. Over time, the team's scope will expand into platform capabilities that directly support AI product development, including shared backend services that encapsulate cross-product functionality and AI-powered features. This is a fully remote role. KEY COMPETENCIES What it means to be a Senior Engineer at MeridianLink Senior individual contributors own their work end-to-end, identify problems before they're surfaced, and make the engineers around them better. Senior engineers at MeridianLink are active, daily users of AI-assisted development tools. Technical Execution & Delivery - Owns features and infrastructure end-to-end: design through production release, limited guidance required - Identifies edge cases and failure modes independently within assigned scope - Participates actively in code review with constructive, specific feedback - Surfaces blockers early rather than waiting for check-ins Craft & Professionalism - Writes tests that catch regressions without over-engineering the suite - Monitors shipped work, responds to issues, and follows incidents to resolution - Puts institutional knowledge into shared systems rather than individual heads Identity & Authorization Systems - Applies practical knowledge of federated identity standards: OAuth 2.0, OIDC, SAML 2.0, and JWT - Understands how authorization frameworks function: how policies are modeled, enforced, and integrated into upstream and downstream services - Reasons clearly about token lifecycle, session management, and the security implications of identity design choices Platform & Integration Engineering - Builds shared services that multiple product teams consume through well-defined APIs - Designs with multi-tenant and multi-product constraints in mind: data isolation, tenant-scoped configuration, and cross-product user identity - Writes API contracts (REST, event-driven patterns) with attention to versioning, backwards compatibility, and developer experience Domain Context - Develops working knowledge of how identity and access management works across a multi-product lending platform - Understands enough about downstream consumers to make good integration design decisions without requiring constant direction EXPECTED DUTIES Identity & Authorization Platform Development - Build and extend platform services that manage federated identity, authentication flows, and authorization enforcement across MeridianLink products - Implement and maintain integrations with the centralized identity platform (FusionAuth), including token handling, session management, user provisioning, and tenant configuration - Support product teams through their integration process: help them understand the platform's contracts, debug issues, and navigate edge cases in multi-tenant identity behavior - Build the tooling, documentation, and examples that make those integrations repeatable and self-service over time Shared Platform Services - Design and maintain backend services in C# and Python that expose platform capabilities through clean, versioned APIs - Build with multi-product and multi-tenant scenarios as first-class requirements: data isolation, tenant-scoped configuration, and cross-product consistency - Participate in API design reviews with attention to contract stability and developer experience for consuming teams AI-Native Delivery - Use AI development tools as an active part of daily workflow: code generation, design exploration, test scaffolding, and investigation - Contribute to the team's AI-assisted engineering practices and share what's working - Build familiarity with the systems that support AI agent development (LLM gateways, orchestration frameworks, evaluation harnesses) so you're ready to own those capabilities as the team's scope grows Collaboration & Growing Others - Participate in design discussions and code reviews; give and receive feedback constructively - Mentor other engineers on the team - Contribute to documentation and onboarding materials that reduce tribal knowledge QUALIFICATIONS: KNOWLEDGE, SKILLS, AND ABILITIES Required - 5+ years of professional software engineering experience, delivering features and infrastructure independently in production - Proficiency with standard development tooling: Git, Docker, automated testing, and modern scripting languages - Active daily use of AI-assisted development tools - Bachelor's degree in Computer Science, Software Engineering, or equivalent experience - Hands-on experience implementing or integrating with federated identity systems using OAuth 2.0, OIDC, SAML 2.0, and/or JWT in production applications - Practical understanding of authorization frameworks: how policies are modeled, enforced, and integrated into application and platform services - Proficiency in C# and Python for backend service development, including modern API frameworks (.NET 10+, FastAPI, or equivalent) - Working knowledge of identity protocol mechanics: authorization code flow, token introspection, claims-based access, assertion handling, and SSO logout behavior - Experience with multi-tenant SaaS patterns, including tenant-scoped configuration and user identity across application boundaries - Familiarity with cloud platforms (AWS preferred), including relevant managed services for networking, compute, and secrets management Preferred - Prior experience working with a commercial or open-source identity platform (FusionAuth, Keycloak, Auth0, Okta, or equivalent) in an engineering capacity - Experience modeling and implementing fine-grained authorization: RBAC, ABAC, or policy-based access control systems - Prior experience building internal platform capabilities used by other engineering teams - Experience in financial services, fintech, or a regulated technology environment - Experience building or supporting AI agent systems: orchestration, tool integration, evaluation pipelines, or LLM gateway infrastructure - Familiarity with the end-to-end lifecycle of an AI agent, whether internal-facing (developer tooling, automation) or customer-facing (conversational, decisioning) - Exposure to SOC 2 or similar compliance frameworks from an engineering perspective WHAT SUCCESS LOOKS LIKE Within the first few months, a successful hire has built enough context on the identity platform to work largely independently on scoped features, is participating meaningfully in code reviews, and has demonstrated the kind of operational ownership that keeps a small team running well. Over time, success is measured by the reliability and maturity of the platform services they own, how much they've reduced the team's dependence on any single person's knowledge, and how effectively product teams can integrate with the identity platform without hands-on support.