Senior Enterprise Systems Engineer - SaaS & Automation

Duolingo is the world's most popular learning app, on a mission to develop the best education in the world and make it universally available. Duolingo’s Enterprise Engineering team builds and operates the foundational internal platforms, identity systems, and automation infrastructure that power how all employees work daily.

As a Senior Enterprise Engineer, you will apply modern engineering practices—including Infrastructure-as-Code (IaC), CI/CD pipelines, and internal API tools—to build secure, reliable, and scalable internal employee platforms. You will lead cross-functional engineering initiatives across Identity and Access Management (IAM), SaaS governance, endpoint platforms, and Joiner/Mover/Leaver (JML) lifecycle automation. Partnering closely with Security, Finance, Legal, and Platform teams, you will eliminate manual toil, codify policy into testable workflows, define service SLOs, and elevate enterprise engineering standards company-wide.

Key Responsibilities

• Enterprise Platform & IAM Infrastructure: Design and implement foundational internal services, focusing on Identity and Access Management (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC), SaaS integrations, and internal tooling.
• Infrastructure-as-Code & CI/CD: Build, maintain, and standardize Infrastructure-as-Code (Terraform) and modern CI/CD pipelines to manage SaaS configurations, identity policies, and internal platform deployments.
• Employee Lifecycle Automation: Automate end-to-end joiner, mover, and leaver (JML) workflows and policy enforcement across core enterprise systems (Okta, Google Workspace, Slack, Atlassian).
• Operational Excellence & Reliability: Define and monitor SLOs/SLIs for enterprise platforms; create operational runbooks, dashboards, and alerts; participate in on-call rotation and incident response.
• SaaS Governance & Compliance: Partner with Security, Finance, Legal, and Procurement to implement automated SaaS license optimization, access governance, and auditable risk controls.
• Cross-Functional Execution: Author detailed technical specs, align stakeholders across departments, mitigate launch risks, and deliver durable internal software projects with thorough documentation.

Requirements

Enterprise Engineering & IaC Depth

• Proven track record of shipping multi-stakeholder engineering projects that improve internal systems reliability, security, or employee experience at scale.
• Infrastructure-as-Code Mastery: Hands-on experience using Terraform and modern CI/CD pipelines to manage enterprise software, SaaS, or internal infrastructure configurations.
• IAM & Security Protocols: Strong background in identity and access management principles, including SSO, SAML, OIDC, SCIM provisioning, RBAC, and ABAC.
• API Automation & Integration: Demonstrated proficiency building custom automation workflows and internal tools that integrate with enterprise APIs (Okta, Google Workspace, Slack, Atlassian).
• Operational Foundations: Hands-on experience defining service SLOs, writing runbooks, setting up monitoring/alerting, and participating in incident response for internal systems.
• Communication & Stakeholder Alignment: Clear, concise technical writing and documentation skills with a history of partnering with Security, Legal, and Finance teams.

Work Logistics

• Ability to work onsite from or relocate to Pittsburgh, PA or New York City, NY.

Preferred Qualifications

• Experience designing and implementing automated SaaS governance, license optimization, and cost-control programs alongside Finance and Security.
• Demonstrated success building reliable, data-driven Joiner/Mover/Leaver (JML) automation engines at enterprise scale.
• Experience defining org-wide internal platform engineering standards (e.g., reusable Terraform modules, CI linting, configuration templates).
• Ownership of Mobile Device Management (MDM) platforms, fleet endpoint automation, and security baseline enforcement.
• Incident commander/leadership experience for enterprise systems with a focus on post-incident remediation.

Total Rewards & Benefits

• Compensation & Equity: Base salary of $162,400 – $219,700 USD + competitive equity grants.
• Food & Well-Being: Catered in-house breakfast and lunch, language learning opportunities, monthly social events, and active employee clubs.
• Comprehensive Healthcare: Top-tier medical, dental, and vision insurance coverage options for employees and eligible dependents.
• Time Off & Growth: Company-wide annual Hackathon, generous PTO, paid company holidays, and dedicated professional development budgets.