Job description
Job Overview:
We are looking for an experienced SSO / Identity Management Specialist to support the implementation of enterprise Single Sign-On capabilities, with an initial focus on Microsoft Entra ID integration.
The ideal candidate has strong backend API development experience, especially with Python, FastAPI, and ideally GraphQL, combined with practical experience implementing authentication and identity protocols such as OAuth 2.0, OpenID Connect, SAML, and enterprise SSO flows.
This role is initially expected to support a focused SSO implementation project, but candidates with strong API engineering experience may be considered for additional backend work beyond the initial scope.
Job requirements
- 10+ years of experience in Python backend development.
- Deep understanding of Clean Code, Clean Architecture, Modular Architecture, and Distributed Systems.
- Strong experience with Python backend development.
- Hands-on experience with FastAPI.
- Experience designing and implementing backend APIs.
- Practical experience with OAuth 2.0, OpenID Connect, and SAML.
- Experience implementing SSO integrations, specifically from the relying-party / service-provider side.
- Understanding of identity provider configuration, metadata exchange, redirect flows, token validation, claims mapping, and session handling.
- Ability to troubleshoot SSO issues across application, identity provider, and configuration layers.
- Strong understanding of secure API design and authentication best practices.
- Ability to work independently on a focused implementation project.
Job responsibilities
- Implement SSO integration with Microsoft Entra ID.
- Build and maintain backend APIs using Python and FastAPI.
- Support authentication and authorization flows using OAuth 2.0, OIDC, and SAML.
- Implement the relying-party side of enterprise SSO integrations.
- Work with technical stakeholders to define, validate, and test identity flows.
- Debug and resolve authentication, token, redirect, metadata, certificate, and session-related issues.
- Collaborate with backend and platform teams to ensure secure, scalable, and maintainable implementation.
- Contribute to documentation for configuration, deployment, troubleshooting, and customer onboarding.
- Potentially support SCIM provisioning for enterprise customer user management.
Nice-to-Have Skills:
- Experience with GraphQL.
- Experience with Microsoft Entra ID enterprise integrations.
- Experience with SCIM provisioning for user and group lifecycle management.
- Experience with MFA flows and enterprise security policies.
- Experience with AWS Cognito.
- Experience supporting enterprise customer onboarding.
- Familiarity with audit logging, identity lifecycle events, and access management workflows.
Ideal Candidate Profile:
We are looking for a highly skilled Backend Engineer or Identity Management Specialist with hands-on experience implementing and supporting Single Sign-On (SSO) solutions in production environments. The ideal candidate should have a strong understanding of enterprise identity and access management concepts and proven experience integrating applications with leading identity providers.
The successful candidate will be comfortable troubleshooting complex authentication and authorization workflows, designing secure and scalable API services, and ensuring seamless user access across systems. They should possess strong problem-solving skills, communicate effectively with technical and cross-functional stakeholders, and be capable of delivering high-quality solutions within fast-paced project timelines.
A proactive mindset, attention to security best practices, and the ability to work independently while collaborating with distributed teams will be key to success in this role.
Job benefits
- A hybrid, flexible working policy.
- Professional growth and development opportunities.
- An international team of world-class engineers that brings positive energy.
- A friendly, supportive, and relaxing working environment in our offices.
