We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work!
Job Description• Design, build and run features in the User Management API: tenant and landscape lifecycle, user
and group administration, role-based access control, service accounts and client credentials, and
audit and security support tooling.
• Own the integrations with Okta and Microsoft Entra ID. That includes provisioning, lifecycle sync,
event handling and app-registration automation, with failure modes that are safe and recoverable.
• Maintain the API's authentication model and the authorization rules behind it.
• Change and version the gRPC and REST contracts carefully, and coordinate SDK releases so the
products that consume them don't break.
• Secret management using Azure Services.
• Continue to support multi-tenancy, auditing and maintaining data integrity across tenants.
• Write tests that matter: NUnit and Moq unit tests, integration tests and automated smoke suites
focused on authentication flows, permission boundaries and tenant isolation.
• Work with frontend engineers on the sign-in and admin experience, and with product teams who
use the platform through the SDK.
• Take part in on-call and incident response for a service every PowerPlan cloud customer depends
on.
• 5+ years building production back-end services in C# / .NET (ASP.NET Core Web API, dependency
injection, async patterns).
• Hands-on identity and access management experience. You've built or run real systems with:
- OAuth 2.0 and OpenID Connect: authorization code with PKCE, client credentials, token validation and refresh
- WTs: claims design, validating against several issuers and audiences, signing keys and key rotation
- Multi-tenant user, role and permission models (RBAC), including tenant isolation
- User lifecycle: invitation, activation, deactivation, deprovisioning and sync with an external identity provider
• Production experience with at least one enterprise identity provider: Okta (strongly
preferred), Microsoft Entra ID / Azure AD, Auth0 or Ping or other.
• Solid relational database skills with SQL Server and EF Core, including migrations and query
performance.
• Experience designing and versioning APIs that other teams depend on (REST, and ideally gRPC /
Protocol Buffers).
• Security instincts: you know the OWASP Top 10, handle secrets carefully, write auditable code,
and default to least privilege.
Our stack
.NET 10 · ASP.NET Core · gRPC / Protobuf · EF Core · SQL Server · Okta · Microsoft Entra ID / Graph · Azure
Key Vault & App Configuration · Autofac · NLog · NUnit / Moq · Angular / Nx · Azure DevOps
Nice to have
• Okta Management API / SDK, Okta event hooks and inline hooks, or Okta Identity Engine (IDX)
• Microsoft Graph, particularly app registrations, service principals and credential management
• SAML 2.0, SCIM provisioning, or enterprise SSO federation with customer identity providers
• Azure: Key Vault, App Configuration, Managed Identity, Data Protection
• Publishing and versioning internal NuGet packages (GitVersion, Conventional Commits)
• Angular or another modern front-end framework, enough to work with the portal team on sign-in
and admin screens
• Experience in regulated industries (utilities, finance, tax) where audit trails and access reviews
matter
• Comfort with AI-assisted development tools as part of daily work
What success looks like
• First 90 days: you can run the full identity stack locally, explain how a user gets from the portal
through sign-in to an authorized API call, and you've shipped a change that crosses at least two
services.
• First year: you own a major part of the platform (for example tenant and landscape provisioning,
or the Okta and Entra integration layer), you've raised its test coverage and observability, and other
product teams come to you on identity questions.
Skills Required
- 5+ years building production back-end services in C# and .NET
- Experience with ASP.NET Core Web API, dependency injection, and asynchronous programming patterns
- Hands-on identity and access management experience
- Experience with OAuth 2.0 and OpenID Connect, including authorization code with PKCE, client credentials, token validation, and refresh
- Experience designing claims and validating tokens against multiple issuers and audiences, including signing keys and key rotation
- Experience with multi-tenant user, role, and permission models using RBAC and tenant isolation
- Experience implementing user lifecycle processes and synchronization with external identity providers
- Production experience with an enterprise identity provider such as Okta, Microsoft Entra ID, Auth0, or Ping
- Relational database experience with SQL Server and EF Core, including migrations and query performance
- Experience designing and versioning REST APIs; gRPC and Protocol Buffers experience is preferred
- Knowledge of OWASP Top 10, secure secret handling, auditable code, and least-privilege principles
- Okta Management API or SDK, event hooks, inline hooks, or Okta Identity Engine experience
- Microsoft Graph experience with app registrations, service principals, and credential management
- Experience with SAML 2.0, SCIM provisioning, or enterprise SSO federation
- Experience with Azure Key Vault, App Configuration, Managed Identity, or Data Protection
- Experience publishing and versioning internal NuGet packages
- Angular or another modern frontend framework experience
- Experience in regulated industries where audit trails and access reviews are important
- Comfort using AI-assisted development tools
Software Mind Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Software Mind and has not been reviewed or approved by Software Mind.
-
Fair & Transparent Compensation — Pay is considered competitive for core hiring markets, with “good salary” cited in multiple locales. Public salary snapshots provide a baseline that helps candidates assess offers and negotiations.
-
Flexible Benefits — Remote or hybrid options are prominently highlighted, and a remote‑work program is publicly noted alongside positively cited work‑from‑home experiences. Flexibility around schedules and location is presented as part of the package.
-
Wellbeing & Lifestyle Benefits — Private medical care, language classes, sports/fitness support, and learning initiatives are listed for several Central/Eastern European locations, with occasional workation perks promoted. These lifestyle‑oriented offerings complement base pay and can enhance perceived total rewards.
Software Mind Insights
What We Do
Software Mind is a global digital transformation partner with operations throughout Europe, the US and LATAM. Driven by tech and empowered by people, we provide companies with software engineers and autonomous, cross-functional development teams who manage software life cycles from ideation to release and beyond. For over 20 years we’ve been enriching organizations with the talent they need to boost scalability, drive dynamic growth and bring disruptive ideas to life. Our top-notch engineering teams combine ownership with leading technologies, including cloud, AI, data science and embedded software to accelerate digital transformations and boost software delivery. A culture, driven by trust, that embraces openness, craves more and acts with respect enables our experts to create evolutive solutions that support scale-ups, unicorns and enterprise-level companies around the world.
.png){kind=logo}
