Software Engineer - IAM

Location

• The role is listed in Pune.

About the role

Responsibilities

• Design, build, and harden identity and access flows using OIDC/OAuth 2.0, SAML 2.0, and Active Directory integrations.
• Own issuance, validation, expiry, rotation, and failure-mode handling for tokens and assertions.
• Apply X.509, key rotation, TLS, applied cryptography, and PKI practices.
• Build and maintain reverse-proxy and HTTP-layer components for customer authentication traffic.
• Debug customer-facing identity and access issues with support teams.
• Contribute to build, release, and cross-platform packaging for Linux and Windows.
• Maintain a Windows companion application written in C#/.NET.
• Write end-to-end tests for authentication flows, failure modes, and edge cases.
• Document known issues, workarounds, and design decisions.
• Communicate design tradeoffs, security posture, and escalation status to stakeholders.

Required qualifications

• Strong hands-on programming skills in Golang.
• Deep practical knowledge of OIDC/OAuth 2.0 and SAML 2.0.
• Working knowledge of Active Directory.
• Applied cryptography and PKI experience with X.509, JWT/JWKS, key rotation, and TLS.
• Security engineering discipline and comfort reasoning about threat models.
• Understanding of operating system fundamentals, networking, and concurrency.
• Working knowledge of Linux and comfort writing shell or Bash scripts.
• Simple, effective written and verbal communication.

Preferred qualifications

• Knowledge of directory internals, HTTP internals, or reverse proxying.
• Experience with build and release processes or cross-platform packaging.
• Knowledge of secret-manager internals, Redis, Win32, or policy engines.
• Basic C#/.NET experience.