Principal Software Engineer - Identity & Access Management

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Software Engineer - Identity & Access Management based in India.

This role offers the opportunity to define and lead the future of authentication and authorization platforms within a fast-growing technology environment. You will own the technical vision, architecture, and evolution of secure identity solutions powering critical business systems. The position focuses on building scalable authentication services, API gateways, and access management capabilities. You will collaborate with engineering, security, product, and business teams to deliver reliable and secure platform foundations. As a principal-level engineer, you will influence technical strategy, mentor engineers, and establish engineering best practices. You will work on high-impact systems requiring strong security discipline, performance optimization, and operational excellence. This fully remote opportunity provides significant ownership and the ability to shape next-generation fintech infrastructure.

Accountabilities:: Own the technical vision, architecture, and roadmap for authentication and authorization platforms, including API authentication gateways and identity services.

Design, develop, and maintain scalable, highly available backend services using Golang, AWS, relational databases, and modern distributed system patterns.

Lead secure, phased, zero-downtime migrations of authentication traffic and capabilities while ensuring reliability and customer safety.

Define and implement authentication and authorization standards, including OAuth2, OpenID Connect, JWT, token lifecycle management, service-to-service authentication, and fine-grained access control models.

Drive consistency and scalability across distributed microservices while maintaining strict performance, reliability, and latency requirements.

Partner with security and compliance teams to build secure-by-default solutions aligned with industry standards and regulatory expectations.

Establish engineering best practices around observability, CI/CD, security, testing, and operational excellence for critical authentication systems.

Participate in incident response, on-call rotations, and post-incident reviews for owned services.

Mentor engineers, promote technical excellence, and guide teams toward effective AI-assisted development practices.

Collaborate cross-functionally to transform business objectives into scalable technical solutions and measurable outcomes.

Requirements:

12+ years of professional software engineering experience, with extensive backend development experience in production environments.

Proven experience designing and operating authentication and authorization systems, including OAuth2, OpenID Connect, SAML, JWT, session management, RBAC, ABAC, and policy-based authorization.

Strong background building or managing API gateways, authentication proxies, or large-scale edge services.

Demonstrated success leading complex service migrations, platform transformations, or large-scale architectural improvements with minimal customer impact.

Advanced proficiency in Golang and experience building reliable RESTful APIs.

Strong expertise with SQL databases such as MySQL and PostgreSQL, including schema design and query optimization at scale.

Deep understanding of distributed systems, event-driven architectures, transactional patterns, queues, and high-performance backend services.

Experience using AI-assisted engineering tools such as Claude Code, Codex, Cursor, or custom AI integrations to improve development workflows.

Bachelor’s degree in Computer Science, Computer Engineering, or a related technical discipline.

Strong leadership, communication, and collaboration skills with the ability to influence technical decisions across multiple teams.

Preferred experience with identity platforms such as Keycloak, Auth0, Okta, Ory, or similar solutions.

Familiarity with service mesh technologies, Envoy, Istio, mTLS, rate limiting, WAF integrations, and secure infrastructure patterns.

Knowledge of security practices including threat modeling, secure design reviews, token security, CSRF prevention, and privilege management.

Experience with cloud infrastructure, particularly AWS services such as Aurora RDS, Kubernetes, Docker, and CI/CD pipelines.

Familiarity with fintech, payments, compliance frameworks, transaction systems, or other security-sensitive industries is a plus.

Benefits:

Competitive compensation ranging from $6,000 to $11,000 USD per month (gross) , negotiable based on experience and expertise.

Fully remote work environment with the flexibility to work from anywhere in India.

Principal-level ownership and the opportunity to influence large-scale technical decisions.

Work on mission-critical identity, security, and platform infrastructure.

Opportunity to collaborate with talented engineers across a global organization.

Access to modern engineering practices, AI-assisted development tools, and open-source technologies.

Growth opportunities through technical leadership, mentorship, and strategic ownership.

Flexible and innovative culture focused on impact, autonomy, and continuous improvement.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1