DevSecOps Engineer: IAM & API Automation

Capital Fund Management (CFM); Paris; Sur place; EUR 70 000 - 120 000; Plein temps

Résumé du poste

Capital Fund Management is seeking a software security automation engineer to design and implement automation that strengthens our security posture. You will report to the Director of Application Security and collaborate with the Information Security team as well as development, infrastructure, and operations across the firm.

The role focuses on building automation for identity governance integrations, secure API design, and reliable synchronization between cloud and on‑premises directory

Qualifications

• Proficiency in Python backend development with web frameworks and asynchronous programming.
• Hands-on experience designing, developing, documenting, and operating RESTful APIs with authentication.
• Working knowledge of IAM/IGA concepts such as identities, roles, provisioning, aggregation, and lifecycle workflows.
• Experience with at least one identity platform (e.g., SailPoint, Okta, Ping Identity, Keycloak).
• Understanding of LDAP/AD fundamentals, including schemas, authentication and directory APIs.
• Familiarity with secure credential management, audit logging, and data protection for identity data.
• Solid software engineering practices: clean code, Git, unit testing, API documentation.
• Familiar with secure coding practices including OWASP Top 10.
• Ability to troubleshoot complex integration issues across APIs and identity platforms.
• Hands-on experience with agentic coding tools (e.g., Claude Code).
• Excellent written and verbal communication skills for security recommendations.

Responsabilités

• Design, build, and maintain automation services integrating with IGA, directory services, and security systems via APIs.
• Develop RESTful APIs and backend services in Python for identity aggregation, provisioning workflows, and group management.
• Implement secure API authentication, authorization, rate-limiting, retries, and transformations for SaaS and enterprise integrations.
• Support synchronization between cloud identity platforms and on‑premises or cloud directories, including conflict handling.
• Collaborate with security, infrastructure, identity, and development teams to translate access-management requirements into scalable designs.
• Produce clear technical documentation for APIs, workflows, and operational procedures.

Connaissances

Python backend

REST APIs

IAM/IGA concepts

Identity platforms

LDAP/AD basics

Secure credentials

Git & tests

OWASP Top10

Troubleshooting

Claude Code

Communication skills

Description du poste

Capital Fund Management is seeking a software security automation engineer to design and implement automation that strengthens our security posture. You will report to the Director of Application Security and collaborate with the Information Security team as well as development, infrastructure, and operations across the firm.

The role focuses on building automation for identity governance integrations, secure API design, and reliable synchronization between cloud and on‑premises directory