2 months ago
Bengaluru, IndiaSenior
Responsibilities
- Design, build, and harden identity and access flows using OIDC/OAuth 2.0, SAML 2.0, and Active Directory integrations.
- Own issuance, validation, expiry, rotation, and failure-mode handling for JWT/JWKS and SAML assertions.
- Apply cryptography and PKI practices involving X.509 certificates, key rotation, and TLS.
- Build and maintain reverse-proxy and HTTP-layer components, including TLS termination and header handling.
- Debug customer-facing identity and access issues and triage escalations with support.
- Contribute to build, release, and cross-platform packaging for Linux and Windows.
- Maintain a Windows companion application written in C#/.NET.
- Write end-to-end tests for authentication flows, failure modes, and edge cases.
- Document known issues, workarounds, and design decisions.
- Communicate design tradeoffs, security posture, and escalation status to product and engineering stakeholders.
Requirements
- At least 8 years of professional experience.
- Strong hands-on programming skills in Golang.
- Deep practical knowledge of OIDC/OAuth 2.0 and SAML 2.0, including token and assertion internals, standard flows, and failure modes.
- Working knowledge of Active Directory.
- Applied cryptography and PKI experience with X.509, JWT/JWKS, key rotation, and TLS.
- Strong security engineering discipline and ability to reason about threat models.
- Understanding of operating system fundamentals, networking, and concurrency.
- Working knowledge of Linux and comfort writing shell/bash scripts.
- Clear written and verbal communication.
- Preferred experience with directory internals, HTTP internals, reverse proxying, cross-platform packaging, secret-manager internals, Redis, Win32, policy engines, and C#/.NET.
About Rubrik
Rubrik builds an enterprise data security and backup platform that protects and recovers data, identities, and workloads across on-prem, public clouds, and SaaS. Its Rubrik Security Cloud delivers backup, ransomware detection and recovery, and policy management, sold primarily by subscription with professional services. Founded in 2014 and headquartered in Palo Alto, California, the company is publicly traded on the NYSE under the ticker RBRK.