Spydra - Backend Developer - Identity & Access Management

About the Role : We are looking for a skilled Backend Developer with strong experience in building secure, scalable backend systems and implementing modern Identity and Access Management solutions. The ideal candidate should have hands-on experience with identity platforms such as Auth0, Okta, Keycloak, Microsoft Entra ID, or similar solutions. Key Responsibilities : - Design, develop, and maintain scalable backend services and APIs. - Implement authentication and authorization workflows using platforms such as Auth0, Okta, Keycloak, or Microsoft Entra ID. - Build and maintain user registration, login, logout, password reset, account recovery, and email verification workflows. - Implement Single Sign-On and identity federation using OpenID Connect, OAuth 2.0, SAML 2.0, and related protocols. - Design role-based and attribute-based access-control systems. - Develop organization-level user management, tenant isolation, roles, groups, permissions, and policy-management capabilities. - Integrate enterprise identity providers with the product. - Implement Multi-Factor Authentication, passwordless authentication, social login, and adaptive authentication flows. - Build secure token issuance, validation, refresh, revocation, and session-management mechanisms. - Work with JWTs, access tokens, ID tokens, refresh tokens, API keys, service accounts, and machine-to-machine authentication. - Implement identity-provider hooks, rules, actions, workflows, and custom authentication extensions. - Develop APIs for user provisioning, de-provisioning, role assignment, group management, and access reviews. - Integrate with SCIM-based user provisioning and enterprise directory systems where required. - Build audit logs for login events, permission changes, administrative actions, and security events. - Ensure secure storage and handling of credentials, secrets, tokens, and sensitive user information. - Implement rate limiting, account lockout, anomaly detection, session expiration, and other security controls. - Work with security teams to identify and remediate authentication and authorization vulnerabilities. - Write clean, testable, maintainable, and well-documented code. - Participate in code reviews, architecture discussions, production deployments, and incident resolution. - Monitor backend services and troubleshoot performance, reliability, and security issues. Required Skills : - 3 to 6 years of experience in backend software development. - Strong programming experience in one or more : Node.js/TypeScript, Java/Spring Boot, Python/FastAPI/Django, Go, or .NET. - Hands-on experience with at least one identity platform : Auth0, Okta, Keycloak, Microsoft Entra ID, Amazon Cognito, or Ping Identity. - Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, SSO, MFA, and identity federation. - Experience with RBAC, ABAC, REST APIs, and relational/NoSQL databases (PostgreSQL, MySQL, MongoDB, DynamoDB). - Familiarity with Redis, Git, CI/CD, Docker, and cloud environments (AWS/Azure/GCP). Preferred Qualifications : - Experience building IAM products, multi-tenant identity architecture, or integrating enterprise SAML/LDAP/Active Directory. - Familiarity with SCIM 2.0, policy engines (OPA, Casbin, Cedar, OpenFGA), secrets management (Vault, AWS Secrets Manager), and WebAuthn/FIDO2. - Understanding of identity-security risks (token theft, session hijacking, etc.). - Experience with Kubernetes, microservices, and observability tools.