Senior Software Engineer - CPD (IAM)
Core
Design, build, and harden identity and access flows using OIDC/OAuth 2.0, SAML 2.0, and Active Directory integrations, managing JWT/JWKS and SAML assertions with strong cryptography and PKI practices.
Role type
Senior IC security engineer (identity and access management)
Builds
Production identity and access management components, including reverse-proxies, HTTP-layer components, and cross-platform packaging for Linux and Windows.
Domain
Cybersecurity, Identity and Access Management (IAM), Cryptography
Deliverable
production ML models | product features
Required skills
Golang, OIDC/OAuth 2.0, SAML 2.0, Active Directory, Cryptography, PKI, X.509, JWT/JWKS, TLS, Linux, Networking, Concurrency, Shell/Bash scripting
Preferred skills
Directory internals, HTTP internals, Reverse proxying, Cross-platform packaging, Secret-manager internals, Redis, Win32, Policy engines, C#/.NET
Responsibilities
Design and implement identity and access flows; Manage issuance, validation, expiry, rotation, and failure-mode handling for tokens and assertions; Apply cryptography and PKI practices; Build and maintain reverse-proxy and HTTP-layer components; Debug customer-facing identity issues; Contribute to build, release, and cross-platform packaging; Write end-to-end tests for authentication flows; Document known issues and design decisions.
Seniority
Senior, hands-on IC