Senior Software Development Engineer, Authorization

Job Description:

At Remitly, we believe everyone deserves the freedom to access, move, and manage their money wherever life takes them. Since 2011, we've tirelessly delivered on our promise to customers sending money globally, providing secure, simple, and reliable ways to manage their money, ensuring true peace of mind. Whether it's supporting loved ones back home, growing a business across continents, or pursuing new opportunities abroad, we're not just here to move money— we're here to move our global customers forward.

We're looking for builders, reimaginers, and global thinkers who want to work at the intersection of technology, trust, and transformation. If that's you and you're ready to do the most meaningful work of your career—we invite you to join over 2,800 passionate Remitlians worldwide who are united by our vision to transform lives with trusted financial services that transcend borders.

About the Role:

Remitly's Authorization Team builds the secure, scalable, and high-performance access control systems that protect every customer interaction across Remitly's platform. As a security engineering expert on this team, you will own the design and evolution of our authorization infrastructure — the systems that determine what every user, service, and partner can and cannot do. You will become a product expert and have the opportunity to influence key decisions that shape the charters you work in.

You'll collaborate with engineers, product managers, and compliance experts to deliver solutions that enforce least-privilege access, meet regulatory requirements, and empower our customers to trust Remitly as their preferred financial platform. You will report to the Senior Engineering Manager in Vancouver.

You Will:

Design, maintain and own authorization infrastructure — including access control frameworks, policy engines, and entitlement systems — ensuring correctness, reliability, and high-performance d threat modeling and security design reviews for authorization systems and their integrations, applying adversarial thinking to stress-test access control decisions before they reach production.

Define and enforce security architecture standards across engineering teams that consume authorization services, acting as a trusted security authority and partner.

Collaborate with engineering, product, and compliance teams to define and deliver technical solutions from concept through launch and support.

Develop and improve RBAC, ABAC, and policy-as-code models, driving high standards of quality, maintainability, and observability.

Proactively identify and remediate security vulnerabilities in access control systems, including privilege escalation risks, insecure direct object references, and broken access control patterns.

Contribute to the team's technical strategy, code reviews, and ongoing process improvements.

Champion Remitly's values by fostering inclusion, mentoring peers, and elevating engineering practices.

Support customers onboarding onto the Authorization platform.

You Have:

A BS in Computer Science or equivalent professional experience.
8+ years of experience in backend and/or distributed systems engineering (e.g., Java, Go, Node.js, Type Script)
Have deep expertise in access control models, authorization system design, and applied security engineering — not just as a user of security services, but as an owner and builder of them.

Hands-on experience with authorization frameworks and access control patterns, including RBAC, ABAC, ReBAC, and policy languages such as Cedar or OPA/Rego.

A track record of conducting threat modeling and security design reviews for distributed systems, with familiarity with common attack patterns against authorization systems (e.g., privilege escalation, IDOR,…