2 hours ago
Responsibilities
- Design, build, and harden identity and access flows using OIDC/OAuth 2.0, SAML 2.0, and Active Directory integrations.
- Own issuance, validation, expiry, rotation, and failure-mode handling for JWT/JWKS and SAML assertions.
- Apply cryptography and PKI practices involving X.509 certificates, key rotation, and TLS.
- Build and maintain reverse-proxy and HTTP-layer components, including TLS termination and header handling.
- Debug customer-facing identity and access issues and triage escalations with support.
- Contribute to build, release, and cross-platform packaging for Linux and Windows.
- Maintain a Windows companion application written in C#/.NET.
- Write end-to-end tests for authentication flows, failure modes, and edge cases.
- Document known issues, workarounds, and design decisions.
- Communicate design tradeoffs, security posture, and escalation status to product and engineering stakeholders.
Requirements
- At least 8 years of professional experience.
- Strong hands-on programming skills in Golang.
- Deep practical knowledge of OIDC/OAuth 2.0 and SAML 2.0, including token and assertion internals, standard flows, and failure modes.
- Working knowledge of Active Directory.
- Applied cryptography and PKI experience with X.509, JWT/JWKS, key rotation, and TLS.
- Strong security engineering discipline and ability to reason about threat models.
- Understanding of operating system fundamentals, networking, and concurrency.
- Working knowledge of Linux and comfort writing shell/bash scripts.
- Clear written and verbal communication.
- Preferred experience with directory internals, HTTP internals, reverse proxying, cross-platform packaging, secret-manager internals, Redis, Win32, policy engines, and C#/.NET.
About Rubrik
Rubrik (NYSE: RBRK), the Security and AI company, operates at the intersection of data protection, cyber resilience and enterprise AI acceleration. The Rubrik Security Cloud platform is designed to deliver robust cyber resilience and recovery including identity resilience to ensure continuous business operations, all on top of secure metadata and data lake. Follow @rubrikInc on X (formerly Twitter), YouTube, and Instagram.