Job description

We are obsessed with the hero's journey at JobNimbus. Every person has a hero's journey—Hermione Granger, James T. Kirk, Frodo Baggins, Anna & Elsa, Nacho Libre, and even YOU! This is our “call to adventure” to come check out JobNimbus. What do you have to lose? You might make a few new friends, learn about a sick new company doing some amazing things, and maybe even land a new job! Mission: Build, scale, and maintain JobNimbus’s identity, authentication, authorization, and account management services. Partner closely with engineering, product, and security teams to implement enterprise SSO, fine-grained access control models (RBAC/ABAC), and secure API auth flows that seamlessly support multi-tenant, parent-child account structures. What You'll Be Doing: Build, maintain, and enhance backend services powering JobNimbus's identity, authentication, and authorization platform. Implement enterprise SSO integrations (SAML 2.0, OIDC) with customer identity providers such as Okta, Microsoft Entra ID, and Google Workspace. Implement fine-grained access control models—including role-based and attribute-based access control (RBAC/ABAC), permissions, and access profiles—for complex multi-tenant and parent-child account hierarchies. Modernize platform-wide authentication features, including MFA implementation, session/token lifecycles, user provisioning (SCIM), and service-to-service auth. Design and build secure, well-documented RESTful APIs and auth workflows for public/partner APIs (OAuth 2.0 flows, scoped tokens, API key management). Write production-ready code in C# and Node.js with a strong focus on security, performance, and maintainability. Build event-driven backend components for identity events, automated user provisioning, and secure audit logging. Collaborate with product managers, security engineers, and peer developers to translate auth and identity requirements into clear technical designs. Drive operational quality across identity services through unit/integration testing, threat modeling, observability, and proactive monitoring. Leverage AI-assisted development tools to speed up execution, automate routine tasks, and increase code quality. What Makes You the Hero for This Job: 5+ years of professional software engineering experience with a heavy focus on backend services and distributed systems. Strong working knowledge and hands-on experience with modern identity standards: OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, and SCIM. Experience implementing enterprise SSO integrations and working with IdPs (e.g., Okta, Microsoft Entra ID, Auth0, or Google Workspace). Proven track record building granular authorization systems (RBAC/ABAC), multi-tenant permission layers, and complex account hierarchies. Strong backend development experience using C# and/or Node.js. Practical experience designing and securing public/internal APIs (REST, OAuth 2.0, token management). Experience with event-driven architectures and distributed system design patterns. Solid database experience in SQL and NoSQL environments (experience with Couchbase is a plus). Experience with cloud infrastructure (AWS), Docker, and Infrastructure as Code (Terraform). Strong collaborator who can partner effectively with product and security stakeholders. Nice to have: Exposure to subscription or entitlement management platforms (e.g., Chargebee, Stripe Billing) and how billing plans tie into feature entitlements and access controls. Superpowers: Extreme Ownership. You own the outcomes, drive initiatives, and solve problems proactively. If you need direction and someone to hold your hand, this job is not for you. Customer Obsessed. Everything we build should leave our customers saying, "Aw dip. This product is off the charts cool. Whoever wrote that code deserves a raise!" Proactive Learning. You stay ahead of the curve, continuously learning and implementing cutting-edge technologies. Team Commitment. You build, mentor, and lead a high-performance engineering team that delivers results together. Self Awareness. You know your strengths, weaknesses, and how to surround yourself with the right talent to succeed. Mentor (Hit us up to get more information) Dustan Halbach - Specialist in hiring amazing people, lover of the outdoors, hunting, fly fishing, snowboarding, hockey and golf.

Requirements

Must-haves

Build, maintain, and enhance backend services powering JobNimbus's identity, authentication, and authorization platform.
Implement enterprise SSO integrations (SAML 2.0, OIDC) with customer identity providers such as Okta, Microsoft Entra ID, and Google Workspace.
Implement fine-grained access control models—including role-based and attribute-based access control (RBAC/ABAC), permissions, and access profiles—for complex multi-tenant and parent-child account hierarchies.
Modernize platform-wide authentication features, including MFA implementation, session/token lifecycles, user provisioning (SCIM), and service-to-service auth.
Design and build secure, well-documented RESTful APIs and auth workflows for public/partner APIs (OAuth 2.0 flows, scoped tokens, API key management).
Write production-ready code in C# and Node.js with a strong focus on security, performance, and maintainability.
Build event-driven backend components for identity events, automated user provisioning, and secure audit logging.
Collaborate with product managers, security engineers, and peer developers to translate auth and identity requirements into clear technical designs.
Drive operational quality across identity services through unit/integration testing, threat modeling, observability, and proactive monitoring.
Leverage AI-assisted development tools to speed up execution, automate routine tasks, and increase code quality.
What Makes You the Hero for This Job:
5+ years of professional software engineering experience with a heavy focus on backend services and distributed systems.
Strong working knowledge and hands-on experience with modern identity standards: OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, and SCIM.
Experience implementing enterprise SSO integrations and working with IdPs (e.g., Okta, Microsoft Entra ID, Auth0, or Google Workspace).
Proven track record building granular authorization systems (RBAC/ABAC), multi-tenant permission layers, and complex account hierarchies.
Strong backend development experience using C# and/or Node.js.
Practical experience designing and securing public/internal APIs (REST, OAuth 2.0, token management).
Experience with event-driven architectures and distributed system design patterns.
Experience with cloud infrastructure (AWS), Docker, and Infrastructure as Code (Terraform).
Strong collaborator who can partner effectively with product and security stakeholders.
Extreme Ownership. You own the outcomes, drive initiatives, and solve problems proactively. If you need direction and someone to hold your hand, this job is not for you.
Customer Obsessed. Everything we build should leave our customers saying, "Aw dip. This product is off the charts cool. Whoever wrote that code deserves a raise!"

Nice-to-haves

Solid database experience in SQL and NoSQL environments (experience with Couchbase is a plus).
Nice to have: Exposure to subscription or entitlement management platforms (e.g., Chargebee, Stripe Billing) and how billing plans tie into feature entitlements and access controls.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

apinode.jsairestsqlawsdocker

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Vision