IAM-Focused DevSecOps Engineer • Python & API Automation

Capital Fund Management (CFM); Paris; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Capital Fund Management (CFM) is seeking a software security engineer focused on automation and IAM/IGA integrations. You will design and implement backend services in Python, develop RESTful APIs, and ensure secure authentication and authorization across cloud and on‑prem identity platforms.

You will partner with security, infrastructure, and development teams to translate access-management requirements into scalable solutions, while producing comprehensive technical documentation for APIs and

Qualifications

• Proficiency in Python backend development with web frameworks and async patterns.
• Experience designing, documenting, and operating RESTful APIs with authentication and authorization.
• Working knowledge of IAM/IGA concepts: identities, roles, provisioning, aggregation, lifecycle workflows.
• Experience with at least one identity platform (SailPoint, Okta, Ping, Keycloak) or comparable solution.
• Understanding LDAP/AD fundamentals and directory APIs.
• Familiarity with secure credential management, audit logging, and data protection for identity data.
• Solid software practices: clean code, Git, unit tests, API documentation.
• Familiarity with OWASP Top 10 security practices.
• Ability to troubleshoot complex API identity integration issues.
• Experience with agentic coding tools (Claude Code, Codex)
• Excellent communication skills for translating technical concepts into business security recommendations.

Responsabilités

• Design, build, and maintain automation services integrating with IAM/IGA and directory services.
• Develop Python backend services to support identity provisioning and group automation.
• Implement secure API authentication, authorization, rate limiting, and retries for SaaS and on‑premise integrations.
• Ensure reliable synchronization between cloud and on‑premises identity platforms and directory services.
• Collaborate with security, infra, identity, and dev teams to translate access requirements into scalable designs.
• Produce clear API and workflow documentation for production use.

Connaissances

Python backend

RESTful APIs

IAM/IGA concepts

Identity platforms

LDAP/AD basics

Secure coding (OWASP)

Git & CI/CD

API security

Troubleshooting complex integrations

Claude Code or Codex tooling

Outils

SailPoint

Okta

Keycloak

HashiCorp Vault/OpenID Connect/OAuth/SAML/SCIM

Description du poste

Capital Fund Management (CFM) is seeking a software security engineer focused on automation and IAM/IGA integrations. You will design and implement backend services in Python, develop RESTful APIs, and ensure secure authentication and authorization across cloud and on‑prem identity platforms.

You will partner with security, infrastructure, and development teams to translate access-management requirements into scalable solutions, while producing comprehensive technical documentation for APIs and