DevOps Engineer
Guidewire SoftwareResponsibilities
- Implement authentication flows using JWT, AWS Cognito, SSO integrations, and machine-to-machine authentication patterns.
- Build role-based and attribute-based access controls and maintain a reusable authorization library.
- Translate SOC 2, data privacy, and customer requirements into encryption, key management, audit logging, and data residency controls.
- Implement IP restrictions, VPC network segmentation, and traffic policies.
- Build and maintain reusable security components for authentication middleware, secret management, and audit logging.
- Review project designs for security gaps, support customer audits, and partner on security-focused testing standards.
- Run threat modeling and remediate security findings within required service-level agreements.
Requirements
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related technical field.
- 8+ years of software engineering experience with a strong focus on security implementation.
- Expert knowledge of OAuth 2.0, OIDC, JWT, and SAML authentication and authorization patterns.
- Hands-on experience with AWS Cognito, IAM, KMS, and Secrets Manager.
- Strong backend development skills in Python, Java, or TypeScript.
- Working knowledge of SOC 2, ISO 27001, GDPR, secure CI/CD patterns, SBOMs, dependency scanning, and supply-chain security.
- Track record of shipping production-grade security components as a coding security engineer.
- Preferred experience in regulated industries or multi-tenant SaaS.
- Preferred experience securing LLM-based applications, including prompt injection defenses, output filtering, and model access controls.
- AWS Security Specialty certification or equivalent is preferred.
- Guidewire Cloud security model familiarity and hands-on production threat-modeling experience are preferred.
Tech Stack
Categories
About Guidewire Software
Guidewire is the platform P&C insurers trust to engage, innovate, and grow efficiently. More than 570 insurers in 43 countries, from new ventures to the largest and most complex in the world, rely on Guidewire products. With core systems leveraging data and analytics, digital, and artificial intelligence, Guidewire defines cloud platform excellence for P&C insurers. We are proud of our unparalleled implementation record, with 1,700+ successful projects supported by the industry’s largest R&D team and SI partner ecosystem. Our marketplace represents the largest partner community in P&C, where customers can access hundreds of applications to accelerate integration, localization, and innovation. For more information, please visit https://www.guidewire.com/.