Software Engineer - IAM

Design, build, and harden identity and access flows — OIDC/OAuth 2.0, SAML 2.0, Active Directory integrations — that sit in front of mission-critical systems.

Own token and assertion lifecycle correctness: issuance, validation, expiry, rotation, and failure-mode handling for JWT/JWKS and SAML assertions.

Apply strong applied-cryptography and PKI practices (X.509 certs, key rotation, TLS) to keep the auth path secure by default, not as an afterthought.

Build and maintain reverse-proxy/HTTP-layer components (TLS termination, header handling) that front customer authentication traffic.

Strong hands-on programming skills in Golang.

Deep, practical knowledge of identity protocols: OIDC/OAuth 2.0 and SAML 2.0 — including token/assertion internals, standard flows, and failure modes.

Working knowledge of Active Directory.

Strong security engineering discipline — comfortable reasoning about threat models and building software to protect mission-critical systems, not just make features work.