[Hiring] Software Engineer @Portainer.io

Role Description

We're looking for a Software Engineer with Identity and Access Management (IAM) domain experience to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem. This is primarily an application engineering role, not a Kubernetes, DevOps, SRE, or infrastructure engineering position. You'll work on the identity platform itself, investigating authentication and authorization issues, onboarding applications, maintaining Node.js/TypeScript services, implementing platform enhancements, and troubleshooting complex OAuth2 and OpenID Connect workflows.

The ideal candidate has hands-on experience building, supporting, or extending identity platforms and a strong understanding of:

• OAuth2
• OpenID Connect
• JWTs
• Claims
• Scopes
• MFA
• Identity federation

You should be comfortable reading and modifying application code, debugging production issues, and diagnosing problems across application, data, and infrastructure layers.

This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused.

Qualifications

• 2–4 years of experience working with OAuth2 and OpenID Connect
• Understanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, Claims and Scopes, MFA concepts, and Identity Federation

Requirements

• Node.js and TypeScript experience
• REST API development
• Git-based workflows
• Kubernetes fundamentals
• Linux administration
• Monitoring and troubleshooting skills
• Basic Elasticsearch knowledge

Nice to have

• Experience with oidc-provider, Keycloak, Zitadel, or Authentik
• Active Directory or Azure AD / Entra ID

Benefits

• Highly competitive salary
• Ability to work anywhere in the world
• Part of a dynamic team tackling interesting challenges in the technology/infrastructure space