Identity Platform Engineer

Role Description

We're looking for an Identity Platform Engineer to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem. You'll work across application, platform, and infrastructure layers — investigating issues, onboarding clients, maintaining services, and improving how the platform runs day to day. The right candidate has hands-on experience with OAuth2 and OpenID Connect, a solid grasp of authentication and authorization concepts, and the troubleshooting instincts to diagnose problems across a complex stack. This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused.

• Support day-to-day operation of the OIDC platform
• Investigate authentication and authorization issues
• Assist with client registrations, configuration changes, and onboarding
• Maintain Node.js and TypeScript services
• Support MFA integrations and identity federation
• Monitor platform health and respond to incidents
• Develop automation and operational tooling
• Support Elasticsearch and Redis-based services
• Participate in on-call rotations

Qualifications

• 2–4 years of experience working with OAuth2 and OpenID Connect
• Understanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, Claims and Scopes, MFA concepts, and Identity Federation

Requirements

• Node.js and TypeScript experience
• REST API development
• Git-based workflows
• Kubernetes fundamentals
• Linux administration
• Monitoring and troubleshooting skills
• Basic Elasticsearch knowledge

Nice to have

• Experience with oidc-provider, Keycloak, Zitadel, or Authentik
• Active Directory or Azure AD / Entra ID

Benefits

• Highly competitive salary
• Ability to work anywhere in the world
• Part of a dynamic team taking on interesting challenges in the technology/infrastructure space