Job description

We are obsessed with the hero's journey at JobNimbus. Every person has a hero's journey—Hermione Granger, James T. Kirk, Frodo Baggins, Anna & Elsa, Nacho Libre, and even YOU! This is our “call to adventure” to come check out JobNimbus. What do you have to lose? You might make a few new friends, learn about a sick new company doing some amazing things, and maybe even land a new job! Mission: Lead the technical vision, architecture, and evolution of JobNimbus's identity and access platform: how users and accounts authenticate, how they are authorized, and how enterprise customers connect their own identity providers. Partner closely with engineering, product, and security leadership to build enterprise-grade SSO, robust access control models (RBAC/ABAC), multi-tenant account hierarchies, and the APIs that expose them to customers and partners. What You'll Be Doing: Own the long-term technical roadmap and system architecture for JobNimbus's identity, authentication, authorization, and account management platform. Design and lead the delivery of enterprise SSO (SAML 2.0 and OIDC), including integrations with customer identity providers such as Okta, Microsoft Entra ID, and Google Workspace. Define and drive the authorization strategy: role-based and attribute-based access control (RBAC/ABAC), fine-grained permissions, and access profiles that work across multi-tenant, multi-location, and parent-child account hierarchies. Modernize authentication across the platform, including MFA, session and token lifecycle, user provisioning (SCIM), and service-to-service authentication. Design and build secure, well-documented APIs, including the authentication model for public and partner APIs (OAuth 2.0 flows, scoped tokens, API credentials). Write mission-critical, high-impact production code in C# and Node.js, setting the benchmark for performance, security, and maintainability across the organization. Architect event-driven systems and resilient API contracts for identity events, provisioning, and audit trails. Partner with product and security leadership to align account and identity domain models with scalable, future-proof technical architectures. Raise the bar on engineering quality across teams by establishing testing standards, observability, threat modeling, and operational metrics for identity services. Mentor and grow senior and mid-level engineers, fostering technical excellence, architectural rigor, and domain expertise across the organization. Drive the adoption of modern AI-assisted engineering practices to optimize developer velocity and platform reliability. What Makes You the Hero for This Job: 8+ years of software engineering experience with a proven track record as a technical leader or architect on mission-critical, high-scale production systems. Deep expertise designing and operating authentication and identity systems: OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, and SCIM. Proven experience delivering enterprise SSO and integrating with identity providers (Okta, Microsoft Entra ID, Auth0, Google Workspace, or similar). Proven experience designing enterprise access control frameworks (RBAC/ABAC), multi-tenant authorization models, and complex account permission hierarchies. Strong API design and development experience: RESTful API contracts, versioning, and securing APIs for customer and partner use. Expert-level mastery of backend development using C# and/or Node.js, alongside distributed systems design (event-driven architectures, messaging platforms). Deep database expertise in SQL and NoSQL environments (experience with Couchbase is a strong plus). Extensive experience with AWS infrastructure, contaites), and Infrastructure as Code (Terraform). Outstanding cross-functional leadership skills, with a proven ability to partner with product, security, and executive stakeholresolve ambiguous technical problems. Strong commitment to mentoring engineers, conducting architectural reviews, and establishing engineering best practices across multiple engineering pods. Nice to have: experience with subscription or entitlement platforms (Chargebee, Stripe Billing, or similar) and how plans and entitlements connect to access control. Superpowers: Extreme Ownership. You own the outcomes, drive initiatives, and solve problems proactively. If you need direction and someone to hold your hand, this job is not for you. Customer Obsessed. Everything we build should leave our customers saying, "Aw dip. This product is off the charts cool. Whoever wrote that code deserves a raise!" Proactive Learning. You stay ahead of the curve, continuously learning and implementing cutting-edge technologies. Team Commitment. You build, mentor, and lead a high-performance engineering team that delivers results together. Self Awareness. You know your strengths, weaknesses, and how to surround yourself with the right talent to succeed. Mentor (Hit us up to get more information) Dustan Halbach - Specialist in hiring amazing people, lover of the outdoors, hunting, fly fishing, snowboarding, hockey and golf.

Requirements

Must-haves

Own the long-term technical roadmap and system architecture for JobNimbus's identity, authentication, authorization, and account management platform.
Design and lead the delivery of enterprise SSO (SAML 2.0 and OIDC), including integrations with customer identity providers such as Okta, Microsoft Entra ID, and Google Workspace.
Modernize authentication across the platform, including MFA, session and token lifecycle, user provisioning (SCIM), and service-to-service authentication.
Design and build secure, well-documented APIs, including the authentication model for public and partner APIs (OAuth 2.0 flows, scoped tokens, API credentials).
Write mission-critical, high-impact production code in C# and Node.js, setting the benchmark for performance, security, and maintainability across the organization.
Architect event-driven systems and resilient API contracts for identity events, provisioning, and audit trails.
Partner with product and security leadership to align account and identity domain models with scalable, future-proof technical architectures.
Raise the bar on engineering quality across teams by establishing testing standards, observability, threat modeling, and operational metrics for identity services.
Mentor and grow senior and mid-level engineers, fostering technical excellence, architectural rigor, and domain expertise across the organization.
Drive the adoption of modern AI-assisted engineering practices to optimize developer velocity and platform reliability.
What Makes You the Hero for This Job:
8+ years of software engineering experience with a proven track record as a technical leader or architect on mission-critical, high-scale production systems.
Deep expertise designing and operating authentication and identity systems: OAuth 2.0, OpenID Connect, SAML 2.0, JWT, MFA, and SCIM.
Proven experience delivering enterprise SSO and integrating with identity providers (Okta, Microsoft Entra ID, Auth0, Google Workspace, or similar).
Proven experience designing enterprise access control frameworks (RBAC/ABAC), multi-tenant authorization models, and complex account permission hierarchies.
Strong API design and development experience: RESTful API contracts, versioning, and securing APIs for customer and partner use.
Expert-level mastery of backend development using C# and/or Node.js, alongside distributed systems design (event-driven architectures, messaging platforms).
Deep database expertise in SQL and NoSQL environments (experience with Couchbase is a strong plus).
Extensive experience with AWS infrastructure, contaites), and Infrastructure as Code (Terraform).
Outstanding cross-functional leadership skills, with a proven ability to partner with product, security, and executive stakeholresolve ambiguous technical problems.
Strong commitment to mentoring engineers, conducting architectural reviews, and establishing engineering best practices across multiple engineering pods.
Extreme Ownership. You own the outcomes, drive initiatives, and solve problems proactively. If you need direction and someone to hold your hand, this job is not for you.
Customer Obsessed. Everything we build should leave our customers saying, "Aw dip. This product is off the charts cool. Whoever wrote that code deserves a raise!"

Nice-to-haves

Nice to have: experience with subscription or entitlement platforms (Chargebee, Stripe Billing, or similar) and how plans and entitlements connect to access control.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

apinode.jsaisqlaws

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Vision