Senior Software Engineer - IAM (OIDC / OAuth)
Company: Portainer.io
Location: Location not specified (Remote)
Type: Full-time
Remote: Yes
Posted: 2026-06-18
About this role
We're looking for a Senior Software Engineer with deep Identity and Access Management (IAM) domain expertise to take ownership of a large-scale enterprise OIDC platform supporting thousands of users, hundreds of applications, and mission-critical authentication services.
This is not a Kubernetes, DevOps, SRE, or infrastructure engineering role. It is a senior application engineering and identity architecture position focused on the design, operation, troubleshooting, and evolution of a custom-built authorization platform. You'll become the technical authority for the platform, leading complex investigations, guiding architectural decisions, mentoring other engineers, and driving the roadmap toward a modern, standards-based identity solution.
The ideal candidate has hands-on experience building, operating, or extending identity platforms and authorization servers, with deep fluency in OAuth2, OpenID Connect, JWTs, claims, scopes, federation, MFA, token lifecycle management, and authentication architecture. You should be comfortable working in Node.js and TypeScript codebases, diagnosing production issues across application and data layers, and translating identity and security requirements into robust engineering solutions.
This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused.
### What you'll do
### Platform operations
- Own the operational health, reliability, and availability of the OIDC platform
- Lead incident investigation and root cause analysis
- Diagnose authentication, authorization, MFA, federation, and token-related failures
- Develop operational runbooks and platform documentation
### Identity engineering
- Design and implement enhancements to authentication and authorization workflows
- Maintain OAuth2 and OIDC integrations
- Support MFA technologies including TOTP, SMS, Email, WebAuthn, and passwordless authenti...