[8PP] Senior Software Engineer - User Management

Software Mind Americas

2d

About The Position

We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work!

Design, build and run features in the User Management API: tenant and landscape lifecycle, user and group administration, role-based access control, service accounts and client credentials, and audit and security support tooling. Own the integrations with Okta and Microsoft Entra ID. That includes provisioning, lifecycle sync, event handling and app-registration automation, with failure modes that are safe and recoverable. Maintain the API's authentication model and the authorization rules behind it. Change and version the gRPC and REST contracts carefully, and coordinate SDK releases so the products that consume them don't break. Secret management using Azure Services. Continue to support multi-tenancy, auditing and maintaining data integrity across tenants. Write tests that matter: NUnit and Moq unit tests, integration tests and automated smoke suites focused on authentication flows, permission boundaries and tenant isolation. Work with frontend engineers on the sign-in and admin experience, and with product teams who use the platform through the SDK. Take part in on-call and incident response for a service every PowerPlan cloud customer depends on.

Requirements

• 5+ years building production back-end services in C# / .NET (ASP.NET Core Web API, dependency injection, async patterns).
• Hands-on identity and access management experience. You've built or run real systems with: OAuth 2.0 and OpenID Connect: authorization code with PKCE, client credentials, token validation and refresh WTs: claims design, validating against several issuers and audiences, signing keys and key rotation Multi-tenant user, role and permission models (RBAC), including tenant isolation User lifecycle: invitation, activation, deactivation, deprovisioning and sync with an external identity provider
• Production experience with at least one enterprise identity provider: Okta (strongly preferred), Microsoft Entra ID / Azure AD, Auth0 or Ping or other.
• Solid relational database skills with SQL Server and EF Core, including migrations and query performance.
• Experience designing and versioning APIs that other teams depend on (REST, and ideally gRPC / Protocol Buffers).
• Security instincts: you know the OWASP Top 10, handle secrets carefully, write auditable code, and default to least privilege.

Nice To Haves

• Okta Management API / SDK, Okta event hooks and inline hooks, or Okta Identity Engine (IDX)
• Microsoft Graph, particularly app registrations, service principals and credential management
• SAML 2.0, SCIM provisioning, or enterprise SSO federation with customer identity providers
• Azure: Key Vault, App Configuration, Managed Identity, Data Protection
• Publishing and versioning internal NuGet packages (GitVersion, Conventional Commits)
• Angular or another modern front-end framework, enough to work with the portal team on sign-in and admin screens
• Experience in regulated industries (utilities, finance, tax) where audit trails and access reviews matter
• Comfort with AI-assisted development tools as part of daily work

Responsibilities

• Design, build and run features in the User Management API: tenant and landscape lifecycle, user and group administration, role-based access control, service accounts and client credentials, and audit and security support tooling.
• Own the integrations with Okta and Microsoft Entra ID. That includes provisioning, lifecycle sync, event handling and app-registration automation, with failure modes that are safe and recoverable.
• Maintain the API's authentication model and the authorization rules behind it.
• Change and version the gRPC and REST contracts carefully, and coordinate SDK releases so the products that consume them don't break.
• Secret management using Azure Services.
• Continue to support multi-tenancy, auditing and maintaining data integrity across tenants.
• Write tests that matter: NUnit and Moq unit tests, integration tests and automated smoke suites focused on authentication flows, permission boundaries and tenant isolation.
• Work with frontend engineers on the sign-in and admin experience, and with product teams who use the platform through the SDK.
• Take part in on-call and incident response for a service every PowerPlan cloud customer depends on.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed