Senior Enterprise Engineer

• Our mission at Duolingo is to develop the best education in the world and make it universally available. It's a big mission, and that's where you come in!
• At Duolingo, you'll join a team that cares about finding innovative solutions to complex technical problems , running countless experiments (300+ at a time!) with our massive user base to make data-driven decisions, and educating our users and employees alike.
• You'll have limitless learning opportunities, mentorship and collaboration with world-class minds, and a variety of projects with large scopes — while doing work that's both fun and meaningful.
• Join our life-changing mission to develop education for our half a billion (and growing!) learners around the world.

About the role

• Duolingo's Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day.
• We apply modern engineering practices—infra as code, CI/CD, and internal tools—to deliver secure, reliable, and scalable employee experiences.
• As a Senior Enterprise Engineer, you will design and ship high‑impact projects across identity and access, SaaS integrations and governance, device/endpoint platforms, and employee lifecycle automation.
• You'll partner closely with Security, Finance, Legal, and Platform to reduce toil through automation, improve reliability, and turn policy into maintainable workflows and code.
• This role is based in New York City or Pittsburgh.
• We believe exceptional candidates come from all backgrounds.
• If you meet only some of the

qualifications

below, we encourage you to apply!

🧠 You will...

• Design and implement foundational enterprise services (e.g., identity and access management, SaaS integrations, MDM/endpoint, internal tooling) with reliability, security, and scalability in mind.
• Build and evolve infrastructure‑as‑code, CI/CD, and configuration‑as‑code patterns; contribute modules/templates and participate in reviews to raise the engineering bar across Enterprise Engineering.
• Automate employee lifecycle workflows (onboarding, transfers, offboarding), RBAC/SCIM provisioning, and policy enforcement across core systems like Okta, Google Workspace, Slack, and Atlassian.
• Define and measure SLOs for internal services; create dashboards, alerts, and runbooks; participate in incident response and on‑call for enterprise platforms.
• Partner with Security, Finance, Legal, and Procurement to implement SaaS governance, license optimization, and risk controls—codifying processes into auditable, testable workflows.
• Deliver cross‑functional initiatives end‑to‑end: author clear specs, align stakeholders, de‑risk launches, and land durable outcomes with strong documentation.

✅ You have...

• Proven impact shipping multi‑stakeholder engineering projects that improve reliability, efficiency, or employee experience at scale.
• Hands‑on experience with infrastructure‑as‑code and CI/CD (e.g., Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration.
• Strong background in identity and access management concepts and integrations (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems.
• Proficiency building automations and internal tooling that integrate with APIs for systems like Okta, Google Workspace, Slack, and Atlassian.
• Operational excellence: you define SLOs, build dashboards/alerts/runbooks, and contribute to on‑call/incident response for internal platforms.
• Clear, concise communication and documentation skills; you collaborate effectively with Security, Finance, Legal, and Platform partners.
• The ability to work from or relocate to New York City or Pittsburgh.

⭐ Exceptional candidates will have...

• Experience implementing SaaS governance and license optimization programs with Finance/Procurement and Security partners.
• A track record building reliable joiner/mover/leaver automation at scale, including data pipelines and policy guardrails.
• Experience defining and landing engineering standards for internal platforms (module libraries, templates, checkers, documentation patterns) adopted org‑wide.
• Prior ownership of MDM/endpoint platforms and fleet‑level automation for security/compliance baselines.
• Incident leadership experience for enterprise systems and the ability to drive lasting post‑incident improvements.

• The offered salary is dependent upon several factors, including work experience, skills, and internal peer comparisons.
• The posted range is subject to change in the future.
• For this role, base salary is supplemented by equity compensation.
• We encourage you to talk with your recruiter for more information related to compensation for this role!

Salary Range:

$162,400 — $219,700 USD

Benefits

Take a peek at how we care for our employees' holistic well-being with our benefits here .

We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

• Duolingo and our employees will never ask for your Social Security number, bank details, or passport info, and we'll never ask you to deposit a check, purchase equipment, or exchange money during the interview process.
• Real Duolingo employees always use an email that ends in @duolingo.com or @recruiting.duolingo.com.
• Stay alert and double-check these details before sharing any information.
• By applying for this position your data will be processed as per the Duolingo Applicant Privacy Notice .