About The Role We are looking for a skilled Backend Developer with strong experience in building secure, scalable backend systems and implementing modern Identity and Access Management solutions. The ideal candidate should have hands-on experience with identity platforms such as Auth0, Okta, Keycloak, Microsoft Entra ID, or similar solutions.

Key Responsibilities Design, develop, and maintain scalable backend services and APIs.

Implement authentication and authorization workflows using platforms such as Auth0, Okta, Keycloak, or Microsoft Entra ID.

Build and maintain user registration, login, logout, password reset, account recovery, and email verification workflows.

Implement Single Sign-On and identity federation using OpenID Connect, OAuth 2.0, SAML 2.0, and related protocols.

Design role-based and attribute-based access-control systems.

Develop organization-level user management, tenant isolation, roles, groups, permissions, and policy-management capabilities.

Integrate enterprise identity providers with the product.

Implement Multi-Factor Authentication, passwordless authentication, social login, and adaptive authentication flows.

Build secure token issuance, validation, refresh, revocation, and session-management mechanisms.

Work with JWTs, access tokens, ID tokens, refresh tokens, API keys, service accounts, and machine-to-machine authentication.

Implement identity-provider hooks, rules, actions, workflows, and custom authentication extensions.

Develop APIs for user provisioning, de-provisioning, role assignment, group management, and access reviews.

Integrate with SCIM-based user provisioning and enterprise directory systems where required.

Build audit logs for login events, permission changes,



administrative actions, and security events.

Ensure secure storage and handling of credentials, secrets, tokens, and sensitive user information.

Implement rate limiting, account lockout, anomaly detection, session expiration, and other security controls.

Work with security teams to identify and remediate authentication and authorization vulnerabilities.

Write clean, testable, maintainable, and well-documented code.

Participate in code reviews, architecture discussions, production deployments, and incident resolution.

Monitor backend services and troubleshoot performance, reliability, and security issues.

Required Skills 3 to 6 years of experience in backend software development.

Strong programming experience in one or more : Node.js/TypeScript, Java/Spring Boot, Python/FastAPI/Django, Go, or .NET.

Hands-on experience with at least one identity platform : Auth0, Okta, Keycloak, Microsoft Entra ID, Amazon Cognito, or Ping Identity.

Solid understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, SSO, MFA, and identity federation.

Experience with RBAC, ABAC, REST APIs, and relational/NoSQL databases (PostgreSQL, MySQL, MongoDB, DynamoDB).

Familiarity with Redis, Git, CI/CD, Docker, and cloud environments (AWS/Azure/GCP).

Preferred Qualifications Experience building IAM products, multi-tenant identity architecture, or integrating enterprise SAML/LDAP/Active Directory.

Familiarity with SCIM 2.0, policy engines (OPA, Casbin, Cedar, OpenFGA), secrets management (Vault, AWS Secrets Manager), and WebAuthn/FIDO2.

Understanding of identity-security risks (token theft, session hijacking, etc.).

Experience with Kubernetes, microservices, and observability tools. (ref:hirist.tech)

📌 Spydra - Backend Developer - Identity & Access Management (Bengaluru)
🏢 Spydra
📍 Bengaluru