Job Description
Job Description
We are obsessed with the hero's journey at JobNimbus. Every person has a hero's journey—Hermione Granger, James T. Kirk, Frodo Baggins, Anna & Elsa, Nacho Libre, and even YOU! This is our "call to adventure" to come check out JobNimbus. What do you have to lose? You might make a few new friends, learn about a sick new company doing some amazing things, and maybe even land a new job!
Mission:
Lead the technical vision, architecture, and evolution of JobNimbus's identity and access platform: how users and accounts authenticate, how they are authorized, and how enterprise customers connect their own identity providers. Partner closely with engineering, product, and security leadership to build enterprise-grade SSO, robust access control models (RBAC/ABAC), multi-tenant account hierarchies, and the APIs that expose them to customers and partners.
What You'll Be Doing:
- Own the long-term technical roadmap and system architecture for JobNimbus's identity, authentication, authorization, and account management platform.
- Design and lead the delivery of enterprise SSO (SAML 2.0 and OIDC), including integrations with customer identity providers such as Okta, Microsoft Entra ID, and Google Workspace.
- Define and drive the authorization strategy: role-based and attribute-based access control (RBAC/ABAC), fine-grained permissions, and access profiles that work across multi-tenant, multi-location, and parent-child account hierarchies.
- Modernize authentication across the platform, including MFA, session and token lifecycle, user provisioning (SCIM), and service-to-service authentication.
- Design and build secure, well-documented APIs, including the authentication model for public and partner APIs (OAuth 2.0 flows, scoped tokens, API credentials).
- Write mission-critical, high-impact production code in C# and Node.js, setting the benchmark for performance, security, and maintainability across the organization.
- Architect event-driven systems and resilient API contracts for identity events, provisioning, and audit trails.
- Partner with product and security leadership to align account and identity domain models with scalable, future-proof technical architectures.
- Raise the bar on engineering quality across teams by establishing testing standards, observability, threat modeling, and operational metrics for identity services.
- Mentor and grow senior and mid-level engineers, fostering technical excellence, architectural rigor, and domain expertise across the organization.
- Drive the adoption of modern AI-assisted engineering practices to optimize developer velocity and platform reliability.
What Makes You the Hero for This Job:
- 8+ years of software engineering experience with a proven track record as a technical leader or architect on mission-critical, high-scale production systems.
- Deep expertise designing and operating authentication and identity systems: OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, and SCIM.
- Proven experience delivering enterprise SSO and integrating with identity providers (Okta, Microsoft Entra ID, Auth0, Google Workspace, or similar).
- Proven experience designing enterprise access control frameworks (RBAC/ABAC), multi-tenant authorization models, and complex account permission hierarchies.
- Strong API design and development experience: RESTful API contracts, versioning, and securing APIs for customer and partner use.
- Expert-level mastery of backend development using C# and/or Node.js, alongside distributed systems design (event-driven architectures, messaging platforms).
- Deep database expertise in SQL and NoSQL environments (experience with Couchbase is a strong plus).
- Extensive experience with AWS infrastructure, contaites), and Infrastructure as Code (Terraform).
- Outstanding cross-functional leadership skills, with a proven ability to partner with product, security, and executive stakeholresolve ambiguous technical problems.
- Strong commitment to mentoring engineers, conducting architectural reviews, and establishing engineering best practices across multiple engineering pods.
- Nice to have: experience with subscription or entitlement platforms (Chargebee, Stripe Billing, or similar) and how plans and entitlements connect to access control.
Superpowers:
- Extreme Ownership. You own the outcomes, drive initiatives, and solve problems proactively. If you need direction and someone to hold your hand, this job is not for you.
- Customer Obsessed. Everything we build should leave our customers saying, "Aw dip. This product is off the charts cool. Whoever wrote that code deserves a raise!"
- Proactive Learning. You stay ahead of the curve, continuously learning and implementing cutting-edge technologies.
- Team Commitment. You build, mentor, and lead a high-performance engineering team that delivers results together.
- Self Awareness. You know your strengths, weaknesses, and how to surround yourself with the right talent to succeed.
Mentor (Hit us up to get more information)
Dustan Halbach - Specialist in hiring amazing people, lover of the outdoors, hunting, fly fishing, snowboarding, hockey and golf.