Staff Software Engineer

JobNimbus; Lehi (UT); On-site; USD 150,000 - 210,000; Full time

Job summary

JobNimbus is seeking a Senior Architect to lead the identity and access platform, steering authentication, authorization, and account management. You will drive enterprise SSO integrations with Okta, Entra ID, and Google Workspace, define RBAC/ABAC models, and modernize token lifecycles and provisioning.

You will mentor engineers and raise architectural standards across teams. You will design secure APIs, work with product and security, and contribute to scalable, multi-tenant architecture in a

Qualifications

• 8+ years of software engineering with leadership experience on mission-critical systems.
• Deep expertise in authentication and identity systems (OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, SCIM).
• Experience delivering enterprise SSO and integrating with identity providers (Okta, Microsoft Entra ID, Google Workspace, etc.).
• Strong API design and backend development in C# and/or Node.js.
• Knowledge of RBAC/ABAC, multi-tenant architectures, and secure multi-location models.

Responsibilities

• Own the long-term technical roadmap and architecture for identity, authentication, authorization, and account management.
• Lead the delivery of enterprise SSO integrations with customer identity providers (Okta, Entra ID, Google Workspace).
• Define authorization strategies and cross-tenant access control models (RBAC/ABAC).
• Modernize authentication including MFA, token lifecycles, and SCIM provisioning.
• Build secure APIs and API contracts for public and partner access (OAuth 2.0 scopes).
• Write production-grade code in C# and Node.js with a focus on performance and security.
• Design event-driven systems and reliable API contracts for identity events and audit trails.
• Collaborate with product and security to align domain models with scalable architectures.
• Mentor engineers, enforce architectural standards, and drive engineering excellence.

Skills

OAuth 2.0

OpenID Connect

SAML 2.0

RBAC/ABAC

C# and Node.js

AWS

Mentoring engineers

API design

Distributed systems

Identity architecture

Tools

Okta

Microsoft Entra ID

Google Workspace

Terraform

Couchbase

Job description

We are obsessed with the hero's journey at JobNimbus. Every person has a hero's journey—Hermione Granger, James T. Kirk, Frodo Baggins, Anna & Elsa, Nacho Libre, and even YOU! This is our “call to adventure” to come check out JobNimbus. What do you have to lose? You might make a few new friends, learn about a sick new company doing some amazing things, and maybe even land a new job!

Mission:

Lead the technical vision, architecture, and evolution of JobNimbus's identity and access platform: how users and accounts authenticate, how they are authorized, and how enterprise customers connect their own identity providers. Partner closely with engineering, product, and security leadership to build enterprise-grade SSO, robust access control models (RBAC/ABAC), multi-tenant account hierarchies, and the APIs that expose them to customers and partners.

What You'll Be Doing:

• Own the long-term technical roadmap and system architecture for JobNimbus's identity, authentication, authorization, and account management platform.
• Design and lead the delivery of enterprise SSO (SAML 2.0 and OIDC), including integrations with customer identity providers such as Okta, Microsoft Entra ID, and Google Workspace.
• Define and drive the authorization strategy: role-based and attribute-based access control (RBAC/ABAC), fine-grained permissions, and access profiles that work across multi-tenant, multi-location, and parent-child account hierarchies.
• Modernize authentication across the platform, including MFA, session and token lifecycle, user provisioning (SCIM), and service-to-service authentication.
• Design and build secure, well-documented APIs, including the authentication model for public and partner APIs (OAuth 2.0 flows, scoped tokens, API credentials).
• Write mission-critical, high-impact production code in C# and Node.js, setting the benchmark for performance, security, and maintainability across the organization.
• Architect event-driven systems and resilient API contracts for identity events, provisioning, and audit trails.
• Partner with product and security leadership to align account and identity domain models with scalable, future-proof technical architectures.
• Raise the bar on engineering quality across teams by establishing testing standards, observability, threat modeling, and operational metrics for identity services.
• Mentor and grow senior and mid-level engineers, fostering technical excellence, architectural rigor, and domain expertise across the organization.
• Drive the adoption of modern AI-assisted engineering practices to optimize developer velocity and platform reliability.

What Makes You the Hero for This Job:

• 8+ years of software engineering experience with a proven track record as a technical leader or architect on mission-critical, high-scale production systems.
• Deep expertise designing and operating authentication and identity systems: OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, and SCIM.
• Proven experience delivering enterprise SSO and integrating with identity providers (Okta, Microsoft Entra ID, Auth0, Google Workspace, or similar).
• Proven experience designing enterprise access control frameworks (RBAC/ABAC), multi-tenant authorization models, and complex account permission hierarchies.
• Strong API design and development experience: RESTful API contracts, versioning, and securing APIs for customer and partner use.
• Expert-level mastery of backend development using C# and/or Node.js, alongside distributed systems design (event-driven architectures, messaging platforms).
• Deep database expertise in SQL and NoSQL environments (experience with Couchbase is a strong plus).
• Extensive experience with AWS infrastructure, contaites), and Infrastructure as Code (Terraform).
• Outstanding cross-functional leadership skills, with a proven ability to partner with product, security, and executive stakeholresolve ambiguous technical problems.
• Strong commitment to mentoring engineers, conducting architectural reviews, and establishing engineering best practices across multiple engineering pods.
• Nice to have: experience with subscription or entitlement platforms (Chargebee, Stripe Billing, or similar) and how plans and entitlements connect to access control.

Superpowers:

• Extreme Ownership. You own the outcomes, drive initiatives, and solve problems proactively. If you need direction and someone to hold your hand, this job is not for you.
• Customer Obsessed. Everything we build should leave our customers saying, "Aw dip. This product is off the charts cool. Whoever wrote that code deserves a raise!"
• Proactive Learning. You stay ahead of the curve, continuously learning and implementing cutting‑edge technologies.
• Team Commitment. You build, mentor, and lead a high-performance engineering team that delivers results together.
• Self Awareness. You know your strengths, weaknesses, and how to surround yourself with the right talent to succeed.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in JobNimbus’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.