Sr. Fullstack Engineer - Identity Platform

Responsibilities

• Design and extend enterprise authentication infrastructure including SAML SSO, SCIM provisioning, OAuth/OIDC flows, multi-factor authentication, login, sign-up, and secure sessions for large organizations.
• Own user session auth across services (monolith, Node.js, Go microservices), evolving JWT validation, token exchange, and session tracking.
• Build enterprise authentication controls and compliance features like forced SSO, domain capture, admin policies, JWT key rotation, token refresh, and session expiry.
• Develop platform APIs, libraries, and contracts for other teams, ensuring backward compatibility, documentation, adoption, integration guides, and migrations.

Requirements

• Experience building identity systems for enterprise SaaS at scale: SAML, SCIM, OAuth/OIDC, JWT in multi-tenant environments; handle token replay, session fixation, key rotation, multi-IdP federation, just-in-time provisioning.
• Daily workflow using AI agents for code generation/review, with experience in models, failure modes, mitigations, and enabling team.
• Built platform systems other teams depend on, with backward compatibility and good boundaries.
• Comfortable fullstack: Python, Node.js, Django, Fastify, React, Kubernetes, Terraform, CI/CD.
• Ship fast through ambiguity with prototypes, treat compliance/security as constraints, work close to customers (enterprise buyers and internal teams).

Nice-to-haves

• Thought leader in Identity domain following industry trends and best practices.
• Enable others on AI workflows.