Software Engineer – Identity & Access Management (IAM)
⚲ Remote
20 000 - 24 500 PLN (PERMANENT)
Wymagania
- Git
- REST API
- Active Directory
- SAML
- OAuth
- LDAP
- OIDC (nice to have)
- Python (nice to have)
- C++ (nice to have)
Opis stanowiska
O projekcie:
EditShare is strengthening its world-class media ecosystem. As a Software Engineer on our Storage Team, you'll design secure authentication and authorization solutions across enterprise applications, working cross-functionally with our FLOW MAM platform as we evolve EditShare One.
You'll implement SSO integrations, work hands-on with SAML, OAuth 2.0, OIDC, and LDAP, and partner with security architects and infrastructure teams to build secure, scalable identity solutions.
We're a remote-first team spanning Poland, the UK, and the US, guided by shared values: caring for our customers, working with integrity, being great teammates, giving our best every day, and maintaining a healthy work/life balance.
Benefits include private health insurance for you and your family, and a collaborative environment where your ideas help shape the product.
Note: Use of AI to answer application questions or during interviews will result in immediate disqualification. EditShare is an equal opportunity employer; all offers are contingent on successful reference checks.
Wymagania:
Experience & Technical Skills
- Bachelor's degree in Computer Science, Information Systems, or equivalent experience
- 4+ years of software engineering experience developing enterprise applications
- Strong knowledge of Microsoft Active Directory Domain Services (AD DS)
- Hands-on experience with Active Directory Single Sign-On (AD SSO) and federated authentication
- Experience configuring and supporting SAML 2.0 authentication
- Experience integrating with Identity Providers such as Microsoft Entra ID (Azure AD), Okta, Ping Identity, ForgeRock, or OneLogin
- Strong understanding of OAuth 2.0, OpenID Connect (OIDC), LDAP/LDAPS, Kerberos, and NTLM
- Experience with Active Directory Federation Services (AD FS)
- Experience developing REST APIs and secure web services
- Proficiency in Java, C/C++, Python, or JavaScript/TypeScript
- Experience with SSL/TLS certificates, PKI, and certificate lifecycle management
- Experience using Git and CI/CD pipelines
Nice to Have
- Familiarity with Microsoft Entra ID, Okta, or similar cloud IdPs at scale
- Experience with RBAC and identity governance initiatives
Codzienne zadania:
- Design, develop, and maintain enterprise authentication and authorization solutions
- Implement and support SSO integrations using Active Directory and enterprise identity platforms
- Develop and maintain integrations using SAML 2.0, OAuth 2.0, OIDC, and LDAP protocols
- Configure and troubleshoot Identity Provider (IdP) and Service Provider (SP) integrations
- Integrate enterprise applications with Microsoft Active Directory, AD FS, and cloud identity providers
- Develop APIs and middleware supporting authentication, authorization, and user provisioning
- Implement role-based access control (RBAC) and least-privilege access models
- Support user lifecycle management, directory synchronization, and identity governance initiatives
- Produce technical documentation, integration guides, and operational procedures
EditShare is strengthening its world-class media ecosystem. As a Software Engineer on our Storage Team, you'll design secure authentication and authorization solutions across enterprise applications, working cross-functionally with our FLOW MAM platform as we evolve EditShare One.
You'll implement SSO integrations, work hands-on with SAML, OAuth 2.0, OIDC, and LDAP, and partner with security architects and infrastructure teams to build secure, scalable identity solutions.
We're a remote-first team spanning Poland, the UK, and the US, guided by shared values: caring for our customers, working with integrity, being great teammates, giving our best every day, and maintaining a healthy work/life balance.
Benefits include private health insurance for you and your family, and a collaborative environment where your ideas help shape the product.
Note: Use of AI to answer application questions or during interviews will result in immediate disqualification. EditShare is an equal opportunity employer; all offers are contingent on successful reference checks.
Wymagania:
Experience & Technical Skills
- Bachelor's degree in Computer Science, Information Systems, or equivalent experience
- 4+ years of software engineering experience developing enterprise applications
- Strong knowledge of Microsoft Active Directory Domain Services (AD DS)
- Hands-on experience with Active Directory Single Sign-On (AD SSO) and federated authentication
- Experience configuring and supporting SAML 2.0 authentication
- Experience integrating with Identity Providers such as Microsoft Entra ID (Azure AD), Okta, Ping Identity, ForgeRock, or OneLogin
- Strong understanding of OAuth 2.0, OpenID Connect (OIDC), LDAP/LDAPS, Kerberos, and NTLM
- Experience with Active Directory Federation Services (AD FS)
- Experience developing REST APIs and secure web services
- Proficiency in Java, C/C++, Python, or JavaScript/TypeScript
- Experience with SSL/TLS certificates, PKI, and certificate lifecycle management
- Experience using Git and CI/CD pipelines
Nice to Have
- Familiarity with Microsoft Entra ID, Okta, or similar cloud IdPs at scale
- Experience with RBAC and identity governance initiatives
Codzienne zadania:
- Design, develop, and maintain enterprise authentication and authorization solutions
- Implement and support SSO integrations using Active Directory and enterprise identity platforms
- Develop and maintain integrations using SAML 2.0, OAuth 2.0, OIDC, and LDAP protocols
- Configure and troubleshoot Identity Provider (IdP) and Service Provider (SP) integrations
- Integrate enterprise applications with Microsoft Active Directory, AD FS, and cloud identity providers
- Develop APIs and middleware supporting authentication, authorization, and user provisioning
- Implement role-based access control (RBAC) and least-privilege access models
- Support user lifecycle management, directory synchronization, and identity governance initiatives
- Produce technical documentation, integration guides, and operational procedures
🔍 Dekoder Ogłoszenia
🔴
design secure authentication and authorization solutions across enterprise applications
Będziesz projektować i implementować systemy zarządzania tożsamością i dostępem, co może oznaczać pracę z istniejącymi, potencjalnie przestarzałymi rozwiązaniami.
🔴
working cross-functionally with our FLOW MAM platform as we evolve EditShare One
Może oznaczać konieczność integracji z istniejącą, być może skomplikowaną i słabo udokumentowaną platformą MAM.
🟡
partner with security architects and infrastructure teams
Współpraca z innymi zespołami może oznaczać konieczność dostosowania się do ich priorytetów i harmonogramów, co może wpływać na Twoją pracę.
🟡
maintaining a healthy work/life balance
Choć brzmi pozytywnie, w praktyce może oznaczać różne rzeczy w zależności od kultury firmy i obciążenia pracą.
🟡
Bachelor's degree in Computer Science, Information Systems, or equivalent experience
Określenie 'equivalent experience' daje dużą elastyczność w interpretacji, co może oznaczać, że formalne wykształcenie nie jest kluczowe, ale też może być furtką do zatrudnienia osób z mniejszym doświadczeniem.