Spydra
Website:
spydra.app
Job details:
About The Role
We are looking for a skilled Backend Developer with strong experience in building secure, scalable backend systems and implementing modern Identity and Access Management solutions. The ideal candidate should have hands-on experience with identity platforms such as Auth0, Okta, Keycloak, Microsoft Entra ID, or similar solutions.
Key Responsibilities
- Design, develop, and maintain scalable backend services and APIs.
- Implement authentication and authorization workflows using platforms such as Auth0, Okta, Keycloak, or Microsoft Entra ID.
- Build and maintain user registration, login, logout, password reset, account recovery, and email verification workflows.
- Implement Single Sign-On and identity federation using OpenID Connect, OAuth 2.0, SAML 2.0, and related protocols.
- Design role-based and attribute-based access-control systems.
- Develop organization-level user management, tenant isolation, roles, groups, permissions, and policy-management capabilities.
- Integrate enterprise identity providers with the product.
- Implement Multi-Factor Authentication, passwordless authentication, social login, and adaptive authentication flows.
- Build secure token issuance, validation, refresh, revocation, and session-management mechanisms.
- Work with JWTs, access tokens, ID tokens, refresh tokens, API keys, service accounts, and machine-to-machine authentication.
- Implement identity-provider hooks, rules, actions, workflows, and custom authentication extensions.
- Develop APIs for user provisioning, de-provisioning, role assignment, group management, and access reviews.
- Integrate with SCIM-based user provisioning and enterprise directory systems where required.
- Build audit logs for login events, permission changes, administrative actions, and security events.
- Ensure secure storage and handling of credentials, secrets, tokens, and sensitive user information.
- Implement rate limiting, account lockout, anomaly detection, session expiration, and other security controls.
- Work with security teams to identify and remediate authentication and authorization vulnerabilities.
- Write clean, testable, maintainable, and well-documented code.
- Participate in code reviews, architecture discussions, production deployments, and incident resolution.
- Monitor backend services and troubleshoot performance, reliability, and security issues.
Required Skills
- 3 to 6 years of experience in backend software development.
- Strong programming experience in one or more : Node.js/TypeScript, Java/Spring Boot, Python/FastAPI/Django, Go, or .NET.
- Hands-on experience with at least one identity platform : Auth0, Okta, Keycloak, Microsoft Entra ID, Amazon Cognito, or Ping Identity.
- Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, SSO, MFA, and identity federation.
- Experience with RBAC, ABAC, REST APIs, and relational/NoSQL databases (PostgreSQL, MySQL, MongoDB, DynamoDB).
- Familiarity with Redis, Git, CI/CD, Docker, and cloud environments (AWS/Azure/GCP).
Preferred Qualifications
- Experience building IAM products, multi-tenant identity architecture, or integrating enterprise SAML/LDAP/Active Directory.
- Familiarity with SCIM 2.0, policy engines (OPA, Casbin, Cedar, OpenFGA), secrets management (Vault, AWS Secrets Manager), and WebAuthn/FIDO2.
- Understanding of identity-security risks (token theft, session hijacking, etc.).
- Experience with Kubernetes, microservices, and observability tools.
(ref:hirist.tech)
Click on Apply to know more.
