Job Description

As a Software Engineer on the Professional Archive Identity and Access Management team, you will contribute to the technical aspects of designing, developing, and delivering high-quality software solutions within our Professional Archive Search Team.
We are looking for a mid-level Software Engineer who will be responsible for designing, implementing, and maintaining secure authentication and authorization systems that protect our users and infrastructure. Your work will ensure seamless, secure access across a complex ecosystem of internal and customer-facing applications. You will work closely with cross-functional teams, including Product Management, Engineering, and Site Reliability, to build scalable, reliable, and high-performance applications.
We are looking for an experienced engineer who is passionate about solving complex problems, implementing best practices, and driving technical innovation. If you thrive in a collaborative, fast-paced environment and have a track record of delivering impactful software solutions, we want to hear from you.

How will you contribute?

• You will support and empower the team to do their best work.
• Be a strategic partner by actively working with adjacent engineering teams and stakeholders to develop and apply scalable solutions.
• Share rotating on-call duties for our incident response.
• Build and maintain scalable IAM solutions focusing on OAuth 2.0 and OpenID Connect (OIDC) workflows.
• Manage and optimize identity stores using LDIF for data migrations, schema updates, and directory synchronization.
• Integrate and troubleshoot SSO configurations (SAML, OIDC) across diverse service providers and identity providers.
• Develop and maintain microservices that interface with IAM platforms (e.g., Okta, Ping, Auth0, or ForgeRock).Ensure all identity workflows meet security standards and provide necessary logging for compliance audits.
• Design secure API patterns and implement scopes/claims to enforce fine-grained access control.Execute Agile best practices, CI/CD pipelines, automated testing, and DevOps methodologies.
• Perform code reviews, identify technical debt, and contribute to initiatives that improve code quality and system performance.
• Troubleshoot and resolve production issues, ensuring high availability and reliability of services.
• Stay up to date with emerging technologies and industry trends and evaluate their potential impact on the organization.
• Monitor application health and performance in Splunk, Datadog, Grafana.

What will you bring?

• We’re seeking someone who thrives in a collaborative environment, is naturally curious and interested in learning, has strong communication and collaboration skills, and helps others grow by sharing their expertise and encouragement.
• You encourage open communication, value feedback loops, and are open to being wrong and having your mind changed.
• You understand modern software engineering practices, agile/scrum methodologies, and how to apply them to drive effective, timely, high-quality delivery. You provide visibility into your work and progress.
• You're comfortable with ambiguity and figuring things out as they evolve, change, and new requirements emerge.

Preferred Qualifications:

• 4+ years of professional software engineering experience, specifically within the IAM domain.
• Technical knowledge of OAuth 2.0, SAML, and OIDC.
• Proficiency with LDIF and managing LDAP-based directory services.
• Hands-on experience configuring and debugging multi-factor authentication (MFA) and SSO flows.
• Strong backend skills in Java or Python.
• Experience with SCIM for automated provisioning.
• Knowledge of Zero Trust architecture principles.
• Experience managing and deploying applications in Kubernetes.
• Contributions to open-source projects or active participation in technical communities.

What do we offer?

• Healthcare insurance: We provide medical, dental, and vision insurance, and a flexible spending account that allows you to set aside pre-tax dollars to pay for eligible out-of-pocket expenses.
• Stock options.
• Personal time off: A healthy work-life balance is critical to your success at the office. Smarsh offers a “take-what-you-need” time off policy as well as flexible work arrangements.
• 401K Match: Smarsh provides a 4% 401K match for which employees are fully vested on day one.
• Sabbatical: The Smarsh sabbatical programme provides a time to recharge, study or simply do something you are passionate about away from the workplace. Employees are eligible after six years of service.
• Recognition: We’re big on kudos for a job well done. Our employee-recognition programme enables co-workers to nominate their peers who best embody our core values for recognition.

Don't meet every requirement? Apply anyway! We value diverse candidates and encourage applications, even if you don't perfectly match the job description. Studies have shown that some strong candidates may self-select out of the interview process prematurely, at Smarsh we encourage an inclusive, high-performing environment.
Smarsh is an equal opportunity and affirmative action employer. Qualified applicants will receive consideration without regard to their race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Smarsh invites all qualified interested applicants to apply for career opportunities. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. Including frequency of functions