Software Engineer

ALTEN Polska; Kraków; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Work equipment provided

Conferences and trainings

Certification opportunities

Relocation opportunities

GreatPlaceToWork certification

Job summary

ALTEN Polska seeks skilled engineers to design and implement identity orchestration flows, provisioning lifecycles, and policy-driven authentication. You will build secure RESTful APIs and backend services, integrating with cloud identity services and internal systems for streamlined access control.

Join a team delivering cloud-native solutions (Cloud Run, Cloud Functions, GKE), event-driven architectures using Pub/Sub, and robust IaC with Terraform.

Qualifications

• Proven experience with modern identity orchestration platforms (Auth0 Actions, Okta Workflows, WorkOS, or SlashID).
• Strong programming skills in Python, Go, or Node.js for API and microservice development.
• Experience designing and deploying cloud-native APIs (Cloud Run, Cloud Functions, GKE).
• Deep understanding of event-driven architectures, Pub/Sub, message processing, and workflow automation.
• Strong knowledge of OAuth2, OIDC, JWT, SAML, and identity federation patterns.
• Proficiency in Terraform or equivalent IaC tools.
• Experience using API gateways, reverse proxies, or service mesh technologies.

Responsibilities

• Design and implement identity flows for provisioning and lifecycle events.
• Integrate with Cloud Identity Services, ServiceNow, and internal services.
• Build policy-based orchestration for adaptive authentication and access.

Skills

Identity orchestration platforms

Python

Go

Node.js

Cloud-native APIs

Pub/Sub

OAuth2/OIDC/JWT/SAML

Terraform / IaC

API gateways / service mesh

Tools

Cloud Run

Cloud Functions

GKE

Job description

We are part of the ALTEN Group – a leading European provider of engineering and technology consulting servics.

Join ALTEN Polska and let’s grow together!

1. Identity Orchestration

• Design and implement identity flows for provisioning, de-provisioning and orchestration of identity lifecycle events.
• Integrate with Cloud Identity Services, ServiceNow, and internal services to streamline / orchestrate identity provisioning and identity lifecycle management.
• Build policy-based orchestration workflows for adaptive authentication and context-aware access using industry standards (like OPA).

2. API Development

• Design, build, and secure RESTful APIs and backend services supporting identity, provisioning, and governance workflows.
• Integrate APIs with our new authentication service for token validation, user sessions, and application-level authorization.
• Build and document internal SDKs, middleware, and shared libraries for consistent IAM logic across services.
• Ensure API security, performance, reliability, resilience, and observability.
• Develop pipelines where API events publish to Pub/Sub for asynchronous workflows such as:
  • automated identity lifecycle tasks
  • access review event triggers
  • logging and audit forwarding
  • security anomaly detection
• Build Cloud Functions, Cloud Run microservices, or containerized services to process Pub/Sub messages.
• Implement robust event-processing patterns including retries, idempotency, DLQs, and structured logging.

4. Automation & Infrastructure as Code

• Build and maintain Terraform modules for IAM, API services, Pub/Subtopics, workloads, and permissions.
• Automate deployment and validation of identity and access configurations via CI/CD pipelines.
• Implement automated testing for IAM policies and API behaviour.
• Troubleshoot identity, access, and API workflow issues across distributed systems.
• Provide technical guidance to engineering teams on secure API design, IAM best practices, and identity workflows.
• Work with security teams during audits, compliance checks, and incident investigations.

Key Skills and Qualifications:

• Proven experience with modern identity orchestration platforms (Auth0 Actions, Okta Workflows, WorkOS, or SlashID)
• Strong programming skills in Python, Go, or Node.js for API and microservice development.
• Experience designing and deploying cloud-native APIs (Cloud Run, Cloud Functions, GKE).
• Deep understanding of event-driven architectures, Pub/Sub, message processing, and workflow automation.
• Strong knowledge of OAuth2, OIDC, JWT, SAML, and identity federation patterns.
• Proficiency in Terraform or equivalent IaC tools.
• Experience using API gateways, reverse proxies, or service mesh technologies.

Nice-to-Have

• Google Professional Cloud Security Engineer or Cloud Architect certification.
• Experience with additional identity providers (Okta, Azure AD, Ping Identity).
• Familiarity with Kubernetes (GKE RBAC + workload identity).
• Experience using Secret Manager, Vault, or other secrets management tools.
• Knowledge of compliance frameworks (SOC2, ISO 27001, PCI, HIPAA).

We offer

• A full-time contract (B2B also possible)
• All necessary work equipment is provided by us (computer, monitor etc).
• Participation in company many conferences, trainings, workshops, integration meetings, etc.
• Certification and training opportunities
• Opportunity to relocate and work in different ALTEN Polska branches
• After completion of the project, opportunity to engage in a subsequent one within the company.
• Work in company with #GreatPlaceToWork Certificate
• Access to professional certifications with our technology partners (e.g. Google, ISTQB)