Infra Application Engineer – Identity

What you can expect

As an Identity Platform Engineer, you will lead the architecture and engineering of our global identity fabric. Your primary objective is to build a high-performance, invisible identity infrastructure that enables seamless access for number of users and non-human identities without manual intervention. You will ensure that identity is never a bottleneck for engineering velocity but a high-availability utility that supports our digital transformation goals.

About the Team

We are an Infrastructure team dedicated to building resilient, distributed identity services. We partner with Security, DevOps, Data, and Product teams to abstract away the complexity of access management. We provide "paved-road" automation patterns that make secure access effortless for developers and invisible to the end user.

Responsibilities

• Platform-Orchestration: Architect a unified, API-driven control plane that orchestrates identity lifecycles across a fragmented ecosystem of SaaS, Cloud (AWS, OCI), and data warehouses (Snowflake).
• Infrastructure-as-Code (IaC) Engineering: Designing and implementing "Governance Wrappers" for cloud provisioning, ensuring resources deployed with Terraform or CloudFormation integrate seamlessly into lifecycle management systems.
• Distributed-Systems Reliability: Ensure 99.99% uptime for authentication and authorization services, implementing redundancy, failover patterns, and "Chaos Engineering" to test system resilience in production.
• NHI-Lifecycle Management: Designing the lifecycle framework for "NHI" service accounts, API keys, and AI agents ensures automated management of machine identities comparable to human user processes.
• Self-Service Enablement: Build and maintain an internal "Identity AppStore" and chat-driven request flows to reduce helpdesk volume and improve time-to-productivity for new hires.
• Data-Driven Optimization: Utilize usage-aware intelligence to independently reclaim unused licenses and right-size over-provisioned infrastructure roles, driving down Total Cost of Ownership (TCO).

• 5+ years of experience in Infrastructure, Platform, or Systems Engineering, with a proven track record of supporting high-throughput distributed systems in a large-scale product environment.
• Demonstrate expertise in SCIM 2.0, OIDC, SAML, and OAuth2 protocols. Showcase experience with modern identity platforms like Okta and Entra ID. Develop custom connectors using SDKs for specialized systems.
• Demonstrate expertise in managing infrastructure access in AWS, OCI, and Snowflake by automating cross-account trust and data-layer permissions effectively.
• Exhibit proficiency in Go, Python, or Java to create scalable automation services and apply Terraform to implement Identity-as-Code efficiently.
• Demonstrate expertise in the "Visibility-Before-Governance" principle, ensuring complete discovery of applications and identities prior to implementing automated workflows.
• Utilize agentic AI tools to address complex identity telemetry issues and automate the resolution of "permission drift" without requiring human involvement.