Spydra - Backend Developer - Identity & Access Management

Spydra; Bengaluru; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Spydra is seeking a skilled Backend Developer to build secure, scalable backend systems and IAM solutions. You will work with identity platforms like Auth0, Okta, Keycloak, and Entra ID to design robust authentication and authorization workflows.

You will implement SSO, RBAC/ABAC, and secure token handling, collaborate with security teams, and write clean, well-documented code. The role expects 3–6 years of backend experience and a strong command of modern tech stacks and cloud environments.

Qualifications

• 3 to 6 years of backend software development experience.
• Proficient in one or more: Node.js/TypeScript, Java/Spring Boot, Python/FastAPI/Django, Go, or .NET.
• Hands-on experience with identity platforms (Auth0, Okta, Keycloak, Entra ID, Cognito, Ping).
• Strong knowledge of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA.
• Experience with RBAC/ABAC, REST APIs, and relational/NoSQL databases.
• Familiarity with Redis, Git, CI/CD, Docker, and cloud environments (AWS/Azure/GCP).

Responsibilities

• Design, develop, and maintain scalable backend services and APIs.
• Implement authentication and authorization workflows using identity platforms.
• Build user management, roles, and access-control features.
• Integrate with enterprise identity providers and SSO protocols.
• Write clean, tested, maintainable code and participate in reviews/deployments.
• Monitor services for performance, reliability, and security issues.

Skills

Backend development

Node.js/TypeScript

Java/Spring Boot

Python/FastAPI/Django

Identity platforms

OAuth 2.0/OpenID Connect

REST APIs

Databases (SQL/NoSQL)

Redis

Docker

CI/CD

Cloud environments

Tools

AWS/Azure/GCP

Job description

We are looking for a skilled Backend Developer with strong experience in building secure, scalable backend systems and implementing modern Identity and Access Management solutions. The ideal candidate should have hands-on experience with identity platforms such as Auth0, Okta, Keycloak, Microsoft Entra ID, or similar solutions.

We are looking for a skilled Backend Developer with strong experience in building secure, scalable backend systems and implementing modern Identity and Access Management solutions. The ideal candidate should have hands-on experience with identity platforms such as Auth0, Okta, Keycloak, Microsoft Entra ID, or similar solutions.

Key Responsibilities

• Design, develop, and maintain scalable backend services and APIs.
• Implement authentication and authorization workflows using platforms such as Auth0, Okta, Keycloak, or Microsoft Entra ID.
• Build and maintain user registration, login, logout, password reset, account recovery, and email verification workflows.
• Implement Single Sign-On and identity federation using OpenID Connect, OAuth 2.0, SAML 2.0, and related protocols.
• Design role-based and attribute-based access-control systems.
• Develop organization-level user management, tenant isolation, roles, groups, permissions, and policy-management capabilities.
• Integrate enterprise identity providers with the product.
• Implement Multi-Factor Authentication, passwordless authentication, social login, and adaptive authentication flows.
• Build secure token issuance, validation, refresh, revocation, and session-management mechanisms.
• Work with JWTs, access tokens, ID tokens, refresh tokens, API keys, service accounts, and machine-to-machine authentication.
• Implement identity-provider hooks, rules, actions, workflows, and custom authentication extensions.
• Develop APIs for user provisioning, de-provisioning, role assignment, group management, and access reviews.
• Integrate with SCIM-based user provisioning and enterprise directory systems where required.
• Build audit logs for login events, permission changes, administrative actions, and security events.
• Ensure secure storage and handling of credentials, secrets, tokens, and sensitive user information.
• Implement rate limiting, account lockout, anomaly detection, session expiration, and other security controls.
• Work with security teams to identify and remediate authentication and authorization vulnerabilities.
• Write clean, testable, maintainable, and well-documented code.
• Participate in code reviews, architecture discussions, production deployments, and incident resolution.
• Monitor backend services and troubleshoot performance, reliability, and security issues.

Required Skills

• 3 to 6 years of experience in backend software development.
• Strong programming experience in one or more : Node.js/TypeScript, Java/Spring Boot, Python/FastAPI/Django, Go, or .NET.
• Hands-on experience with at least one identity platform : Auth0, Okta, Keycloak, Microsoft Entra ID, Amazon Cognito, or Ping Identity.
• Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, SSO, MFA, and identity federation.
• Experience with RBAC, ABAC, REST APIs, and relational/NoSQL databases (PostgreSQL, MySQL, MongoDB, DynamoDB).
• Familiarity with Redis, Git, CI/CD, Docker, and cloud environments (AWS/Azure/GCP).

Preferred Qualifications

• Experience building IAM products, multi-tenant identity architecture, or integrating enterprise SAML/LDAP/Active Directory.
• Familiarity with SCIM 2.0, policy engines (OPA, Casbin, Cedar, OpenFGA), secrets management (Vault, AWS Secrets Manager), and WebAuthn/FIDO2.
• Understanding of identity-security risks (token theft, session hijacking, etc.).
• Experience with Kubernetes, microservices, and observability tools.

(ref:hirist.tech)