About this role
We're looking for a Software Engineer with Identity and Access Management (IAM) domain experience to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem.
This is primarily an application engineering role, not a Kubernetes, DevOps, SRE, or infrastructure engineering position. You'll work on the identity platform itself. Investigating authentication and authorization issues, onboarding applications, maintaining Node.js/TypeScript services, implementing platform enhancements, and troubleshooting complex OAuth2 and OpenID Connect workflows.
The ideal candidate has hands-on experience building, supporting, or extending identity platforms and a strong understanding of OAuth2, OpenID Connect, JWTs, claims, scopes, MFA, and identity federation. You should be comfortable reading and modifying application code, debugging production issues, and diagnosing problems across application, data, and infrastructure layers.
This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused.
What you'll doSupport day-to-day operation of the OIDC platformInvestigate authentication and authorization issuesAssist with client registrations, configuration changes, and onboardingMaintain Node.js and TypeScript servicesSupport MFA integrations and identity federationMonitor platform health and respond to incidentsDevelop automation and operational toolingSupport Elasticsearch and Redis-based servicesParticipate in on-call rotationsRequirements
Identity and security2–4 years of experience working with OAuth2 and OpenID ConnectUnderstanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, Claims and Scopes, MFA concepts, and Identity FederationDevelopmentNode.js and TypeScript experienceREST API developmentGit-based workflowsPlatform and infrastructureKubernetes fundamentalsLinux administrationMonitoring and troubleshooting skillsBasic Elasticsearch knowledgeNice to haveExperience with oidc-provider, Keycloak, Zitadel, or AuthentikActive Directory or Azure AD / Entra IDBenefits
Portainer is a leading tech company offering a broad benefits package including a highly competitive salary and the ability to work anywhere in the world while still being part of a dynamic team taking on some of the most interesting challenges in the technology/infrastructure space.