Software Engineer - IAM, Aura

Neo4j; Malmö kommun; On-site; SEK 600,000 - 800,000; Full time

Job summary

Neo4j is looking for a Software Engineer – Identity and Access Management based in Malmö, Sweden. This role involves architecting and managing IAM strategies, requiring collaboration across teams to implement secure solutions.

The ideal candidate will have over 7 years of back-end development experience along with familiarity with IAM systems such as Okta and Auth0. Knowledge of Python or GoLang is essential, and applicants should have experience with cloud providers like AWS or Azure.

Qualifications

• 7+ years of backend development or software engineering experience.
• Familiarity with software development using IAM systems.
• Deep understanding of IAM principles and protocols.
• Solid experience with identity security frameworks.

Responsibilities

• Contribute to shaping the IAM roadmap.
• Develop scalable IAM solutions including identity governance.
• Implement authentication protocols and lifecycle management.
• Collaborate with engineering and business stakeholders.

Skills

Back-end development

Identity and Access Management (IAM)

Python

GoLang

Agile methodologies

Collaboration

Tools

Okta

Auth0

Ping Identity

AWS IAM

Azure AD

Kubernetes

Job description

Neo4j’s managed cloud offering, Aura, brings the power of graph databases to the cloud. We are seeking an experienced Software Engineer – Identity and Access Management to architect, implement, and manage enterprise IAM strategies. This role requires strong technical skills and a keen interest in the identity and access management (IAM) domain and is a good fit for someone who enjoys working with different teams to build secure, scalable, and compliant IAM solutions for AuraDB.

You will work closely with security architecture, development, infrastructure, and product teams to consolidate IAM capabilities across critical applications and systems. This position is ideal for someone who thrives in both planning and hands‑on execution.

The Role

IAM Architecture & Implementation

• Contribute to shaping the IAM roadmap and design an architecture that brings together the IAM domains across Aura.
• Develop and maintain scalable IAM solutions including identity governance and authentication frameworks.

Authentication & Authorization

• Implement and manage tooling for configuring authentication protocols (OAuth2, OIDC, SAML, LDAP, MFA) and lifecycle management (SCIM).
• Integrate with enterprise SSO providers (Okta, Azure AD, Ping Identity, etc).
• Design and implement relevant access control paradigms for differing business use cases (RBAC, ABAC, PBAC, ReBAC, FGA).
• Manage application authentication via Auth0.
• Develop access control policies based on least privilege principles.
• Support various authentication and encryption methods: JWT, service accounts, workload identity including SPIFFE/SPIRE, client credentials, mTLS, request signing.

Security & Compliance

• Apply zero trust principles and secure identity patterns for internal/external systems.
• Assess and manage IAM attack surfaces and ensure compliance with industry standards and regulatory requirements (SOC 2).

Collaboration & Leadership

• Collaborate with engineering, UX, and business stakeholders using Agile methodologies.
• Mentor team members on IAM technologies and best practices.
• Produce clear, well‑structured documentation for technical and non‑technical audiences.

Experience

Required

• 7+ years of backend development or software engineering experience.
• Familiarity and exposure to software development with IAM systems (Okta, Auth0, Ping Identity, Oracle Access Manager, AWS IAM, Azure AD/Entra ID).
• Deep understanding of IAM principles, authentication/authorization protocols, and identity lifecycle management.
• Solid grasp of identity security frameworks, protocols, and secure design patterns.
• Experience with Python or GoLang.
• Experience with at least one of the major cloud providers (GCP, AWS, Azure).

Preferred

• 3+ years of professional experience in Identity and Access Management.
• Familiarity with Kubernetes.