Senior Software Engineer 1 – Identity & Trust Infrastructure

This is a fully remote position, open to applicants in Costa Rica.

📋 Description

• Develop and implement a cohesive persona registration API to facilitate identity provisioning across Active Directory, cloud platforms, and simulated internet services.

• Construct and oversee the Range Domain Controller management service, encompassing AD users, group memberships, organizational units, domain policies, and subdomain setups.

• Design and manage the PKI infrastructure, including root and intermediate Certificate Authorities, certificate issuance processes, and trust configurations for both Windows and Linux clients.

• Take ownership of the GreySpace user API for managing account creation, deletion, elevation, and demotion across simulated web, FTP, SSH, and email services.

• Establish and implement persona data models across various identity backends, AD schema, SSO federation, and service-specific account states.

• Manage eventual consistency and reconciliation in cases where identity backends are not aligned.

• Work collaboratively with the user emulation team to define orchestration needs and complexities related to personas.

• Engage in design reviews and provide input on platform architecture focusing on trust, authentication, and security.

⛳️ Requirements

• Required strong bilingual proficiency in both English and Spanish for effective communication in written, virtual, and face-to-face interactions.

• Extensive knowledge of Active Directory, including user and group provisioning, organizational unit design, Group Policy, Kerberos authentication, and domain/subdomain configurations.

• Proven experience in automating AD configurations programmatically and developing robust APIs that leverage AD operations.

• Familiarity with identity management in AWS, GCP, and/or Azure environments.

• Comprehensive understanding of PKI, including CA hierarchy models, certificate lifecycle management, CSR signing workflows, and client trust stores on both Windows and Linux.

• Proficient in REST API design, especially in terms of idempotency, handling partial failures, and ensuring eventual consistency across diverse backends.

• Experience with enterprise identity providers and SSO systems, both as a consumer and integrator.

• Background in managing certificates at an operational scale, including programmatic issuance, expiration management, and distribution of trust anchors across a fleet.

• Familiarity with SPF, DKIM, and DMARC is an additional advantage.

• Experience in cybersecurity, red team infrastructure, or environments where identity and trust infrastructure is either a target or a tool is highly desirable.

• Must possess authorization to work in Costa Rica.

🏝️ Benefits

• Annual bonuses linked to both company performance and individual contributions.

• Comprehensive private medical, dental, vision, and life insurance benefits.

• Company-sponsored counseling, coaching, and resources for employees and their families through Spring Health.

• Paid parental leave programs.

• Equity stock options available upon hire, along with annual performance-based grants.

• Membership to LinkedIn Learning.

• Monthly reimbursements for meaningful social interactions with colleagues through the SocialSpace Community.

• Opportunities for continuous learning, including in-house training, access to internal and external learning platforms, cyber conferences, industry events, and dedicated time for skill enhancement.