Staff Enterprise Engineer

Our mission at Duolingo is to develop the best education in the world and make it universally available. It’s a big mission, and that’s where you come in! At Duolingo, you’ll join a team that cares about finding innovative solutions to complex technical problems, running countless experiments (300+ at a time!) with our massive user base to make data-driven decisions, and educating our users and employees alike. You’ll have limitless learning opportunities, mentorship and collaboration with world-class minds, and a variety of projects with large scopes — while doing work that’s both fun and meaningful. Join our life-changing mission to develop education for our half a billion (and growing!) learners around the world. About the role... Duolingo’s Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day. We apply modern engineering practices—infra as code, CI/CD, and internal tools—to deliver secure, reliable, and scalable employee experiences. As a Staff Enterprise Engineer, you will lead high‑impact initiatives across identity and access, SaaS governance, device/endpoint platforms, and employee lifecycle automation. You’ll partner closely with Security, Finance, Legal, and Platform peers to set technical direction, reduce toil through automation, and raise the operational bar for internal systems at scale. This role is based in New York City or Pittsburgh. 🧠 You will... Lead design and implementation of foundational enterprise platforms and services (e.g., identity and access management, SaaS integrations, MDM/endpoint, internal tooling) with reliability, security, and scalability in mind. Drive infrastructure‑as‑code, CI/CD, and configuration‑as‑code practices across Enterprise Engineering; own standards, reviews, and reusable modules/templates. Architect and automate employee lifecycle workflows (onboarding, transfers, offboarding), RBAC/SCIM provisioning, and policy enforcement across core systems (Okta, Google Workspace, Slack, Atlassian, etc.). Establish and measure SLOs for internal services; build dashboards, alerts, and runbooks; participate in incident response and on‑call for enterprise platforms. Partner with Security, Finance, Legal, and Procurement to implement SaaS governance, license optimization, and risk controls—turning policy into maintainable, testable code and workflows. Lead cross‑functional technical initiatives end‑to‑end: author specs, align stakeholders, sequence deliverables, de‑risk launches, and land durable outcomes. Mentor engineers across the team; elevate documentation quality so internal tools and jobs are discoverable, well‑maintained, and easy to use. ✅ You have... Demonstrated staff‑level impact leading large, multi‑stakeholder engineering projects to completion with measurable reliability or efficiency improvements. Deep hands‑on experience with infrastructure‑as‑code and CI/CD (e.g., Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration. Strong background in identity and access management concepts and integrations (e.g., SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems. Proficiency building automations and internal tooling (scripts/services/jobs) that integrate with APIs for systems like Okta, Google Workspace, Slack, and Atlassian. Operational excellence: define SLOs, create dashboards/alerts/runbooks, and contribute to on‑call/incident response for internal platforms. Clear, concise communication and documentation skills; ability to influence across Security, Finance, Legal, and Platform engineering partners. The ability to work from or relocate to New York City or Pittsburgh. ⭐ Exceptional candidates will have... Experience implementing SaaS governance and license optimization programs in partnership with Finance/Procurement and Security. Track record building reliable employee‑lifecycle automation at scale (joiner/mover/leaver), including data pipelines and policy guardrails. Experience defining and landing engineering standards for internal platforms (module libraries, templates, checkers, docs patterns) that are adopted org‑wide. Prior ownership of MDM/endpoint platforms and fleet‑level automation for security/compliance baselines. Incident leadership experience for enterprise systems and the ability to drive post‑incident improvements that stick. We post a multi-level salary range for all of our roles. This is not inclusive of the rest of our awesome portfolio that includes equity compensation and world-class benefits. Our salary ranges are the same for all US locations. Your recruiter can share more details about the range for a specific level during the hiring process. The actual salary within the range is determined by many factors including but not limited to, skills, experience, education, and internal equity. Salary Range: $181,600—$272,400 USD Take a peek at how we care for our employees' holistic well-being with our benefits here. We will do everything we can within reason to make sure that your interview takes place in an environment that fairly and accurately assesses your skills. If you need assistance or accommodation, please contact accommodations@duolingo.com. Duolingo is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. By applying for this position your data will be processed as per the Duolingo Applicant Privacy Notice. Sign up for job alerts here.