Software Development Engineer II - Identity Authentication Services
Summary
Builds and maintains scalable, secure authentication APIs for Expedia Group’s travel brands, ensuring seamless identity management for millions of users and partners. Core focus: backend services, identity standards (OAuth/OIDC), and AI-driven security enhancements.
At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.
Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.
Introduction to the Team
Our Technology Team partners with teams across Expedia Group to create innovative products, services, and tools to deliver high-quality experiences for travelers, partners, and our employees. A singular technology platform powered by data and machine learning provides secure, differentiated, and personalized experiences that drive loyalty and traveler satisfaction.
The Identity Authentication Services team owns and develops the backend authentication APIs and services used across Expedia Group’s many brands. As the front line of our Tier 0 platform, these services enable travelers and partners to authenticate securely and seamlessly at scale. As a Software Development Engineer II, you will help build and evolve scalable features while maintaining the exceptional availability, reliability, and low latency expected of a high-traffic authentication platform.
In this role, you will:
Design, develop, and maintain authentication and authorization services that are reliable, secure, and performant for large-scale customer and partner-facing applications.
Implement APIs, data models, and low-level designs that support identity, session management, and policy enforcement workflows across multiple products and platforms.
Collaborate with product, security, and engineering teams to translate authentication and access control requirements into technical solutions and deliver features end to end.
Own the quality, observability, and support for the services you build, including automated testing, monitoring, logging, and on-call participation for production systems.
Apply secure coding practices, threat-aware design, and familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products to continually strengthen authentication capabilities.
Contribute to technical documentation, code reviews, and knowledge sharing to enable fungibility across services and domains related to identity and access management.
Minimum Qualifications:
Bachelor’s degree in Computer Science or a related technical field; or Equivalent related professional experience.
2+ years of relevant professional experience.
Professional software development experience working on backend or distributed services, including ownership of at least one production service or component.
Proficiency in at least one modern programming language and experience with service-oriented architecture, including API design, data modeling, and low-level system design.
Experience building, integrating, or maintaining authentication, authorization, or identity-related capabilities such as login, tokens, or session management in a production environment.
Preferred Qualifications:
Experience designing and operating highly available authentication or identity services at scale, including performance optimization, caching strategies, and resiliency patterns.
Hands-on experience with modern identity and access management standards or systems (for example, OAuth, OpenID Connect, SAML, or similar) and their integration into large applications.
Demonstrated ability to drive improvements in service reliability, security, and observability, including use of metrics, logs, and traces to make data-driven decisions.
Safely integrates and operates AI/ML‑enabled solutions that improve outcomes, for example by enhancing fraud detection, risk-based authentication, or anomaly detection in sign-in flows.
Experience applying AI-assisted development or analysis tools (such as code generation, static analysis, or traffic anomaly detection) to improve the quality and security of authentication services, including opportunities to incorporate AI into developer workflows.
Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.
Benefits and perks
Expedia Group offers benefits and perks designed to support employees and their families, including medical, dental, and vision coverage, paid time off, an Employee Assistance Program, wellness and travel reimbursement, travel discounts, and International Airlines Travel Agent Network (IATAN) membership. Learn more about life at Expedia Group at .
Accommodation requests
Expedia Group is committed to providing an inclusive and accessible recruiting experience. If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation.
About Expedia Group
Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.
Important notice
Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never share sensitive personal information unless you are confident of the recipient. Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official place to find and apply for roles is .
Equal Opportunity
Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other characteristic protected by law. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.