Requirements

You have strong proficiency in C++, along with experience building native iOS applications in Swift, or you're excited to develop your expertise in Swift while applying your C++ skills.
You have experience designing, building, or maintaining security-sensitive systems such as authorization, authentication, token management, credential storage, or related platforms.
You bring a systems-thinking mindset and enjoy solving complex engineering challenges that span client and backend technologies.
You have a solid understanding of software architecture, secure system design, and modern authorization protocols such as OAuth 2.0.
You approach problems thoughtfully, with strong attention to detail and a focus on building secure, reliable, and maintainable solutions.
You communicate clearly and enjoy collaborating with engineers across multiple teams and technical disciplines.
You have experience working with shared cross-platform codebases and understand how native platform layers interact with common C++ libraries.
You enjoy working on large-scale distributed systems where your contributions improve experiences for hundreds of millions of Spotify users.

What You'll Be Doing

Collaborate with a highly autonomous and supportive engineering squad responsible for Spotify’s delegated authorization and session management platforms.
Design, build, and evolve critical infrastructure powering Spotify applications and partner integrations using shared C++ libraries and native Swift on iOS.
Develop secure, reliable, and performant delegated authorization flows, including token issuance, refresh, revocation, and session lifecycle management across multiple platforms.
Partner with client and backend engineers to integrate with core authorization services, including Keymaster for OAuth token issuance, client registration, and token revocation.
Improve how credentials and access tokens are securely stored and managed on-device while balancing security, reliability, and application performance.
Contribute to the evolution of Spotify’s authorization frameworks, including OAuth 2.0 and Spotify-specific implementations, enabling new platforms and product experiences.
Drive technical improvements, share knowledge with teammates, and help shape the long-term technical direction of delegated authorization and session management.

This role is based in London or Stockholm.
We offer you the flexibility to work where you work best! There will be some in-person meetings but still allows for flexibility to work from home.