Software Engineer

Qode

12d•Remote

About The Position

We are seeking a mid-level Software Engineer to join our high-output Platform Services team. This role is crucial for building and maintaining the foundational systems that power identity, authentication, and integration capabilities across our multi-product SaaS platform. Our team operates lean, leveraging a combination of deep engineering expertise and AI-assisted tooling to achieve platform-scale impact. As an engineer on this team, you will be expected to deeply understand the systems you own, proactively identify and address potential issues, and deliver solutions with a high degree of care to ensure downstream product teams remain unblocked. The immediate focus will be on federated identity and authorization infrastructure, involving the development and extension of platform services essential for authenticating users, enforcing authorization, and managing access at scale. A strong candidate will possess hands-on experience with OAuth 2.0, OIDC, SAML, and JWT, a solid understanding of authorization frameworks, and practical knowledge of integrating identity services into real-world applications. We are looking for individuals who embrace AI-assisted workflows as a core part of their development process, using AI tools as a force multiplier rather than an afterthought.

Requirements

3-5 years of professional software engineering experience, with a demonstrated ability to own and deliver features independently in a production environment.
Hands-on experience building backend services in .NET or Python, including RESTful API development.
Demonstrated experience implementing or integrating with federated identity systems using OAuth 2.0, OIDC, SAML 2.0, and/or JWT in production applications.
Practical understanding of authorization frameworks: how policies are modeled, enforced, and integrated into application and platform services.
Proficiency in .NET or Python for backend service development; familiarity with modern API frameworks (e.g., .NET 9+, FastAPI).
Working knowledge of identity protocol mechanics: authorization code flow, token introspection, claims-based access, assertion handling, and SSO logout behavior.
Experience with multi-tenant SaaS integration patterns, including tenant-scoped configuration and user identity across application boundaries.
Familiarity with cloud platforms (AWS preferred), including relevant managed services for networking, compute, and secrets management.
Proficiency with standard development tooling: Git, CI/CD pipelines, containerization (Docker), and automated testing.
Active use of AI-assisted development tools (Claude Code, Codex, or equivalent) as part of a daily engineering workflow.

Nice To Haves

Prior experience working with a commercial or open-source identity platform
Experience modeling and implementing fine-grained authorization (RBAC, ABAC)
Familiarity with token security considerations
Experience building software in a financial services or regulated technology environment
Experience building internal platform capabilities
Exposure to SOC 2 or similar compliance frameworks
Experience contributing to AI harnesses or evaluation pipelines
Comfort using AI tools for design exploration and test generation

Responsibilities

Design, implement, test, and release features end-to-end with limited guidance.
Independently identify edge cases and potential failure modes within assigned work.
Write clean, maintainable code and provide constructive, specific feedback during code reviews.
Proactively communicate blockers or ambiguities to the team.
Apply practical knowledge of federated identity standards including OAuth 2.0, OIDC, SAML 2.0, and JWT.
Understand and reason about authorization frameworks, policy enforcement, and integration into upstream and downstream services.
Reason clearly about token lifecycle, session management, and the security implications of identity design choices.
Understand the mechanics of connecting distributed services in a multi-product platform environment.
Build and maintain integrations that are observable, fault-tolerant, and respectful of downstream consumers.
Write and work with API contracts (REST, event-driven patterns) with attention to versioning and backwards compatibility.
Actively use AI-assisted development tools (e.g., Claude Code, Codex) to accelerate design, implementation, and validation.
Participate in building and improving AI-assisted workflows and evaluation harnesses.
Stay current on evolving AI tooling and introduce new approaches to the team.
Write tests with sufficient coverage to catch regressions without over-engineering.
Contribute to operational health by monitoring shipped features, responding to issues, and following incidents to resolution.
Document systems and processes to reduce reliance on tribal knowledge.
Build and extend platform services for federated identity, authentication, and authorization.
Implement integrations with the centralized identity platform, including token handling and session management.
Support product teams with integration processes, debugging, and navigating edge cases.
Develop tooling, documentation, and examples for self-service integrations.
Design and implement backend service integrations using Python and common patterns.
Build with multi-product and multi-tenant scenarios in mind.
Participate in API design reviews.
Use AI development tools as an active part of the delivery workflow.
Contribute to AI harness development to improve team velocity.
Share effective AI-assisted engineering patterns with the team.
Write unit, integration, and acceptance tests.
Instrument services for observability (logging, metrics, alerting).
Participate in on-call rotations and incident response.
Participate in design discussions and code reviews, giving and receiving feedback constructively.
Provide mentorship and review support to junior engineers.
Contribute to internal documentation, runbooks, and onboarding materials.