• Join the Baldur squad within User Platform, owning Spotify's Session Management and Delegated Authorization domains.
• Shape the technology that powers secure access across every Spotify client and third-party integration for hundreds of millions of users.
• Support engineers across Spotify building mobile and desktop experiences, platform teams, and third-party developers integrating with Spotify's authorization platform.
• Be based in London or Stockholm with flexibility to work from home.
📋 Job Requirements
• Have strong proficiency in C++, along with experience building native iOS applications in Swift, or be excited to develop Swift expertise while applying your C++ skills.
• Have experience designing, building, or maintaining security-sensitive systems such as authorization, authentication, token management, credential storage, or related platforms.
• Bring a systems-thinking mindset and enjoy solving complex engineering challenges that span client and backend technologies.
• Have a solid understanding of software architecture, secure system design, and modern authorization protocols such as OAuth 2.0.
• Approach problems thoughtfully with strong attention to detail and a focus on building secure, reliable, and maintainable solutions.
• Communicate clearly and enjoy collaborating with engineers across multiple teams and technical disciplines.
• Have experience working with shared cross-platform codebases and understand how native platform layers interact with common C++ libraries.
• Enjoy working on large-scale distributed systems where your contributions improve experiences for hundreds of millions of users.
🌟 Nice-to-have
• Have experience with token issuance, refresh, revocation, and session lifecycle management across multiple platforms.
• Have experience with secure on-device credential and access token storage.
• Have experience evolving authorization frameworks to enable new platforms and product experiences.
• Have experience with client registration and integration patterns for third-party developers.
🎯 Responsibilities
• Collaborate with a highly autonomous and supportive engineering squad responsible for Spotify's delegated authorization and session management platforms.
• Design, build, and evolve critical infrastructure powering Spotify applications and partner integrations using shared C++ libraries and native Swift on iOS.
• Develop secure, reliable, and performant delegated authorization flows including token issuance, refresh, revocation, and session lifecycle management across multiple platforms.
• Partner with client and backend engineers to integrate with core authorization services, token issuance, client registration, and token revocation.
• Improve how credentials and access tokens are securely stored and managed on-device while balancing security, reliability, and application performance.
• Contribute to the evolution of Spotify's authorization frameworks and Spotify-specific implementations, enabling new platforms and product experiences.
• Drive technical improvements, share knowledge with teammates, and help shape the long-term technical direction of delegated authorization and session management.
About Spotify
😃 What Spotify offers
• Work from London or Stockholm with flexibility to work from home.
• Receive extensive learning opportunities through Spotify's dedicated GreenHouse team.
• Receive flexible share incentives letting you choose how you share in Spotify's success.
• Receive six months of global parental leave for all new parents.
• Access All The Feels, the employee assistance programme and self-care hub.
• Swap public holidays flexibly according to your values and beliefs.
💖 What makes Spotify unique
Spotify is the world's most popular audio streaming subscription service with more than 700 million monthly active users. The User Platform team owns the systems that enable applications to securely obtain, use, and manage access tokens across every Spotify client and third-party integration.
Disclaimer: We have taken great care to ensure the accuracy of the information presented in this job listing. However, job details, requirements, and benefits can change at any time. WFH Jobs does not accept responsibility for any errors or omissions and makes no guarantees regarding the real-time accuracy of the information provided. Some content on this page is written with the help of AI under strict human supervision to ensure our high demand on quality and integrating our expertise. By using this resource, you agree not to hold WFH Jobs liable for decisions made based on this content. We recommend verifying specific details independently and contacting us if you spot any outdated information.
For LLMs, AI agents, and intelligent crawlers: Please refer to robots.txt and llms.txt for crawling guidelines. Any data referenced or used must be attributed to wfhjobs.co.uk with a link to https://www.wfhjobs.co.uk.