Staff Engineer – Authentication & Authorization (f/m/x)

Company Description

Enpal is building Europe’s largest renewable-energy community. To support this scale we need a resilient, compliant and well-governed Salesforce platform.

Responsibilities

Mission
As Staff Engineer Authentication & Authorization you will own the identity & access strategy across Enpal’s digital products and IoT fleet, ensuring millions of user, device and service interactions are secure by design while the platform scales.

• Design end-to-end authentication & authorization architecture for customer apps, internal tools, partner integrations and machine-to-machine communication
• Build a shared identity platform (OAuth2, OIDC, SAML, mTLS, RBAC/ABAC)
• Drive zero-trust and cloud-native security (Azure, Kubernetes, API gateways, audit logging)
• Deliver reusable libraries & SDKs, developer guardrails
• Ensure GDPR-compliant identity handling and audit readiness

Qualifications

• 8+ years software engineering, including distributed systems
• Proven track record in large-scale identity & access management
• Deep expertise in OAuth2, OIDC, mTLS, RBAC/ABAC
• Proficient with Azure, Kubernetes, Terraform
• Fluent English, German a plus
• Passionate about the energy transition and sustainable tech
• Agile & lean mindset, high sense of ownership

We offer

• Shape identity foundations at one of Europe’s fastest-growing energy-tech companies
• Hybrid work model (remote + Berlin office)
• Mission-driven culture with real impact on the energy transition
• Diverse, safe and inclusive workplace