[8PP] Senior Software Engineer - User Management
Software Mind17 hours ago
Remote, Costa Rica or San José, Costa RicaSenior
Responsibilities
- Design, build, and operate features for the User Management API, including tenant and landscape lifecycle, user and group administration, RBAC, service accounts, client credentials, audit support, and security tooling.
- Own Okta and Microsoft Entra ID integrations for provisioning, lifecycle synchronization, event handling, and application-registration automation.
- Maintain authentication models and authorization rules, including multi-tenant identity, tenant isolation, and least-privilege access.
- Design and version REST and gRPC/Protocol Buffers contracts and coordinate SDK releases for dependent products.
- Implement secret management using Azure services and maintain data integrity and auditability across tenants.
- Write NUnit and Moq unit tests, integration tests, and automated smoke suites focused on authentication, permissions, and tenant isolation.
- Collaborate with frontend engineers and product teams using the platform SDK.
- Participate in on-call and incident response for the cloud service.
Requirements
- 5+ years of experience building production backend services with C#/.NET, ASP.NET Core Web API, dependency injection, and asynchronous programming.
- Hands-on experience building or operating identity and access-management systems using OAuth 2.0, OpenID Connect, authorization code with PKCE, client credentials, token validation and refresh, claims, multiple issuers and audiences, signing keys, and key rotation.
- Experience with multi-tenant user, role, and permission models, including RBAC and tenant isolation.
- Experience implementing user invitation, activation, deactivation, deprovisioning, and synchronization with external identity providers.
- Production experience with at least one enterprise identity provider, such as Okta, Microsoft Entra ID/Azure AD, Auth0, or Ping.
- Strong relational database skills with SQL Server and EF Core, including migrations and query performance.
- Experience designing and versioning APIs used by other teams, including REST and ideally gRPC/Protocol Buffers.
- Knowledge of the OWASP Top 10, secure secret handling, auditable code, and least-privilege principles.
- Preferred experience with the Okta Management API/SDK, Okta event hooks or inline hooks, Okta Identity Engine, Microsoft Graph, SAML 2.0, SCIM, enterprise SSO federation, Azure Managed Identity, Data Protection, internal NuGet packages, GitVersion, Conventional Commits, Angular, or another modern frontend framework.
- Experience in regulated industries and familiarity with AI-assisted development tools are additional advantages.
Benefits
- The posting describes a multicultural, constantly growing company with an excellent work environment certified by Great Place To Work.
- The role includes on-call and incident-response participation for a cloud service.
About Software Mind
Software Mind provides outsourced software engineering and autonomous, cross-functional development teams to startups through enterprises, delivering custom applications, cloud, AI, data and embedded solutions. The privately held company, headquartered in Krakow, operates across Europe, the US and LATAM, supporting full software lifecycles from ideation to maintenance. It offers nearshore/offshore engagement models and received private equity investment in 2020.