Software Engineer - IAM (OIDC/OAuth)

Portainer; New Zealand; Remote; NZD 155,000 - 258,000; Full time

Benefits offered by this job

Global remote work

Competitive salary

Job summary

Portainer is seeking a Software Engineer with Identity and Access Management (IAM) domain experience to support an enterprise OpenID Connect platform used across a large application ecosystem.

You'll focus on the identity platform itself, investigating authentication issues, onboarding applications, maintaining Node.js/TypeScript services, and troubleshooting OAuth2/OpenID Connect workflows while collaborating with global teams across time zones.

Qualifications

• 2–4 years of hands-on OAuth2 and OpenID Connect experience.
• Understanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, claims and scopes, MFA concepts, and Identity Federation.

Responsibilities

• Support day-to-day operation of the OIDC platform
• Investigate authentication and authorization issues
• Assist with client registrations, configuration changes, and onboarding
• Maintain Node.js and TypeScript services
• Support MFA integrations and identity federation
• Monitor platform health and respond to incidents
• Develop automation and operational tooling
• Support Elasticsearch and Redis-based services
• Participate in on-call rotations

Skills

OAuth2 & OpenID Connect

JWTs & claims & scopes

MFA concepts

Identity federation

Node.js

TypeScript

REST API development

Git-based workflows

On-call experience

Platform troubleshooting

Tools

Kubernetes

Linux

Elasticsearch

Redis

oidc-provider

Keycloak

Zitadel

Authentik

Job description

We're looking for a Software Engineer with Identity and Access Management (IAM) domain experience to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem.

This is primarily an application engineering role, not a Kubernetes, DevOps, SRE, or infrastructure engineering position. You'll work on the identity platform itself. Investigating authentication and authorization issues, onboarding applications, maintaining Node.js/TypeScript services, implementing platform enhancements, and troubleshooting complex OAuth2 and OpenID Connect workflows.

The ideal candidate has hands-on experience building, supporting, or extending identity platforms and a strong understanding of OAuth2, OpenID Connect, JWTs, claims, scopes, MFA, and identity federation. You should be comfortable reading and modifying application code, debugging production issues, and diagnosing problems across application, data, and infrastructure layers.

This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused.

What you'll do

• Support day-to-day operation of the OIDC platform
• Investigate authentication and authorization issues
• Assist with client registrations, configuration changes, and onboarding
• Maintain Node.js and TypeScript services
• Support MFA integrations and identity federation
• Monitor platform health and respond to incidents
• Develop automation and operational tooling
• Support Elasticsearch and Redis-based services
• Participate in on-call rotations

Identity and security

• 2–4 years of experience working with OAuth2 and OpenID Connect
• Understanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, Claims and Scopes, MFA concepts, and Identity Federation

Development

• Node.js and TypeScript experience
• REST API development
• Git-based workflows

Platform and infrastructure

• Kubernetes fundamentals
• Linux administration
• Monitoring and troubleshooting skillsBasic Elasticsearch knowledge

Nice to have

• Experience with oidc-provider, Keycloak, Zitadel, or Authentik
• Active Directory or Azure AD / Entra ID

Portainer is a leading tech company offering a broad benefits package including a highly competitive salary and the ability to work anywhere in the world while still being part of a dynamic team taking on some of the most interesting challenges in the technology/infrastructure space.