Affinidi is a technology company dedicated to changing data ownership for good. We empower businesses and individuals with control and ownership of their data, with a comprehensive approach to managing their holistic identity – accounting for all aspects of their digital footprint while ensuring privacy and security.
Affinidi’s technology enables users to benefit from decentralised digital identity solutions. We believe that everyone has the right to own and control their data, and we are committed to creating a trusted digital credentials ecosystem that empowers businesses and individuals to securely exchange data and services across borders and industries.
Equal Opportunity
We believe in hiring different and diverse talent and providing a safe space where everyone can share their views without fear, where differences are celebrated, and where no one is left out. Inclusive cultures are the foundation for collaboration and innovation within our team.
About the role:
We are in search of a self-motivated, and experienced Senior Staff Identity and Authentication Engineer (m/f/d) to join our Affinidi Elements team. In this role, you will work with global peers on teams dedicated to the design, development, testing, implementation, and integration of identity and access management products, systems, and protocols based on standards and decentralized technologies. As the Identity and Authentication Engineer, you will be responsible for the development and implementation of IAM systems implementing SSO, authentication and authorization using existing standards such as OIDC and OAuth, and building new implementations based on emerging standards such as OID4VP. Your expert skills in designing, architecting, and building quality systems will intersect with your hands-on coding, performance testing, and integration experience. This position reports to the Director of Engineering.
Our work culture at Affinidi is shaped by the following tenets:
- We are unapologetically customer-focused
- We invest in cultures and teams to enable high performance
- Embraces experimentation and builds fast
- We have the courage to be misunderstood
- We work together to unlock data
What’s in it for you:
- Develop, implement, and maintain identity and access management solutions and systems as part of the core Affinidi Elements identity provider product offering
- Develop features and improvements to the broader Affinidi Elements product in a secure, well-tested, and performant way, primarily using Typescript, Go and/or Rust
- Troubleshoot, identify, and resolve technical identity and access management related issues.
- Drive continual improvement of the Affinidi Elements identity and access management solutions and systems for protection against evolving threats and efficiency
- Analyze and interpret highly complex data to arrive at actionable recommendations
- Collaborate with Product Management and other stakeholders within Engineering to maintain a high bar for quality in a fast-paced, iterative environment
- Solve technical problems with large scope and complexity while you advocate for improvements to product quality, security, and performance
- Craft code that meets our internal standards for style, maintainability, and best practices for a high-scale systems environment. Maintain and advocate for these standards through code review.
- Confidently own moderate to significantly complex features and improvements with minimal guidance and support from other team members. Collaborate with the team on larger projects.
- Mentor other engineers, contribute to team and organizational improvements in processes and tooling
You will be a great match if you:
- Have 10+ years of experience building identity management systems and IdPs, with expert-level, hands-on knowledge of OAuth and OIDC.
- Can use your comprehensive knowledge and experience with authentication standards and technologies such as multi factor authentication, JSON Web Token (JWT), etc to build an IdP from the ground up.
- Demonstrate extensive hands-on knowledge of identity and access management best practices, procedures, and software solutions such as Auth0/Okta, Ping Identity, Keycloak, Ory Hydra, etc
- Posess extensive knowledge and experience with identity and access management technology, such as single sign-on (SSO), two-factor authentication, privileged access management, etc.
- Have expert-level experience with one or more programming languages such as Typescript, Rust, C++, Java, Python, Javascript, or C#
- Have experience with Windows, Lunix / Unix, scripting (Bash, Powershell, or Perl), LDAP, SQL, and web services.
- Have experience with performance and optimization problems, a demonstrated ability to both diagnose and prevent such problems, and a desire to share your knowledge and scale through others
- Enjoy working in a fast-paced startup environment where you can be autonomous and experimental, be part of a truly global team, and can work up and down the stack
- Have strong technical documentation skills, including the C4 Model and Architectural Decision Records
- Have extensive expertise in cloud computing and native environments (AWS preferred)
- Understand design patterns and have working experience in developing and deploying microservices in the cloud, and have a proven track-record in doing so
- Care about privacy by design, security, testing, high-performance systems, and mentoring others, and have an inclination towards clear communication, inclusion and visibility
Bonus points:
- Experience working cross-functionally, and across locations and timezones
- Domain expertise in decentralized identity solutions
- Experience in developing systems with cryptography requirements
What can you expect from us:
- Hybrid working model
- Flexible working hours
- Unlimited vacation policy
- Competitive compensation package
- Work within international environment
- Learning Budget
- Mobile Allowance
- Home Office Allowance
- Urban Sport Membership
Sounds like you? Apply now!
#LI-AB1
For information about the way Affinidi collects, uses, and discloses your personal data when you submit an application for employment, please refer to the Privacy Notice accessible at https://www.affinidi.com/candidate-privacy-notice. By applying for employment with Affinidi, you acknowledge having read and understood the Privacy Notice, and you consent to the collection, use and disclosure of your personal data submitted to Affinidi in accordance with the Privacy Notice.
