Software Engineer 5 - Ads Authorization (AuthZ) Platform

Netflix
New York
Workplace: OnsiteFull timeUSD 388,000 - 558,000 annuallyFunction: Software EngineeringExperience: 5-8 yearsSkills: ["Collaboration","Systems design","Analytical reasoning"]

Design and evolve Netflix Ads’ centralized authorization platform, driving build-vs-buy evaluations of authorization vendors and contributing to a scalable policy model. Partner on low-latency decision engine architecture, integrate authz checks across services with sync/async enforcement, and build SDKs and middleware for adoption. Lead policy testing and help migrate scattered authorization logic into a single policy engine supporting multi-tenancy and audit/versioning.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Netflix
Netflix
4 days ago

Software Engineer 5 - Ads Authorization (AuthZ) Platform

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 19 hours agoStatus: Live

Job Summary

Design and evolve Netflix Ads’ centralized authorization platform, driving build-vs-buy evaluations of authorization vendors and contributing to a scalable policy model. Partner on low-latency decision engine architecture, integrate authz checks across services with sync/async enforcement, and build SDKs and middleware for adoption. Lead policy testing and help migrate scattered authorization logic into a single policy engine supporting multi-tenancy and audit/versioning.
Location: New York
Workplace: Onsite
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Co-drive build-vs-buy evaluation and vendor bake-offs for centralized authorization, comparing latency, flexibility, operational cost, and vendor lock-in.
  • •Design the authorization policy model across roles, permissions, relations, org vs. resource scoping, role hierarchies, and multi-tenancy.
  • •Architect low-latency authorization decisioning with caching, consistency tradeoffs, and audit/versioning of policies.
  • •Integrate authz checks into services with platform/security/IAM teams for both sync and async enforcement points.
  • •Build reference implementations, SDKs, and middleware plus unit testing and migration to a single centralized policy engine.

Pay and Benefits

Salary: USD 388,000 - 558,000 annually
Equity and Bonus:Equity
Perks:Health Insurance401kEquityDisabilityPaid Leave

Key Requirements

  • •5–8+ years backend/software engineering experience shipping production systems.
  • •Hands-on experience building or working on authorization systems with RBAC fundamentals and roles/permissions/resource scoping.
  • •Ability to reason through authorization tradeoffs across RBAC, ABAC, and ReBAC (relationship-based/Zanzibar-style).
  • •Exposure to evaluating/integrating a policy engine/framework such as Oso, OPA/Rego, Cerbos, OpenFGA, AuthZed/SpiceDB, or AWS Cedar (or equivalent in-house).
  • •Strong systems design skills for low-latency decision services with caching and consistency vs. performance tradeoffs.
Experience:5-8 years
Skills:CollaborationSystems designAnalytical reasoning
Tech Stack:JavaKotlinGoNodePythonOsoPermit.ioCerbosOpenFGAAuthZedAWS Verified PermissionsCedarOPARegoSpiceDBAuthNOAuthOIDCRBACABAC

Company Brief

Netflix
Global subscription streaming service that produces and distributes movies, TV series, and games across multiple devices, operating worldwide with extensive original content and localized offerings.
Industry: Streaming Platforms
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Los Gatos, United States
Founded: 1997
Glassdoor
Glassdoor: 4.1
WebsiteLinkedInGlassdoor