Software Engineer, Neo4j

• This position is ideal for someone who thrives in both planning and hands-on execution
• 7+ years of backend development or software engineering experience
• Familiarity and exposure to software development with IAM systems (Okta, Auth0, Ping Identity, Oracle Access Manager, AWS IAM, Azure AD/Entra ID)
• Deep understanding of IAM principles, authentication/authorization protocols, and identity lifecycle management
• Solid grasp of identity security frameworks, protocols, and secure design patterns
• Experience with Python or GoLang
• Experience with at least one of the major cloud providers (GCP, AWS, Azure)

Desirable

• Neo4j’s managed cloud offering, Aura, brings the power of graph databases to the cloud. We are seeking an experienced Software Engineer - Identity and Access Management to architect, implement, and manage enterprise IAM strategies
• This role requires strong technical skills and a keen interest in the identity and access management (IAM) domain and is a good fit for someone who enjoys working with different teams to build secure, scalable, and compliant IAM solutions for AuraDB
• You will work closely with security architecture, development, infrastructure, and business teams to deploy IAM capabilities across critical applications and systems
• Contribute to shaping the IAM roadmap and design an architecture that brings together the IAM domains across Aura
• Develop and maintain scalable IAM solutions including identity governance and authentication frameworks
• Implement and manage tooling for configuring authentication protocols (OAuth2, OIDC, SAML, LDAP, MFA) and lifecycle management (SCIM)
• Integrate with enterprise SSO providers (Okta, Azure AD, Ping Identity, etc)
• Design and implement relevant access control paradigms for differing business use cases (RBAC, ABAC, PBAC, ReBAC, FGA)
• Manage application authentication via Auth0
• Develop access control policies based on least privilege principles
• Support various authentication and encryption methods: JWT, service accounts, workload identity including SPIFFE/SPIRE, client credentials, mTLS, request signing
• Apply zero trust principles and secure identity patterns for internal/external systems
• Assess and manage IAM attack surfaces and ensure compliance with industry standards and regulatory requirements (SOC 2)
• Collaborate with engineering, UX, and business stakeholders using Agile methodologies
• Mentor team members on IAM technologies and best practices
• Produce clear, well-structured documentation for technical and non-technical audiences