Full-Stack Software Engineer with OAuth

Description

The company is the company, working under a strategic partnership with WTW to build dedicated software engineering teams for WTW's Insurance Consulting and Technology Division.

WTW's Insurance Consulting and Technology business is a global leader in P&C, Life and Health insurance software and advisory, with over 1,700 colleagues across 35 markets and more than 1,000 insurers worldwide as clients.

You would work only with WTW on a dedicated team set up under a Build-Operate-Transfer (BOT) model, helping bring AI-enabled engineering practices, modern ways of working and insurance technology expertise into next-generation insurer products. You would be employed by the company while building your career there.

The role is a Full Stack Software Engineer position on a cross-functional team that designs, builds and evolves the Authentication and Authorization capability used across several products and engineering teams.

This is a platform role rather than conventional application development. You would help build a reusable identity platform that other teams use to adopt standard authentication and authorisation services, with gains in security, developer experience and operational efficiency.

The platform offers shared identity and access management services: secure user authentication, business resource authorisation and integration with enterprise identity providers. It is built on Auth0, Fine-Grained Authorization (FGA) and Azure services, and includes SDKs, reverse proxy services and developer tooling.

You would work with architects, product teams, platform engineers and business stakeholders to deliver secure, scalable, high-quality solutions for WTW and its customers.

Responsibilities

• Design, build and maintain authentication and authorization services in modern.NET.
• Develop reusable platform services that support secure authentication and authorization across several business applications.
• Build scalable REST APIs and integration services used across the organisation.
• Develop and maintain Angular administration portals for managing users, groups and permissions.
• Contribute to the evolution of Fine-Grained Authorization (FGA) and centralised access management services.
• Build reusable SDKs, libraries and APIs that make integration with the enterprise identity platform simpler.
• Create developer tooling that speeds up onboarding and adoption of shared authentication services.
• Improve developer experience by simplifying authentication, authorization and platform integration.
• Write and maintain technical documentation for engineering teams that consume the platform.
• Design stable, reusable platform interfaces that limit breaking changes.
• Develop cloud-native services on Microsoft Azure.
• Build and maintain reverse proxy capabilities using Azure API Management.
• Support Infrastructure as Code with OpenTofu or Terraform.
• Contribute to CI/CD pipelines and deployment automation in Azure DevOps.
• Support ongoing improvements to platform scalability, security and operational resilience.
• Write unit, integration and automated tests to keep the platform reliable.
• Take part in peer reviews, architecture discussions and technical design sessions.
• Apply engineering best practices, including Clean Code, automated testing and secure software development.
• Work with Product Owners, Architects, QA Engineers and Platform Engineers to deliver high-quality platform capabilities.
• Take part in third-line production support and an on-call rotation.
• Investigate production issues and help improve platform reliability.
• Work closely with the product teams integrating with the platform.
• Share knowledge and help build long-term the company ownership of the Authentication and Authorization capability.

Requirements

• 4+ years of commercial software development experience in C and modern.NET.
• Strong experience designing and developing REST APIs.
• Experience building scalable enterprise applications or shared platform services.
• Strong knowledge of object-oriented programming and modern software design principles.
• Strong understanding of OAuth 2.0, OpenID Connect (OIDC) and JWT.
• Good understanding of modern authentication and authorization concepts.
• Experience integrating applications with enterprise identity providers.
• Understanding of secure API design and identity-based access control.
• Experience developing cloud-native applications on Microsoft Azure.
• Experience with Azure DevOps, Git and CI/CD pipelines.
• Understanding of Infrastructure as Code principles and the ability and willingness to work with OpenTofu or Terraform.
• Understanding of Azure API Management or similar API gateway technologies.
• Experience developing Angular applications in TypeScript.
• Experience building administrative or developer-facing web applications.
• Experience writing unit, integration and API tests.
• Experience working in Agile Scrum teams.
• Strong communication and collaboration skills.
• Ability to work effectively across multiple product teams.
• Preferred: Auth0.
• Preferred: Fine-Grained Authorization (FGA).
• Preferred: Google Zanzibar authorization model.
• Preferred: Azure API Management (APIM).
• Preferred: SCIM integrations.
• Preferred: Identity Federation.
• Preferred: Datadog.
• Preferred: Playwright.
• Preferred: Trivy.
• Preferred: GitLeaks.
• Preferred: Invicti.
• Preferred: Experience building reusable developer platforms.
• Preferred: Experience working with enterprise shared services.

Conditions

Full-time employment contract.

Gross base salary starts from PLN 15 267 per month, set using objective, gender-neutral criteria such as skillset, experience and role responsibilities.

The company does not ask about or consider current or past pay during recruitment, in line with Polish Labour Code amendments on pay transparency.

The starting pay is the initial figure expected for this role and does not limit equal pay for women and men doing the same or equivalent work.

The company welcomes applicants from all backgrounds and bases hiring decisions on merit, skills, qualifications and potential. Adjustments or support during recruitment are available on request.

Benefits

• Private medical insurance, dental plan and glasses reimbursement are typically offered.