Senior Software Engineer - IAM

Bright Mind Solutions LLC; Burbank (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Bright Mind Solutions LLC in Burbank, CA is seeking a Senior Software Engineer to design and implement IAM solutions, focusing on directory services, automation, and secure enterprise-grade apps.

You will work with C#, .NET Core, ASP.NET Web API, and Angular to automate Active Directory and Entra ID, build REST APIs, PowerShell scripts, and CI/CD pipelines in a collaborative, enterprise environment.

Qualifications

• 8+ years of professional software engineering experience delivering web applications.
• Hands-on with C#, .NET/.NET Core, ASP.NET Web API, Angular, TypeScript, HTML/CSS, REST APIs, SQL Server.
• PowerShell scripting and automation experience.
• Experience developing or automating against Active Directory and/or Microsoft Entra ID (Azure AD).
• Experience with Microsoft Graph API, LDAP, directory objects, groups, and/or service principals.
• Experience with Git-based source control, CI/CD pipelines, and automated testing.
• Ability to independently design and deliver production-ready solutions in a complex enterprise environment.
• Strong written and verbal communication skills.

Responsibilities

• Design, develop, and maintain enterprise web applications using C#, .NET/.NET Core, ASP.NET Web API, Angular, and TypeScript.
• Develop REST APIs and microservices that integrate with Active Directory, Microsoft Entra ID, and enterprise identity platforms.
• Build self-service portals and workflows that automate manual identity and access management processes.
• Develop PowerShell automation for identity and directory operations.
• Automate Active Directory group lifecycle management, including group creation, ownership, membership reviews, naming standards, and stale-group cleanup.
• Develop solutions supporting RBAC, request-and-approval workflows, time-bound access, and just-in-time access.
• Automate onboarding, lifecycle management, and decommissioning of non-human identities, including service accounts, managed identities, application registrations, certificates, and secrets.
• Build tooling for identity discovery, ownership attestation, credential rotation, and expiration notifications.
• Automate governance and compliance controls for Active Directory and Entra ID.
• Develop dashboards and reporting that provide visibility into identity security and compliance.
• Participate in code reviews, CI/CD pipelines, automated testing, technical documentation, and knowledge transfer.
• Partner with identity engineers, security architects, infrastructure teams, and application teams.

Skills

C#/.NET/.NET Core/ASP.NET Web API

Angular/TypeScript

HTML/CSS

REST APIs

SQL Server

PowerShell scripting

Active Directory/Microsoft Entra ID

Microsoft Graph API/LDAP

Git-based source control

CI/CD pipelines/Automated testing

Strong communication

Education

Bachelor's degree in Computer Science/IS/Software Engineering or related field

Tools

Git

CI/CD tooling

Automated testing frameworks

PowerShell

Azure AD/Entra ID tooling

MS Graph API tooling

Job description

Need LOCAL only

Senior Software Engineer - IAM / Identity Automation (.NET & Angular)

Burbank, CA

We are seeking an experienced Senior Software Engineer to join an enterprise Identity & Access Management (IAM) Directory Services team. This is a hands-on development role focused on building secure, scalable applications and automation solutions that modernize identity and directory services across a large enterprise environment.

The ideal candidate is a strong C#/.NET and Angular developer with hands-on experience integrating and automating Active Directory and/or Microsoft Entra ID (Azure AD) environments.

Key Responsibilities

• Design, develop, and maintain enterprise-scale web applications using C#, .NET/.NET Core, ASP.NET Web API, Angular, and TypeScript
• Develop REST APIs and microservices that integrate with Active Directory, Microsoft Entra ID, and enterprise identity platforms
• Build self-service portals and workflows that automate manual identity and access management processes
• Develop PowerShell automation for identity and directory operations
• Automate Active Directory group lifecycle management, including group creation, ownership, membership reviews, naming standards, and stale-group cleanup
• Develop solutions supporting RBAC, request-and-approval workflows, time-bound access, and just-in-time access
• Automate onboarding, lifecycle management, and decommissioning of non-human identities, including service accounts, managed identities, application registrations, certificates, and secrets
• Build tooling for identity discovery, ownership attestation, credential rotation, and expiration notifications
• Automate governance and compliance controls for Active Directory and Entra ID
• Develop dashboards and reporting that provide visibility into identity security and compliance
• Participate in code reviews, CI/CD pipelines, automated testing, technical documentation, and knowledge transfer
• Partner with identity engineers, security architects, infrastructure teams, and application teams

Required Qualifications

• 8+ years of professional software engineering experience building and delivering web applications
• Strong hands-on development experience with C#, .NET/.NET Core, ASP.NET Web API, Angular, TypeScript, HTML/CSS, REST APIs, SQL Server, and relational databases
• Strong PowerShell scripting and automation experience
• Hands-on experience developing or automating against Active Directory and/or Microsoft Entra ID (Azure AD)
• Experience with Microsoft Graph API, LDAP, directory objects, groups, and/or service principals
• Experience with Git-based source control, CI/CD pipelines, and automated testing
• Ability to independently design and deliver production-ready solutions in a complex enterprise environment
• Strong written and verbal communication skills

Preferred Qualifications

• Experience developing IAM, identity governance, or access-request automation solutions
• Experience with non-human identity (NHI) or service account management
• Experience with secrets management technologies such as Azure Key Vault or HashiCorp Vault
• Experience with certificate lifecycle automation
• Knowledge of Azure Functions, Logic Apps, or other serverless technologies
• Exposure to PIM/PAM platforms and privileged access models
• Experience working in SOX, PCI, SOC 2, or other compliance-driven environments
• Familiarity with Kubernetes, containers, Terraform, or Bicep
• Microsoft certifications such as SC-300, AZ-204, or AZ-500

Education

Bachelor's degree in Computer Science, Information Systems, Software Engineering, Electrical/Electronics Engineering, a related field, or equivalent professional experience.

This position is based in Burbank, California