Software Engineering SMTS, Enterprise IAM joins the Enterprise Security Engineering team to build and operate scalable, fault-tolerant Identity and Access Management services. As a full-stack engineer, you will design and develop end-to-end capabilities including identity lifecycle, authentication, authorization, and Privileged Access Management. You will build backend services, APIs, and modern web front-ends to secure non-human identities and autonomous workloads within a Zero Trust architecture. Key technologies include Java, Go, Python, React, Kubernetes, Docker, and Terraform. You will utilize SCIM, REST, and event-driven patterns while integrating with directories and downstream applications. The role involves solving complex security problems by embedding audit controls like SOX and NIST into the platform, ensuring secure access for agents and humans across public cloud infrastructure and internal data centers.
Design, build, and operate scalable IAM services and APIs for identity lifecycle, access requests, and role management.
Build Privileged Access Management (PAM) capabilities including credential vaulting, session control, and just-in-time access flows.
Model and secure non-human identities such as service accounts, agents, and machine credentials.
Develop full-stack features including backend services and modern web front-ends for IAM self-service and administration.
Manage containerized workloads using Kubernetes, Docker, and infrastructure-as-code tools like Terraform.
Integrate identity sources and downstream applications using SCIM, REST, and event-driven patterns.
Embed separation of duties and audit controls into the platform to meet SOX, NIST, and SOC 2 standards.
Ship production-grade software using AI-driven development workflows and modern engineering practices.
What we're looking for
You must have 5 or more years of professional software development experience building distributed systems in SaaS, PaaS, or IaaS environments.
You must have full-stack proficiency in backend languages like Java, Go, and/or Python, plus front-end experience with React.
You must have a solid understanding of the IAM domain, including authentication, authorization, RBAC, and protocols like OAuth 2.0, OIDC, SAML, SCIM, and LDAP.
You must have experience with public cloud platforms (AWS, Azure, or GCP), containers (Docker, Kubernetes), and infrastructure-as-code tools like Terraform.
You must have hands-on experience with CI/CD, source control (Git, Jenkins), secure coding, and defensive programming.
You must have a Bachelor's degree in Computer Science, Engineering, or a related field, or have equivalent practical experience.
You must demonstrate an AI-first engineering approach, including experience using AI tools like GitHub Copilot or Cursor and advanced prompt engineering skills.
You should have experience integrating AI and agentic capabilities into IAM workflows (preferred).