Solution Architect

Solution ArchitectWork Location: Denver, CO (Onsite) Minimum Experience: 8–10 YearsTop Required SkillsAuth0 FGA / OpenFGA – 5+ YearsRBAC, ABAC, ReBAC (Fine-Grained Authorization Models) – 5+ YearsAuthorization Architecture & Entitlement Management – 5+ YearsJob DescriptionWe are looking for an experienced Solution Architect with expertise in Fine-Grained Authorization (FGA) and Identity & Access Management (IAM) to design and implement secure, scalable authorization solutions for enterprise applications. The ideal candidate should have strong hands-on experience with Auth0 FGA/OpenFGA, authorization architecture, entitlement management, and access control models including RBAC, ABAC, and ReBAC.Key ResponsibilitiesDesign and implement authorization frameworks for enterprise and multi-tenant applications.Build and maintain fine-grained authorization models using Auth0 FGA/OpenFGA.Design and manage RBAC, ABAC, and ReBAC authorization models.Develop and maintain entitlement management solutions for secure access control.Model and manage relationship tuples and authorization policies within OpenFGA/Auth0 FGA.Integrate authorization checks into backend applications and APIs.Collaborate with application development teams to implement secure authorization across distributed systems.Define and enforce IAM best practices, including least privilege access and multi-tenant security.Support architecture reviews, security assessments, and troubleshooting of authorization-related issues.Required Skills8–10 years of experience in Solution Architecture, IAM, or Security Architecture.Strong hands-on experience with Auth0 FGA/OpenFGA.Solid understanding of Fine-Grained Authorization (FGA) concepts.Expertise in RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control), and ReBAC (Relationship-Based Access Control).Experience in authorization architecture design and entitlement management.Hands-on experience integrating FGA authorization into applications using one or more of the following: Java, Node.js, Python, .NET, Go.Strong understanding of IAM concepts including: Roles, Permissions, Groups, Least Privilege, Multi-Tenant Access Control.Experience designing scalable and secure enterprise authorization solutions.Excellent analytical, communication, and problem-solving skills.Preferred SkillsExperience with OAuth 2.0, OpenID Connect (OIDC), and JWT.Knowledge of enterprise Identity and Access Management solutions.Experience working in cloud environments (AWS, Azure, or GCP).Familiarity with microservices and API security best practices.Experience with CI/CD and DevSecOps practices.