3 hours ago
Responsibilities
- Design, build, and harden OIDC/OAuth 2.0, SAML 2.0, and Active Directory identity and access flows.
- Manage issuance, validation, expiry, rotation, and failure handling for JWT/JWKS tokens and SAML assertions.
- Apply X.509, key rotation, and TLS practices to secure authentication systems.
- Build and maintain reverse-proxy and HTTP-layer components, including TLS termination and header handling.
- Debug customer-facing identity and access issues and triage escalations with support.
- Contribute to build, release, and cross-platform packaging for Linux and Windows.
- Maintain a Windows companion application written in C#/.NET.
- Develop end-to-end tests for authentication flows, failure modes, and edge cases.
- Document known issues, workarounds, and design decisions.
- Communicate design tradeoffs, security posture, and escalation status to product and engineering stakeholders.
Requirements
- Strong hands-on programming experience in Golang.
- Deep practical knowledge of OIDC/OAuth 2.0 and SAML 2.0, including token and assertion internals, standard flows, and failure modes.
- Working knowledge of Active Directory.
- Applied cryptography and PKI experience with X.509, JWT/JWKS, key rotation, and TLS.
- Ability to reason about threat models and apply security engineering practices to mission-critical systems.
- Solid understanding of operating system fundamentals, networking, and concurrency.
- Working knowledge of Linux and comfort writing shell/bash scripts.
- Clear written and verbal communication skills.
- Preferred experience with directory schema and bind operations, HTTP internals, reverse proxying, and TLS/header injection.
- Preferred experience with Linux deb/rpm and Windows MSI packaging.
- Preferred knowledge of secret-manager internals, Redis, Win32, policy engines, and C#/.NET.
About Rubrik
Rubrik (NYSE: RBRK), the Security and AI company, operates at the intersection of data protection, cyber resilience and enterprise AI acceleration. The Rubrik Security Cloud platform is designed to deliver robust cyber resilience and recovery including identity resilience to ensure continuous business operations, all on top of secure metadata and data lake. Follow @rubrikInc on X (formerly Twitter), YouTube, and Instagram.