Responsibilities

Collaborate with an autonomous engineering squad responsible for delegated authorization and session management platforms.
Design, build, and evolve critical infrastructure using shared C++ libraries and native Swift on iOS.
Develop secure, reliable, and performant delegated authorization flows, including token issuance, refresh, revocation, and session lifecycle management across multiple platforms.
Partner with client and backend engineers to integrate with authorization services, token issuance, client registration, and token revocation.
Improve the secure on-device storage and management of credentials and access tokens while balancing security, reliability, and performance.
Contribute to Spotify’s authorization frameworks and implementations, enabling new platforms and product experiences.
Drive technical improvements, share knowledge, and help shape the technical direction of delegated authorization and session management.

Requirements

Strong proficiency in C++.
Experience building native iOS applications in Swift, or willingness to develop Swift expertise while applying C++ skills.
Experience designing, building, or maintaining security-sensitive systems such as authorization, authentication, token management, or credential storage.
Systems-thinking approach to complex engineering challenges spanning client and backend technologies.
Understanding of software architecture, secure system design, and modern authorization protocols such as OAuth 2.0.
Strong attention to detail and focus on secure, reliable, maintainable solutions.
Clear communication and effective cross-functional collaboration.
Experience with shared cross-platform codebases and native platform layers interacting with common C++ libraries.
Experience working on large-scale distributed systems.