Senior Software Engineer, Identity & Access Discovery
Keeper SecurityResponsibilities
- Design and develop the Python discovery engine running on customer-deployed gateways
- Build Java/Kotlin cloud services that store and serve discovered data
- Discover privileged accounts, service accounts, keys, machines, and identity data across Active Directory, cloud IAM, databases, and endpoints
- Develop identity correlation, reconciliation, incremental rescanning, and state-management capabilities
- Create unit, integration, and automated tests plus diagnostic tooling, logging, and error reporting
- Design resilient discovery workflows that respect API limits, limit blast radius, and handle partial failures in customer production networks
- Develop secure data-processing workflows that protect discovered data throughout collection, transmission, and storage within the zero-knowledge architecture
- Collaborate with Product, QA, and PAM engineers on technical design, testing, troubleshooting, and delivery
- Use AI-assisted tools such as Claude, ChatGPT, and GitHub Copilot for development, debugging, research, and documentation
Requirements
- 8+ years of professional software development experience focused on backend systems
- Strong Python experience, with Python as the primary language of the Discovery engine
- Working proficiency in Java or Kotlin and enough TypeScript/React experience to modify the administrative interface
- Strong experience with distributed systems, APIs, data-processing pipelines, and reliable software in uncontrolled environments
- Hands-on experience with Active Directory and/or LDAP
- Working knowledge of at least one major cloud IAM model, including AWS IAM and Organizations, Microsoft Entra ID, or GCP IAM
- Strong knowledge of secure software development, authentication, authorization, and encryption
- Bachelor’s degree in computer science, engineering, or a related field, or equivalent practical experience
- Strong data-modeling skills, ideally involving graph or relationship-oriented models
- U.S. Person status, defined as a U.S. citizen or lawful permanent resident, due to GovCloud and FedRAMP involvement
- Preferred experience with Privileged Access Management, identity security, cybersecurity products, identity or infrastructure discovery, asset inventory, containerized or cloud-native applications, and high-scale enterprise SaaS
Benefits
- 100% remote position, with a hybrid schedule available for candidates in the Chicago, Illinois or El Dorado Hills, California metro areas
- Medical, dental, and vision coverage, including domestic partnerships
- Employer-paid life insurance and supplemental life insurance for employees, spouses, and children
- Voluntary short- and long-term disability insurance
- Roth or traditional 401(k)
- Generous paid time off, including paid bereavement and jury duty leave
About Keeper Security
Keeper Security is transforming cybersecurity for millions of individuals and thousands of organizations globally. Built to protect against today’s threats and tomorrow’s challenges, our unified, cloud-native cybersecurity platform is trusted by Fortune 100 companies to protect every user, on every device, in every location. Keeper is a pioneer of zero-knowledge and zero-trust security built for any IT environment. Our core offering, KeeperPAM®, is an AI-enabled, cloud-native platform that protects all users, devices and infrastructure from cyber attacks. Recognized in the Gartner Magic Quadrant for Privileged Access Management (PAM), Keeper continues to lead in cybersecurity innovation, securing passwords and passkeys, infrastructure secrets, remote connections and endpoints with role-based enforcement policies, least privilege and just-in-time access. As threats evolve and environments scale, Keeper is redefining modern cybersecurity to deliver the visibility, control and intelligence organizations need to operate confidently and securely. Our security and compliance standards include: - The longest-standing SOC 2 and ISO 27001 certifications in the industry - FedRAMP and GovRAMP Authorization - FIPS 140-3 validation - SOC 3, PCI DSS and ISO 27001, 27017 and 27018 certification Learn more at keepersecurity.com.