Staff Software Engineer

What You'll Be Doing: Own the long-term technical roadmap and system architecture for JobNimbus's identity, authentication, authorization, and account management platform. Design and lead the delivery of enterprise SSO (SAML 2.0 and OIDC), including integrations with customer identity providers such as Okta, Microsoft Entra ID, and Google Workspace. Define and drive the authorization strategy: role-based and attribute-based access control (RBAC/ABAC), fine-grained permissions, and access profiles that work across multi-tenant, multi-location, and parent-child account hierarchies. Modernize authentication across the platform, including MFA, session and token lifecycle, user provisioning (SCIM), and service-to-service authentication. Design and build secure, well-documented APIs, including the authentication model for public and partner APIs (OAuth 2.0 flows, scoped tokens, API credentials). Write mission-critical, high-impact production code in C# and Node.js, setting the benchmark for performance, security, and maintainability across the organization. Architect event-driven systems and resilient API contracts for identity events, provisioning, and audit trails. Partner with product and security leadership to align account and identity domain models with scalable, future-proof technical architectures. Raise the bar on engineering quality across teams by establishing testing standards, observability, threat modeling, and operational metrics for identity services. Mentor and grow senior and mid-level engineers, fostering technical excellence, architectural rigor, and domain expertise across the organization. Drive the adoption of modern AI-assisted engineering practices to optimize developer velocity and platform reliability. What Makes You the Hero for This Job: 8+ years of software engineering experience with a proven track record as a technical leader or architect on mission-critical, high-scale production systems. Deep expertise designing and operating authentication and identity systems: OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, and SCIM. Proven experience delivering enterprise SSO and integrating with identity providers (Okta, Microsoft Entra ID, Auth0, Google Workspace, or similar). Proven experience designing enterprise access control frameworks (RBAC/ABAC), multi-tenant authorization models, and complex account permission hierarchies. Strong API design and development experience: RESTful API contracts, versioning, and securing APIs for customer and partner use. Expert-level mastery of backend development using C# and/or Node.js, alongside distributed systems design (event-driven architectures, messaging platforms). Deep database expertise in SQL and NoSQL environments (experience with Couchbase is a strong plus). Extensive experience with AWS infrastructure, contaites), and Infrastructure as Code (Terraform). Outstanding cross-functional leadership skills, with a proven ability to partner with product, security, and executive stakeholresolve ambiguous technical problems. Strong commitment to mentoring engineers, conducting architectural reviews, and establishing engineering best practices across multiple engineering pods.

Nice to have: experience with subscription or entitlement platforms (Chargebee, Stripe Billing, or similar) and how plans and entitlements connect to access control. Superpowers: Extreme Ownership. You own the outcomes, drive initiatives, and solve problems proactively. If you need direction and someone to hold your hand, this job is not for you. Customer Obsessed. Everything we build should leave our customers saying, "Aw dip. This product is off the charts cool. Whoever wrote that code deserves a raise!" Proactive Learning. You stay ahead of the curve, continuously learning and implementing cutting‑edge technologies. Team Commitment. You build, mentor, and lead a high-performance engineering team that delivers results together. Self Awareness. You know your strengths, weaknesses, and how to surround yourself with the right talent to succeed. Voluntary Self-Identification For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file. As set forth in JobNimbus’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows: A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service. An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.