Cloud Software Team Lead - SSO

Role Summary

As the Cloud Software Team Lead - SSO, you will lead the engineering team responsible for building and operating Ubiquiti’s Single Sign-On (SSO) platform, which provides secure authentication and authorization services across our cloud ecosystem.

 

You will define the technical direction of the SSO platform while leading a team of engineers to deliver scalable, reliable, and secure identity services. As a hands-on technical leader, you will drive architecture decisions, mentor engineers, establish engineering best practices, and collaborate closely with Product Management, Security, Infrastructure, and other engineering teams to build an enterprise-grade identity platform that enables rapid product innovation.

 

This role requires a strong technical leader with deep expertise in cloud-native backend development, distributed systems, and modern identity technologies who enjoys solving complex engineering challenges while growing a high-performing engineering team. This JD builds on the existing Cloud Software Developer (SSO) role by expanding ownership from feature implementation to platform leadership and technical execution. 

Responsibilities (What he/she will do after joining UI)

• Lead, mentor, and grow a team of software engineers developing cloud-based SSO and identity services.
• Own the technical roadmap and long-term evolution of the SSO platform.
• Define and drive the architecture of secure, scalable, and highly available identity services using Python, Django, and AWS cloud technologies.
• Lead the design and implementation of authentication, authorization, identity federation, multi-tenancy, and account lifecycle management.
• Drive architectural decisions and ensure the platform meets reliability, scalability, security, and maintainability objectives.
• Establish engineering best practices, coding standards, architecture reviews, testing strategies, and operational excellence.
• Collaborate with Product Managers to prioritize features, manage technical debt, and balance short-term delivery with long-term platform sustainability.
• Partner with Security teams to implement modern security practices, including OAuth2, OpenID Connect (OIDC), SAML, MFA, Zero Trust, and secure credential management.
• Drive service reliability through observability, incident response, performance optimization, disaster recovery planning, and continuous improvement.
• Lead technical design reviews and guide engineers through complex technical challenges.
• Coordinate cross-team technical initiatives involving authentication, identity federation, user lifecycle management, and platform integrations.
• Work closely with backend, frontend, infrastructure, SRE, and cloud platform teams to deliver seamless identity solutions.
• Mentor and coach engineers through technical guidance, code reviews, architecture discussions, and career development. Participate in hiring and help build a high-performing engineering team.
• Foster a culture of ownership, innovation, engineering excellence, and continuous learning.
• Stay current with emerging technologies and industry trends in identity management, cloud computing, AI-assisted software development, and distributed systems.

Requirement (Must-Haves)

• 6+ years of software engineering experience, including 3+ years serving as a technical lead or leading engineering teams.
• Strong hands-on experience developing backend services using Python and Django.
• Deep understanding of modern authentication and authorization technologies, including OAuth2, OpenID Connect (OIDC), SAML, SCIM, JWT, and enterprise identity management.
• Experience designing, building, and operating enterprise-scale identity platforms, authentication systems, or IAM services.
• Strong experience developing cloud-native applications on AWS with expertise in scalability, resilience, and cloud security best practices.
• Solid understanding of distributed systems, microservices architecture, RESTful APIs, and event-driven systems.
• Proven experience leading architecture design, technical planning, and execution of complex software projects.
• Experience with Infrastructure as Code (Terraform), CI/CD pipelines, Docker, and Kubernetes.
• Strong knowledge of observability, monitoring, logging, and incident management practices.
• Excellent technical leadership, communication, and stakeholder management skills.
• Demonstrated ability to mentor engineers, drive engineering excellence, and build high-performing teams.
• Bachelor’s degree in Computer Science, Engineering, or a related field.
• Proficiency in AI-assisted software development environments (e.g., Cursor, Claude Code) and modern AI development methodologies such as Spec-Driven Development.

Preferred Qualifications

• Experience leading the development of Identity-as-a-Service (IDaaS), IAM, or enterprise SSO platforms.
• Experience supporting cloud services at enterprise or internet scale.
• Strong knowledge of Zero Trust architecture, passwordless authentication, WebAuthn/FIDO2, adaptive authentication, and risk-based access control.
• Experience with identity federation, directory services, SCIM provisioning, and enterprise identity integrations.
• Experience designing highly available, multi-region cloud services with disaster recovery capabilities.
• Familiarity with security and compliance frameworks such as SOC 2, ISO 27001, GDPR, or NIST.
• Experience driving engineering transformation initiatives, platform modernization, or developer productivity improvements.
• Contributions to open-source projects related to cloud infrastructure, security, identity, or Django.
• Experience collaborating with globally distributed engineering teams in a fast-paced product environment.