- Location
- India
- Workplace
- Remote
- Employment
- Full time
- Level
- Mid level
- Posted
- 17 June
About this role
We're looking for a Software Engineer with Identity and Access Management (IAM) domain experience to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem.
This is primarily an application engineering role, not a Kubernetes, DevOps, SRE, or infrastructure engineering position. You'll work on the identity platform itself. Investigating authentication and authorization issues, onboarding applications, maintaining Node.js/TypeScript services, implementing platform enhancements, and troubleshooting complex OAuth2 and OpenID Connect workflows.
The ideal candidate has hands-on experience building, supporting, or extending identity platforms and a strong understanding of OAuth2, OpenID Connect, JWTs, claims, scopes, MFA, and identity federation. You should be comfortable reading and modifying application code, debugging production issues, and diagnosing problems across application, data, and infrastructure layers.
This role operates with core collaboration hours of 6:00 PM - 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused.
What you'll do
- Support day-to-day operation of the OIDC platform
- Investigate authentication and authorization issues
- Assist with client registrations, configuration changes, and onboarding
- Maintain Node.js and TypeScript services
- Support MFA integrations and identity federation
- Monitor platform health and respond to incidents
- Develop automation and operational tooling
- Support Elasticsearch and Redis-based services
- Participate in on-call rotations
Requirements
Identity and security
- 2 - 4 years of experience working with OAuth2 and OpenID Connect
- Understanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, Claims and Scopes, MFA concepts, and Identity Federation
Development
- Node.js and TypeScript experience
- REST API development
- Git-based workflows
Platform and infrastructure
- Kubernetes fundamentals
- Linux administration
- Monitoring and troubleshooting skills
- Basic Elasticsearch knowledge
Nice to have
- Experience with oidc-provider, Keycloak, Zitadel, or Authentik
- Active Directory or Azure AD / Entra ID
Benefits
Portainer is a leading tech company offering a broad benefits package including a highly competitive salary and the ability to work anywhere in the world while still being part of a dynamic team taking on some of the most interesting challenges in the technology/infrastructure space.
As published by Portainer.io. Applications are handled on their site.
Skills this posting mentions
About Portainer.io
Portainer unifies Kubernetes, Docker, and Podman environments into one intuitive, container management platform, engineered for both scale and edge deployment. From GitOps to observability, security to provisioning, Portainer removes the overhead of managing containers, so your teams move faster, operate safer, and focus on what matters; delivering business outcomes.
All 2 openings at Portainer.ioOne click, then it is written
Apply to Portainer.io with a resume written for this role.
Queue Software Engineer - IAM (OIDC/OAuth) and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Portainer.io’s form for you.
01Drop your resume
A PDF or a LinkedIn URL. About a minute, once.
02I rank the openings
Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.
03Each one is written up
Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.
- 25 sent a week, free
- No card
- Nothing sent until you say so
More roles at Portainer.io
See all- 3 July
Similar roles elsewhere
See more
Put this to work
Paste your career in once. Every application after that is written for you.
Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.
01Drop your resume
A PDF or a LinkedIn URL. About a minute, once.
02I rank the openings
Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.
03Each one is written up
Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.
- New matches ranked and written before you are up.
- Every bullet stays inside what your history supports. Nothing invented.
- Queued, submitted, interviewing, offer: one screen, not a spreadsheet.
Free, no card. Up to 25 applications sent a week, and nothing is sent until you say so.
Listed from the job board Portainer.io publishes. Refolk is not the employer and does not handle their hiring. Applications go to Portainer.io directly.
Hiring at Portainer.io? Post this role to the Refolk talent pool for $299, once. No commission, refunded if I find nobody. Post a role for $299