Software Engineer, Backend (Security)
Core
Build and operate the workforce identity provider (Okta) including SSO, SAML/OIDC integrations, SCIM provisioning, and joiner/mover/leaver automation.
Role type
Senior IC backend security engineer (identity systems)
Builds
Workload and headless identity infrastructure, private CA/PKI, AWS Roles Anywhere, GCP WIF-X509, and hardware-backed key custody
Domain
Cybersecurity, Identity & Access Management (IAM), Cloud Infrastructure
Required skills
Go, Java, systems programming, identity systems design (SSO/IdP), authentication and authorization, OIDC, SAML, SCIM, cryptographic primitives (PKI, mTLS), hardware-backed keys, GitOps, AWS, GCP
Preferred skills
NIST SP 800-63-3 compliance, device assurance, RBAC, least-privilege role catalogs, break-glass access design, short-lived credentials management
Technologies
Go, Java, AWS, GCP, GitOps, OIDC, SAML, SCIM, PKI, mTLS, AWS Roles Anywhere, GCP WIF-X509
Responsibilities
Design authentication and authorization primitives (MFA, RBAC, least-privilege), federate AWS and GCP access using short-lived credentials, maintain entitlements-as-code via pull requests, define Identity Assurance Level requirements, partner with IT and security teams
Seniority
Senior, hands-on IC
