2 months ago
Pune, IndiaSenior
Responsibilities
- Design, build, and harden OIDC/OAuth 2.0, SAML 2.0, and Active Directory identity and access flows.
- Manage issuance, validation, expiry, rotation, and failure handling for JWT/JWKS tokens and SAML assertions.
- Apply X.509, key rotation, and TLS practices to secure authentication systems.
- Build and maintain reverse-proxy and HTTP-layer components, including TLS termination and header handling.
- Debug customer-facing identity and access issues and triage escalations with support.
- Contribute to build, release, and cross-platform packaging for Linux and Windows.
- Maintain a Windows companion application written in C#/.NET.
- Develop end-to-end tests for authentication flows, failure modes, and edge cases.
- Document known issues, workarounds, and design decisions.
- Communicate design tradeoffs, security posture, and escalation status to product and engineering stakeholders.
Requirements
- Strong hands-on programming experience in Golang.
- Deep practical knowledge of OIDC/OAuth 2.0 and SAML 2.0, including token and assertion internals, standard flows, and failure modes.
- Working knowledge of Active Directory.
- Applied cryptography and PKI experience with X.509, JWT/JWKS, key rotation, and TLS.
- Ability to reason about threat models and apply security engineering practices to mission-critical systems.
- Solid understanding of operating system fundamentals, networking, and concurrency.
- Working knowledge of Linux and comfort writing shell/bash scripts.
- Clear written and verbal communication skills.
- Preferred experience with directory schema and bind operations, HTTP internals, reverse proxying, and TLS/header injection.
- Preferred experience with Linux deb/rpm and Windows MSI packaging.
- Preferred knowledge of secret-manager internals, Redis, Win32, policy engines, and C#/.NET.
About Rubrik
Rubrik builds an enterprise data security and backup platform that protects and recovers data, identities, and workloads across on-prem, public clouds, and SaaS. Its Rubrik Security Cloud delivers backup, ransomware detection and recovery, and policy management, sold primarily by subscription with professional services. Founded in 2014 and headquartered in Palo Alto, California, the company is publicly traded on the NYSE under the ticker RBRK.