Staff Software Engineer

We are obsessed with the hero's journey at JobNimbus. Every person has a hero's journey-Hermione Granger, James T. Kirk, Frodo Baggins, Anna & Elsa, Nacho Libre, and even YOU! This is our "call to adventure" to come check out JobNimbus. What do you have to lose? You might make a few new friends, learn about a sick new company doing some amazing things, and maybe even land a new job!

Mission:

Lead the technical vision, architecture, and evolution of JobNimbus's identity and access platform: how users and accounts authenticate, how they are authorized, and how enterprise customers connect their own identity providers. Partner closely with engineering, product, and security leadership to build enterprise-grade SSO, robust access control models (RBAC/ABAC), multi-tenant account hierarchies, and the APIs that expose them to customers and partners.

What You'll Be Doing:

• Own the long-term technical roadmap and system architecture for JobNimbus's identity, authentication, authorization, and account management platform.
• Design and lead the delivery of enterprise SSO (SAML 2.0 and OIDC), including integrations with customer identity providers such as Okta, Microsoft Entra ID, and Google Workspace.
• Define and drive the authorization strategy: role-based and attribute-based access control (RBAC/ABAC), fine-grained permissions, and access profiles that work across multi-tenant, multi-location, and parent-child account hierarchies.
• Modernize authentication across the platform, including MFA, session and token lifecycle, user provisioning (SCIM), and service-to-service authentication.
• Design and build secure, well-documented APIs, including the authentication model for public and partner APIs (OAuth 2.0 flows, scoped tokens, API credentials).
• Write mission-critical, high-impact production code in C# and Node.js, setting the benchmark for performance, security, and maintainability across the organization.
• Architect event-driven systems and resilient API contracts for identity events, provisioning, and audit trails.
• Partner with product and security leadership to align account and identity domain models with scalable, future-proof technical architectures.
• Raise the bar on engineering quality across teams by establishing testing standards, observability, threat modeling, and operational metrics for identity services.
• Mentor and grow senior and mid-level engineers, fostering technical excellence, architectural rigor, and domain expertise across the organization.
• Drive the adoption of modern AI-assisted engineering practices to optimize developer velocity and platform reliability.

What Makes You the Hero for This Job:

• 8+ years of software engineering experience with a proven track record as a technical leader or architect on mission-critical, high-scale production systems.
• Deep expertise designing and operating authentication and identity systems: OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, and SCIM.
• Proven experience delivering enterprise SSO and integrating with identity providers (Okta, Microsoft Entra ID, Auth0, Google Workspace, or similar).
• Proven experience designing enterprise access control frameworks (RBAC/ABAC), multi-tenant authorization models, and complex account permission hierarchies.
• Strong API design and development experience: RESTful API contracts, versioning, and securing APIs for customer and partner use.
• Expert-level mastery of backend development using C# and/or Node.js, alongside distributed systems design (event-driven architectures, messaging platforms).
• Deep database expertise in SQL and NoSQL environments (experience with Couchbase is a strong plus).
• Extensive experience with AWS infrastructure, contaites), and Infrastructure as Code (Terraform).
• Outstanding cross-functional leadership skills, with a proven ability to partner with product, security, and executive stakeholresolve ambiguous technical problems.
• Strong commitment to mentoring engineers, conducting architectural reviews, and establishing engineering best practices across multiple engineering pods.
• Nice to have: experience with subscription or entitlement platforms (Chargebee, Stripe Billing, or similar) and how plans and entitlements connect to access control.

Superpowers:

• Extreme Ownership. You own the outcomes, drive initiatives, and solve problems proactively. If you need direction and someone to hold your hand, this job is not for you.
• Customer Obsessed. Everything we build should leave our customers saying, "Aw dip. This product is off the charts cool. Whoever wrote that code deserves a raise!"
• Proactive Learning. You stay ahead of the curve, continuously learning and implementing cutting-edge technologies.
• Team Commitment. You build, mentor, and lead a high-performance engineering team that delivers results together.
• Self Awareness. You know your strengths, weaknesses, and how to surround yourself with the right talent to succeed.

Mentor (Hit us up to get more information)

Dustan Halbach - Specialist in hiring amazing people, lover of the outdoors, hunting, fly fishing, snowboarding, hockey and golf.