Senior Software Engineer I

• Build and evolve authentication flows, including workforce SSO federation (SAML/OIDC), passwordless login for agents and consumers, and machine-to-machine access for service integrations.
• Design and implement fine-grained authorization that combines role-, attribute-, and relationship-based access control (RBAC, ABAC, ReBAC) to scope access by carrier, product, distributor, hierarchy, and delegation.
• Build automated provisioning and lifecycle handling so access stays current as users are onboarded, transferred, given delegated access, or terminated.
• Design, document, and maintain the CIAM APIs that other Zinnia teams consume.
• Partner with product teams to onboard new applications onto our CIAM integration pattern.
• Own the quality and reliability of what you ship through automated testing, code review, observability, and on-call participation.
• Work with security and compliance teams to implement access controls, support audits, and keep every access decision logged and explainable.

Who you are

Zinnia is looking for a Senior Software Engineer to join our Enterprise API & CIAM team. Our Customer Identity and Access Management (CIAM) platform handles authentication and fine-grained authorization for carriers, distributors, agents, policyholders, and service integrations across Zinnia Live, Market Connect, and our TPA services. You’ll extend and scale this production platform by building new identity flows, evolving our authorization model, and helping product teams across Zinnia integrate securely.

You’ll work closely with the CIAM tech lead, product management, and security and compliance partners in a regulated insurance environment.

What you’ll need

• 6+ years of professional software development experience, including building and operating production services in the cloud (AWS preferred).
• Hands-on experience implementing OAuth 2.0, OpenID Connect, and SAML, including federation with external identity providers.
• Experience with a CIAM platform such as Auth0 (preferred), Okta, or PingOne.
• Experience designing authorization systems beyond basic roles, such as attribute- or relationship-based models.
• Strong backend skills in TypeScript/Node.js, or a comparable language, with solid fundamentals in API design, testing, and software design.
• Working knowledge of CI/CD, infrastructure as code, containers, and monitoring and alerting.
• Clear written and verbal communication, and the ability to work with engineers, product managers, and security partners across a distributed team.
• Experience working in an Agile/Scrum environment.

• Experience with OpenFGA, Auth0 FGA, or other Zanzibar-style authorization systems.
• Experience with event-driven architectures (Kafka/Confluent), API gateways (Kong), MongoDB, Terraform, or Datadog.
• Background in insurance, financial services, or another regulated industry, especially agent and distributor hierarchies, licensing and appointments, or delegated access.

WHAT’S IN IT FOR YOU?

Notice for California residents: Information about how we collect and use your personal information can be found here

Zinnia is the leading technology platform for accelerating life and annuities growth. With innovative enterprise solutions and data insights, Zinnia simplifies the experience of buying, selling, and administering insurance products. All of which enables more people to protect their financial futures. Our success is driven by a commitment to three core values: be bold, team up, deliver value – and that we do. Zinnia has over $180 billion in assets under administration, serves 100+ carrier clients, 2500 distributors and partners, and over 2 million policyholders.