Engineering Manager Authentication & Authorisation

Messy spend management is tricky business. And tedious processes are a lose-lose situation for all involved not just finance. At Pleo were changing that. We build spend solutions that make managing money seamless empowering and surprisingly effective for finance teams and employees alike - with a vision to help all businesses go beyond.

The word Pleo actually means more than youd expect and living by that mantra has been the secret to our success over the last 10 years.

Now were at a pivotal moment in our journey; every move we make has a direct impact on our 40000 customers our business and our collective success. We need people who take pride in uncovering customer needs who turn complex problems into simple solutions challenge the way things are done (respectfully) and always aim high. With great ambitions driving us forward we cant say weve got this whole thing figured out. And frankly thats half the fun! What we can say is that were a driven progressive and importantly a kind bunch of 850 people from over 100 nationalities all committed to delivering the future of business spending together.

Were looking for an Engineering Manager to join our Authentication and Authorisation team where youll be responsible for the strategy delivery and outcomes for the Pleos product IAM.

This is a highly complex space with a legacy custom-built service and a future-state platform currently being implemented in our Enterprise rewrite.

Success in this role means defining and executing a sensible migration path between SMB and Enterprise architectures and modernising our current auth capabilities while maintaining high security compliance performance and trust.

Youll report to our VP of Engineering and youll lead mentor and grow a team of 6- 10 software engineers. Youll work closely with Product Security Compliance and Core Platform teams to align priorities and manage dependencies and youll collaborate across the wider Backend & Infrastructure group to keep technical direction and platform standards coherent.

Ultimately your role is to foster an environment where engineers can do their best work and grow - as individuals and as a team - by setting clear expectations ensuring our ways of working enable delivery (rather than slowing it down) and holding a high bar for quality.

As an Engineering Manager you will:

• Own the vision strategy and execution roadmap for identity authentication and authorisation across SMB and Enterprise.

• Drive delivery and outcomes for the Authentication & Authorisation team ensuring we build secure scalable systems the whole platform can rely on.

• Successfully roll out a new identity platform across our Enterprise offerings.

• Define and execute a pragmatic migration strategy between the SMB legacy service and the Enterprise architecture.

• Update legacy auth services reducing risk and technical debt while maintaining high security compliance performance and trust.

• Partner closely with Product Security Compliance and Core Platform teams to align priorities unblock dependencies and keep delivery moving.

• Stay close to the technology and architecture stepping into technical discussions to guide the team through complex trade-offs.

• Continuously improve how we build software - strengthening operational excellence quality and ways of working.

• Hire coach and grow a high-performing team helping people develop while building trust and strong team dynamics.

Must have

• Solid experience as an Engineering Manager (or equivalent people-lead role) with meaningful people leadership impact (including coaching and performance support).

• Strong hands-on technical depth in authentication and authorisation domains and standards (e.g. OAuth SAML OIDC) and modern identity platforms (e.g. Amazon Cognito Auth0 Stytch) within a product centric organisation.

• Architectural credibility and a track record of guiding teams through technical complexity including migrations and legacy constraints.

• Strong stakeholder management across engineering product and risk-focused partners with clear and consistent communication.

• A bias for action: you can lead through ambiguity and still create momentum rather than getting stuck in analysis

Nice to have

• Background as a software architect or staff-level engineer before moving into people leadership.

• Experience operating in security - or compliance-sensitive domains where trust and reliability are non-negotiable.

• Experience scaling teams (hiring and building clear ownership) while maintaining delivery quality.

This role is a good fit for you if:

• You care deeply about peoples leadership and you want your team to grow thrive and ship great software together.

• You enjoy cross-team collaboration and youre energised by aligning stakeholders to solve platform-wide problems.

• You like staying close to code and architecture enough to guide technical decisions while still leading through people and outcomes.

This role is NOT a good fit for you if:

• You prefer roles where you can be removed from day-to-day delivery team dynamics and technical decision-making.

• Youre looking for a well-defined problem space with a clear migration plan already in place.

• Youre uncomfortable with ambiguity trade-offs and the reality of improving a critical legacy system while building the future state.
  

In your first 6 months youll take ownership of the auth platform roadmap build strong alignment across Backend & Infrastructure stakeholders and drive tangible progress on rolling out a new identity platform for our Enterprise offerings.
Youll also strengthen the teams delivery rhythm and operational excellence ensuring we maintain trust security and availability while moving quickly.

By 12 months youll have delivered key migration and modernisation milestones reduced legacy risk and clarified a sustainable path between SMB and Enterprise auth architectures. Youll have grown the team where needed strengthened technical ownership and helped create a high-performing environment where people can do great work and keep improving how we build.

• Your own Pleo card (no more out-of-pocket spending!)

• Lunch is on us for your work days - enjoy catered meals or receive a lunch allowance based on your local office

• Comprehensive private healthcare - depending on your location coverage options include Vitality Alan or Médis

• We offer 25 days of holiday your public holidays (additional days may apply in select countries based on local standards).

• For our Team we offer both hybrid and fully remote working options

• Option to purchase 5 additional days of holiday through a salary sacrifice

• We use MyndUp to give our employees access to free mental health and well-being support with great success so far

• Paid parental leave - we want to make sure that were supportive of families and help you feel that you dont have to compromise your family due to work
  

We want to ensure you are set-up for success and understand what will be expected of you. If your application is successful our interview process is as follows:

• Intro call: 30min chat with our Talent Partner to discuss the role and your background.

• Hiring Manager interview: 45-minute experience-based conversation with our VP of Engineering to deep dive into (technical) leadership experience achievements and complexity youve been used to.

• Pleo Challenge: A 60-minute presentation interview focusing on discussing one of your previous achievements.

• Final interview: A 30-minute leadership interview with our Chief Technical Product Officer assessing your behavioural skills and values.

Transparency is important to us so we also wanted to share some insights about what were looking for in applications to ensure you can set yourself up for success!

• CV writing and content: Using AI tools is completely fine but CVs that read like generic templates often hide what actually makes you great. Wed love to see specific examples of impact ideally in the format Achieved X as measured by Y by doing Z plus context on the systems you worked with and the constraints you operated under.

• Application care: Every application is reviewed by a human. Taking time to answer application questions clearly (and tailoring them to this role) genuinely helps you stand out.

• Profile to role fit: This role is a strong match if youve led an engineering team in a product environment and you bring real depth in authentication and authorisation (for example implementing or running platforms like Cognito/Auth0/Stytch and working with standards like OAuth SAML and OIDC). Were also looking for someone who can lead through migration complexity keep stakeholders aligned across platform/security/compliance and drive outcomes with a bias for action.

• English first. Since its our company language please submit your application in English. Youll be using it a lot if you join us.

• A fair look for everyone. Our talent team reads every single application to ensure the process is fair. To keep things running smoothly we only accept applications through our systemour support team cant pass on calls or emails.

• Diversity drives us. We can only reach our goals if our team reflects the world around us. That starts with you hitting apply even if you dont tick every single box. We encourage people from all backgrounds and experiences to join us.

• Interview at your best. We want you to feel comfortable throughout the process. If you have any accessibility requirements or need a specific format email Well design a process that works for you.

• Your data is safe. When you apply we process your personal data as a data processor. For more information on how Pleo processes personal data read our Privacy Policy here.

• Applying for multiple roles Nothing is stopping you and we assess every role independently. However we do look for alignment so make sure you can explain why your interest and experience are right for each specific role.

• Reapplying. If youre applying for the same role again please wait six months from your last decision before hitting submit.

Required Experience:

Manager