Partner IAM - Security Platform Engineer

JOB DESCRIPTION

RESPONSIBILITIES

• Design, build, test, and maintain secure applications and services using Java, Spring Boot, REST APIs, and relevant web technologies.
• Engineer identity solutions using Microsoft Entra ID and Microsoft Entra External ID, with a particular focus on external/B2B identities.
• Develop integrations with Microsoft Graph API and related Microsoft identity services.
• Design, develop, and maintain Spring Boot RESTful API microservices and web user interfaces.
• Collaborate with technical leads, architects, security teams, and application teams to deliver IAM platform capabilities aligned with enterprise security and architecture standards.
• Analyze, design, and implement tactical and strategic IAM solutions that improve the organization's security posture and user experience.
• Contribute to IAM platform strategy, technical architecture, and product roadmaps.
• Build and maintain monitoring, alerting, operational dashboards, and diagnostic capabilities using tools and query languages such as Kusto Query Language (KQL).
• Support production operations, including service requests, incidents, problems, and root-cause analysis.
• Create and maintain technical documentation, including architecture diagrams, API documentation, coding standards, configuration guidance, operational procedures, and application onboarding documentation.
• Apply Agile software development practices to deliver reliable, secure, and maintainable solutions.
• Build and use continuous integration and continuous delivery (CI/CD) pipelines to automate software build, testing, security validation, and deployment.
• Collaborate effectively with globally distributed and cross-functional teams.
• Demonstrate ownership across the end-to-end software engineering lifecycle, from requirements and design through development, testing, deployment, and production support.
• Use AI-assisted development tools, including GitHub Copilot or equivalent tools, to accelerate development, testing, documentation, and other software development lifecycle activities while maintaining appropriate security and quality controls.
• Participate in rotational on-call support as required.

QUALIFICATIONS

Required

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.
• 5+ years of relevant software engineering, IAM, or IT experience.
• Hands-on experience designing or engineering identity solutions using Microsoft Entra ID, with experience supporting external/B2B identities.
• Strong experience developing RESTful APIs using Java and Spring Boot.
• Experience integrating applications with Microsoft Graph API.
• Experience with web application development using Angular or another modern JavaScript/TypeScript framework.
• Strong understanding of relational and/or NoSQL databases.
• Experience building APIs, batch services, or web applications with automated unit, integration, and end-to-end testing.
• Experience implementing automated build, test, security, and deployment processes using CI/CD pipelines.
• Experience with development tools such as GitHub, Jira, and Postman.
• Familiarity with application-security and DevSecOps tooling such as 42Crunch, SonarQube, or Checkmarx.
• Experience with PowerShell or comparable scripting/automation technologies.
• Experience troubleshooting complex enterprise applications and identity integrations.
• Strong problem-solving, communication, and collaboration skills.
• Ability to communicate complex technical concepts to engineering teams, application owners, business partners, and leadership.
• Experience collaborating effectively with globally distributed teams.
• Ability to manage priorities and ambiguity while delivering against deadlines.
• Ability to participate in rotational on-call support.

Preferred

• Deep hands-on experience with Microsoft Entra External ID for B2B/external customer or partner identity solutions.
• Experience with Google Cloud Platform, particularly Cloud Run, container-based services, Cloud Logging, and Cloud Monitoring.
• Experience with Microsoft Azure services.
• Experience with Azure DevOps for CI/CD pipeline management and deployment.
• Experience with Kusto Query Language (KQL) for monitoring, diagnostics, and operational analysis.
• Experience using AI-assisted engineering tools such as GitHub Copilot to support software development, testing, documentation, and delivery.
• Experience designing, deploying, and supporting IAM capabilities within a large enterprise environment.

#LI-MF2