Software Engineer - IAM, Aura

Neo4j’s managed cloud offering, Aura, brings the power of graph databases to the cloud. We are seeking an experienced Software Engineer - Identity and Access Management to architect, implement, and manage enterprise IAM strategies. This role requires strong technical skills and a keen interest in the identity and access management (IAM) domain and is a good fit for someone who enjoys working with different teams to build secure, scalable, and compliant IAM solutions for AuraDB.

Responsibilities

Architect, implement, and manage enterprise IAM strategies; Contribute to shaping the IAM roadmap and design an architecture that brings together the IAM domains across Aura; Develop and maintain scalable IAM solutions including identity governance and authentication frameworks; Implement and manage tooling for configuring authentication protocols (OAuth2, OIDC, SAML, LDAP, MFA) and lifecycle management (SCIM); Integrate with enterprise SSO providers (Okta, Azure AD, Ping Identity, etc); Design and implement relevant access control paradigms for differing business use cases (RBAC, ABAC, PBAC, ReBAC, FGA); Manage application authentication via Auth0; Develop access control policies based on least privilege principles; Support various authentication and encryption methods: JWT, service accounts, workload identity including SPIFFE/SPIRE, client credentials, mTLS, request signing; Apply zero trust principles and secure identity patterns for internal/external systems; Assess and manage IAM attack surfaces and ensure compliance with industry standards and regulatory requirements (SOC 2); Collaborate with engineering, UX, and business stakeholders using Agile methodologies; Mentor team members on IAM technologies and best practices; Produce clear, well-structured documentation for technical and non-technical audiences

Requirements

7+ years of backend development or software engineering experience; Familiarity and exposure to software development with IAM systems (Okta, Auth0, Ping Identity, Oracle Access Manager, AWS IAM, Azure AD/Entra ID); Deep understanding of IAM principles, authentication/authorization protocols, and identity lifecycle management; Solid grasp of identity security frameworks, protocols, and secure design patterns; Experience with Python or GoLang; Experience with at least one of the major cloud providers (GCP, AWS, Azure)

Nice to have

3+ years of professional experience in Identity and Access Management; Familiarity with Kubernetes