Job Description
Objective of the Role
Support Cybersecurity teams by collaborating on the development, automation, and maintenance of Identity & Access Management (IAM) components, security tools, and microservices. Participate in the creation, testing, and deployment of secure software solutions that automate operational security tasks and streamline user lifecycle management. Follows strict industry standards and internal guidelines for secure development under the guidance of the Software Engineering and Cybersecurity Leads.
Main Responsibilities
- IAM & Identity Management: Develop and maintain backend solutions, APIs, and microservices dedicated to Identity and Access Management (IAM), user provisioning, and role-based access control (RBAC).
- Security Automation: Design, develop, and maintain tools, webhooks, and scripts to automate repetitive cybersecurity tasks, compliance checks, and operational workflows.
- API Development: Build and secure RESTful APIs to ensure seamless integration between HR systems, identity providers (IdPs), and internal platforms.
- Secure Coding: Write clean, maintainable backend code following secure development standards (OWASP guidelines) to prevent vulnerabilities.
- Integrations & Containers: Implement software solutions using container technologies (Docker, Kubernetes), ensuring security, application efficiency, and scalability.
- Agile Collaboration: Work closely with Cybersecurity, Architecture, DevOps, and Identity teams through agile sprints to promote continuous and secure development releases.
- Testing & Quality Assurance: Write unit and integration tests specifically focused on validating access controls, authentication flows, and security tool reliability.
- Technical Documentation: Gather and document functional requirements in Jira stories, and maintain updated documentation on IAM architectures, access workflows, and automation tools.
Required Knowledge and Experience
Core Experience & Tech Stack:
- Minimum 1-2 years of experience as a Backend Software Engineer or DevSecOps/Automation Engineer.
- Programming Languages: Strong foundations in backend languages commonly used for automation and APIs (e.g., Python, Go, Node.js, or Java).
- Database Knowledge: Familiarity with SQL and NoSQL databases (e.g., PostgreSQL, MySQL, MongoDB) to manage identity repositories and logs.
- CI/CD & Security Tools: Hands-on experience with version control (Git) and CI/CD pipelines (GitHub Actions, GitLab CI), with exposure to code quality/security tools like SonarCloud.
Cybersecurity & Identity Domain (Desirable or willing to learn):
- Basic understanding of Identity & Access Management (IAM) concepts, user lifecycles (Joiner, Mover, Leaver), and Directory Services (Active Directory, Okta, Entra ID/Azure AD, or AWS IAM).
- Familiarity with authentication and authorization protocols such as OAuth 2.0, SAML, OIDC, and JWT.
- Awareness of secure development practices and common vulnerabilities (OWASP Top 10).
Soft Skills & Methodologies:
- Experience working under Agile frameworks (Scrum/Kanban) using Jira.
- Strong problem-solving skills, automation mindset, and exceptional attention to detail.
- Effective communication skills to collaborate with cross-functional technical teams (Data, DevOps, and Cybersecurity).
En Spin estamos comprometidos con construir un lugar de trabajo diverso e inclusivo.
Creemos en la igualdad de oportunidades y promovemos un entorno libre de discriminación por motivos de raza, origen nacional, género, identidad de género, orientación sexual, discapacidad, edad o cualquier otra condición legalmente protegida.