About the Role :

We are looking for a skilled Backend Developer with strong experience in building secure, scalable backend systems and implementing modern Identity and Access Management solutions. The ideal candidate should have hands-on experience with identity platforms such as Auth0, Okta, Keycloak, Microsoft Entra ID, or similar solutions.

Key Responsibilities :

- Design, develop, and maintain scalable backend services and APIs.

- Implement authentication and authorization workflows using platforms such as Auth0, Okta, Keycloak, or Microsoft Entra ID.

- Build and maintain user registration, login, logout, password reset, account recovery, and email verification workflows.

- Implement Single Sign-On and identity federation using OpenID Connect, OAuth 2.0, SAML 2.0, and related protocols.

- Design role-based and attribute-based access-control systems.

- Develop organization-level user management, tenant isolation, roles, groups, permissions, and policy-management capabilities.

- Integrate enterprise identity providers with the product.

- Implement Multi-Factor Authentication, passwordless authentication, social login, and adaptive authentication flows.

- Build secure token issuance, validation, refresh, revocation, and session-management mechanisms.

- Work with JWTs, access tokens, ID tokens, refresh tokens, API keys, service accounts, and machine-to-machine authentication.

- Implement identity-provider hooks, rules, actions, workflows, and custom authentication extensions.

- Develop APIs for user provisioning, de-provisioning, role assignment, group management, and access reviews.

- Integrate with SCIM-based user provisioning and enterprise directory systems where required.

- Build audit logs for login events, permission changes, administrative actions, and security events.

- Ensure secure storage and handling of credentials, secrets, tokens, and sensitive user information.

- Implement rate limiting, account lockout, anomaly detection, session expiration, and other security controls.

- Work with security teams to identify and remediate authentication and authorization vulnerabilities.

- Write clean, testable, maintainable, and well-documented code.

- Participate in code reviews, architecture discussions, production deployments, and incident resolution.

- Monitor backend services and troubleshoot performance, reliability, and security issues.

Required Skills :

- 3 to 6 years of experience in backend software development.

- Strong programming experience in one or more : Node.js/TypeScript, Java/Spring Boot, Python/FastAPI/Django, Go, or .NET.

- Hands-on experience with at least one identity platform : Auth0, Okta, Keycloak, Microsoft Entra ID, Amazon Cognito, or Ping Identity.

- Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, SSO, MFA, and identity federation.

- Experience with RBAC, ABAC, REST APIs, and relational/NoSQL databases (PostgreSQL, MySQL, MongoDB, DynamoDB).

- Familiarity with Redis, Git, CI/CD, Docker, and cloud environments (AWS/Azure/GCP).

Preferred Qualifications :

- Experience building IAM products, multi-tenant identity architecture, or integrating enterprise SAML/LDAP/Active Directory.

- Familiarity with SCIM 2.0, policy engines (OPA, Casbin, Cedar, OpenFGA), secrets management (Vault, AWS Secrets Manager), and WebAuthn/FIDO2.

- Understanding of identity-security risks (token theft, session hijacking, etc.).

- Experience with Kubernetes, microservices, and observability tools.