Staff Enterprise Engineer

Our mission at Duolingo is to develop the best education in the world and make it universally available. Its a big mission and thats where you come in!

At Duolingo youll join a team that cares about finding innovative solutions to complex technical problems running countless experiments (300 at a time!) with our massive user base to make data-driven decisions and educating our users and employees alike. Youll have limitless learning opportunities mentorship and collaboration with world-class minds and a variety of projects with large scopes while doing work thats both fun and meaningful.

Join our life-changing mission to develop education for our half a billion (and growing!) learners around the world.

About the role...

Duolingos Enterprise Engineering team builds and operates the internal platforms identity systems and automation that power how Duos work every day. We apply modern engineering practicesinfra as code CI/CD and internal toolsto deliver secure reliable and scalable employee experiences. As a Staff Enterprise Engineer you will lead highimpact initiatives across identity and access SaaS governance device/endpoint platforms and employee lifecycle automation. Youll partner closely with Security Finance Legal and Platform peers to set technical direction reduce toil through automation and raise the operational bar for internal systems at scale. This role is based in New York City or Pittsburgh.

You will...

• Lead design and implementation of foundational enterprise platforms and services (e.g. identity and access management SaaS integrations MDM/endpoint internal tooling) with reliability security and scalability in mind.
• Drive infrastructureascode CI/CD and configurationascode practices across Enterprise Engineering; own standards reviews and reusable modules/templates.
• Architect and automate employee lifecycle workflows (onboarding transfers offboarding) RBAC/SCIM provisioning and policy enforcement across core systems (Okta Google Workspace Slack Atlassian etc.).
• Establish and measure SLOs for internal services; build dashboards alerts and runbooks; participate in incident response and oncall for enterprise platforms.
• Partner with Security Finance Legal and Procurement to implement SaaS governance license optimization and risk controlsturning policy into maintainable testable code and workflows.
• Lead crossfunctional technical initiatives endtoend: author specs align stakeholders sequence deliverables derisk launches and land durable outcomes.
• Mentor engineers across the team; elevate documentation quality so internal tools and jobs are discoverable wellmaintained and easy to use.

You have...

• Demonstrated stafflevel impact leading large multistakeholder engineering projects to completion with measurable reliability or efficiency improvements.
• Deep handson experience with infrastructureascode and CI/CD (e.g. Terraform and modern pipelines) to manage identity SaaS or internal platform configuration.
• Strong background in identity and access management concepts and integrations (e.g. SSO/SAML/OIDC SCIM provisioning RBAC/ABAC) across enterprise systems.
• Proficiency building automations and internal tooling (scripts/services/jobs) that integrate with APIs for systems like Okta Google Workspace Slack and Atlassian.
• Operational excellence: define SLOs create dashboards/alerts/runbooks and contribute to oncall/incident response for internal platforms.
• Clear concise communication and documentation skills; ability to influence across Security Finance Legal and Platform engineering partners.
• The ability to work from or relocate to New York City or Pittsburgh.

Exceptional candidates will have...

• Experience implementing SaaS governance and license optimization programs in partnership with Finance/Procurement and Security.
• Track record building reliable employeelifecycle automation at scale (joiner/mover/leaver) including data pipelines and policy guardrails.
• Experience defining and landing engineering standards for internal platforms (module libraries templates checkers docs patterns) that are adopted orgwide.
• Prior ownership of MDM/endpoint platforms and fleetlevel automation for security/compliance baselines.
• Incident leadership experience for enterprise systems and the ability to drive postincident improvements that stick.

Take a peek at how we care for our employees holistic well-being with our benefitshere.

We will do everything we can within reason to make sure that your interview takes place in an environment that fairly and accurately assesses your skills. If you need assistance or accommodation please contact.

Duolingo is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race religion color national origin gender (including pregnancy childbirth or related medical conditions) sexual orientation gender identity gender expression age status as a protected veteran status as an individual with a disability or other applicable legally protected characteristics.

By applying for this position your data will be processed as per theDuolingo Applicant Privacy Notice.

Unfortunately there is a rise in scammers pretending to be real Duolingo employees. Duolingo and our employees will never ask for your Social Security number bank details or passport info and well never ask you to deposit a check purchase equipment or exchange money during the interview process. Real Duolingo employees always use an email that ends in@or@. Stay alert and double-check these details before sharing any information.

Sign up for job alertshere.