Senior Backend Engineer (Identity & Access Management)

Sunhive Solutions; United States; Remote; USD 180.000 - 230.000; Vollzeit

Benefits dieser Stelle

Private health insurance and sports

Certification support (AWS, PMP)

Referral program

Mentoring program

Annual bonus potential

Zusammenfassung

Andersen is seeking a Senior Backend Engineer (Identity & Access Management) to build a scalable, secure distributed platform in Go. You will own end-to-end identity features, including SSO, MFA, and token workflows, while shaping security posture and architecture.

The role supports remote work with hybrid options, and involves cross-team collaboration with customers in financial and protection services domains.

Qualifikationen

• 7+ years in backend engineering, 5+ years in Go.
• Production IAM experience with IAM systems.
• Strong Go and gRPC production experience.
• Expertise in authentication/authorization (OAuth2, OIDC, JWT, MFA).
• Security-focused, knowledge of OWASP Top 10.

Aufgaben

• Design, develop, and operate high-throughput identity services (SSO, MFA, session management, federation).
• Own features end-to-end from design to production.
• Implement and scale OAuth 2.0, OpenID Connect, and JWT flows.
• Write clean, concurrent Go backend services.
• Design idiomatic API contracts (gRPC/HTTP).
• DevOps to deploy, monitor, and incident respond.
• Subject matter expert on authentication/identity; security reviews and threat modeling.
• Integrate with Keycloak and AWS Cognito; federation patterns.
• Mentor engineers, conduct design reviews, contribute to roadmap.

Kenntnisse

English proficiency

Strong communication

Security mindset

Problem solving

Tools

Go

gRPC

OAuth 2.0

OpenID Connect

JWT

Keycloak

AWS Cognito

Kubernetes

Terraform

Jobbeschreibung

Andersen is hiring a Senior Backend Engineer (Identity & Access Management) for a project building a scalable distributed platform and delivering reliable backend solutions.

Our customer is an international organization operating in the financial and protection services domain. The company provides a diverse portfolio of customer-oriented solutions across multiple business areas and markets. With a strong focus on digital capabilities, operational excellence, and long-term development, the organization continuously invests in technology, process improvement, and service innovation to support evolving customer and business needs.

The project focuses on building and evolving a high-performance, scalable distributed platform designed to support complex business operations and rapid product growth. The system is developed in Go, with a strong emphasis on efficient concurrency models, reliability, and long-term maintainability.

Responsibilities:

• Designing, developing, and operating high-throughput, low-latency identity services: Single Sign-On (SSO), Multi-Factor Authentication (MFA), session management, and federation.
• Owning features end-to-end from design through production and support.
• Implementing and scaling modern authentication and authorization protocols and token formats (OAuth 2.0, OpenID Connect, JWTs), including secure token issuance, rotation, and revocation strategies.
• Writing clean, concurrent, and highly performant backend services primarily in Go.
• Designing idiomatic, testable code and clear API contracts (gRPC/HTTP).
• Using DevOps experience to deploy, manage, and automate identity infrastructure (CI/CD, monitoring, and incident response).
• Serving as the subject matter expert on authentication and identity: owning internal security reviews, threating modeling for identity flows, and guiding other teams on secure integrations with the platform.
• Integrating and maintaining solutions with custom and standard identity providers (e.g. Keycloak and AWS Cognito), and federation patterns.
• Mentoring engineers, conducting design reviews, and contributing to the team's technical roadmap and security posture.

Must-haves:

• Experience in backend engineering for 7+ years, including 5+ years with Go.
• Experience working with IAM in production environments.
• Strong production experience with Go and gRPC, building complex, distributed backend systems.
• Deep expertise in authentication and authorization, including OAuth 2.0, OIDC, SSO, MFA, RBAC, JWT signing/verification/assertions, token security, session management, and cryptography.
• Strong understanding of web security, federated identity, secure coding, and OWASP Top 10.
• Hands-on experience with cloud platforms (AWS preferred), container orchestration (Kubernetes), and Infrastructure as Code (Terraform, Terragrunt and OpenTofu/Tofu).
• Experience designing high-throughput, low-latency systems with a focus on security and correctness.
• Strong communication skills and ability to explain security and architecture trade-offs to technical and non-technical stakeholders.
• Level of English from Upper-Intermediate and above.

Nice-to-haves:

• Experience with SAML, SCIM, PKI, JWKs/JWKS endpoints, key management (KMS/HSM) and token introspection.
• Working knowledge of identity platforms (commercial or open source), rate limiting, abuse mitigation, and adaptive authentication.

Reasons why this job would be interesting to you:

• Experience in teamwork with leaders in FinTech, Healthcare, Retail, Telecom, and others. Andersen cooperates with such businesses as Samsung, Siemens, Johnson & Johnson, BNP Paribas, Ryanair, Mercedes, TUI, Verivox, Allianz, T-Systems, etc..
• The opportunity to change the project and/or develop expertise in an interesting business domain.
• Job conditions – you can work both fully remotely and from the office or can choose a hybrid variant.
• Guarantee of professional, financial, and career growth! The company has introduced systems of mentoring and adaptation for each new employee.
• The opportunity to earn up to an additional 1,000 EUR per month, depending on the level of expertise, which will be included in the annual bonus, by participating in the company's activities.
• Access to the corporate training portal, where the entire knowledge base of the company is collected and which is constantly updated.
• Bright corporate life (parties / pizza days / PlayStation / fruits / coffee / snacks / movies).
• Certification compensation (AWS, PMP, etc).
• Referral program.
• Private health insurance and sports compensation, depending on the type of employment.

Your personal data is protected in accordance with GDPR regulations. Learn more: https://andersenlab.com/privacy-policy

https://people.andersenlab.com/