1 day ago
Bulgaria (city not specified)Senior
Responsibilities
- Design, build, and maintain platform-level authentication and authorization services.
- Implement OAuth 2.0, OIDC, SAML, JWT, and token issuance, validation, refresh, and revocation flows.
- Develop role, permission, and policy-driven access-control models across multiple products.
- Build internal and external reports for platform adoption, consumption, and monitoring.
- Develop RESTful APIs and service contracts consumed by multiple product teams.
- Implement tenant-context propagation and service-to-service authentication and authorization across distributed systems.
- Build secure, scalable, highly available services meeting security, performance, and reliability requirements.
- Implement secure integration patterns and shared authentication capabilities between the B2B and Advantage platforms.
- Apply security patterns and controls, address threat-modeling findings, and contribute to secure coding practices.
- Deliver features from design through testing, deployment, production support, and incident resolution.
Requirements
- Strong hands-on experience building and operating identity and access-management services in enterprise SaaS environments.
- Deep practical knowledge of OAuth 2.0, OIDC, SAML, JWT, authorization code with PKCE, and client credentials flows.
- Experience implementing role-based, permission-based, and policy-driven authorization models.
- Experience building backend systems with a modern language such as Java, C#, Python, Scala, TypeScript, or Rust.
- Strong experience designing and implementing RESTful APIs with multiple consumers.
- Solid experience with SQL and data stores supporting platform services.
- Knowledge of authentication flows, multi-tenancy, tenant-context handling, distributed systems, software design patterns, and platform tradeoffs.
- Understanding of secure coding practices and identity-related vulnerabilities, including token misuse, session-handling flaws, and privilege escalation.
- Experience delivering software end to end through testing, deployment, and production support.
- Preferred experience with Microsoft Entra ID, Okta, Auth0, Keycloak, Ping, SCIM, federation, SSO, MFA, Azure, AWS, GCP, Docker, Kubernetes, Azure SQL Server, mTLS, Power BI, and Databricks.
- Preferred familiarity with DevOps and SRE practices for monitoring, alerting, and automation.
Benefits
- Conga describes opportunities for individual and team development, inclusive collaboration, and a growth path toward staff-level or technical leadership roles.
Tech Stack
About Conga
Conga builds enterprise SaaS for revenue lifecycle management, including CPQ, contract lifecycle management, billing, eSignature, and document generation with deep Salesforce integration. It sells subscriptions to businesses with complex commercial operations, helping unify quoting, contracting, and fulfillment. Founded in 2006 and headquartered in Houston, the privately held company reports more than 10,000 customers worldwide, including over half of the Fortune 100.