Anticipated Contract End Date/Length: 6 months contract
Work Setup: Hybrid (3 days per week in office, mandatory)
Our client in the Information Technology and Services industry is looking for a highly skilled Application Developer with strong expertise in identity API development, data ingestion and transformation, and event-driven (Pub/Sub) architectures. The role focuses on building secure, scalable identity and access workflows across Google Cloud Platform, integrating identity services with custom APIs, Pub/Sub pipelines, and cloud-native applications.
Collaborate closely with Tech Leads, Cloud Security, DevOps, and Application Engineering teams to design and implement robust IAM automation, identity lifecycle workflows, and secure service integrations supporting enterprise-level cloud and Identity operations.
What you will do:
- Design and implement identity flows for provisioning, de-provisioning, and orchestration of identity lifecycle events.
- Integrate Cloud Identity Services, ServiceNow, and internal services to streamline and orchestrate identity provisioning and lifecycle management.
- Build policy-based orchestration workflows for adaptive authentication and context-aware access using industry standards such as OPA.
- Design, build, and secure RESTful APIs and backend services supporting identity, provisioning, and governance workflows.
- Integrate APIs with authentication services for token validation, user sessions, and application-level authorization.
- Build and document internal SDKs, middleware, and shared libraries to maintain consistent IAM logic across services.
- Ensure API security, performance, reliability, resilience, and observability.
- Develop API-to-Pub/Sub pipelines for asynchronous workflows, including automated identity lifecycle tasks, access review event triggers, logging and audit forwarding, and security anomaly detection.
- Build Cloud Functions, Cloud Run microservices, or containerized services to process Pub/Sub messages.
- Implement robust event-processing patterns, including retries, idempotency, dead-letter queues (DLQs), and structured logging.
- Build and maintain Terraform modules for IAM, API services, Pub/Sub topics, workloads, and permissions.
- Automate deployment and validation of identity and access configurations through CI/CD pipelines.
- Implement automated testing for IAM policies and API behaviour.
- Troubleshoot identity, access, and API workflow issues across distributed systems.
- Provide technical guidance to engineering teams on secure API design, IAM best practices, and identity workflows.
- Collaborate with security teams during audits, compliance checks, and incident investigations.
- Proven experience with modern identity orchestration platforms such as Auth0 Actions, Okta Workflows, WorkOS, or SlashID.
- Strong programming skills in Python, Go, or Node.js for API and microservice development.
- Experience designing and deploying cloud-native APIs using Cloud Run, Cloud Functions, or GKE.
- Deep understanding of event-driven architectures, Pub/Sub, message processing, and workflow automation.
- Strong knowledge of OAuth2, OIDC, JWT, SAML, and identity federation patterns.
- Proficiency in Terraform or equivalent Infrastructure as Code tools.
- Experience using API gateways, reverse proxies, or service mesh technologies.
- Analytical approach with strong debugging and root-cause analysis capabilities.
- Clear communication skills and the ability to collaborate across engineering, security, and operations teams.
- A strong ownership mindset, security-first mentality, and attention to detail.
- Ability to work effectively in an agile, fast-paced environment.
- Full Stack application development experience, particularly with React, is advantageous.
- Google Professional Cloud Security Engineer or Cloud Architect certification is desirable.
- Familiarity with additional identity providers such as Okta, Azure AD, or Ping Identity.
- Knowledge of Kubernetes, including GKE RBAC and workload identity, is beneficial.
- Experience using Secret Manager, Vault, or other secrets management tools.
- Understanding of compliance frameworks such as SOC 2, ISO 27001, PCI, or HIPAA.
- Bachelor’s degree in Computer Science, Engineering, Information Security, or a related field, or equivalent hands-on experience.
All your information will be kept confidential according to EEO guidelines.
Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.
HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.
We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.
HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.