Staff CIAM Software Engineer

What you'll do

• Design, build, and operate core CIAM backend services for registration, authentication, and account lifecycle management.
• Implement and extend identity standards including OAuth 2.0, OIDC, SAML, and SCIM in production code.
• Develop backend APIs and services using Python and Kotlin for web, mobile, and partner applications.
• Integrate CIAM platforms with internal user data stores, messaging systems, and fraud signals.
• Own secure authentication flows including MFA, step-up authentication, device binding, and adaptive logic.
• Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
• Monitor, debug, and optimize services for performance, resilience, and abuse detection in high-scale environments.

What we're looking for

• 7+ years of experience designing, developing, and launching backend systems at scale using Python or Kotlin.
• 5+ years of professional backend software engineering experience.
• Extensive track record of developing highly available distributed systems using AWS, MySQL, Spark, and Kubernetes.
• Strong experience designing and implementing CIAM systems with deep knowledge of OAuth 2.0, OIDC, SAML, and SCIM.
• Experience with Infrastructure as Code (Terraform), CI/CD pipelines, and GitHub-based development workflows.
• Strong security fundamentals including access control models, token handling, encryption, MFA, and privacy by design.
• Experience with cloud-native development, preferably AWS (preferred).
• Familiarity with tools such as Cursor and other AI-augmented development environments (preferred).