Software Engineer - Identity Platform

Job Title: Senior Software Engineer, Identity Platform

Location: Remote

Experience Level: 7+ years

About ColorTokens

ColorTokens specializes in advanced security solutions designed to safeguard organizations' assets and critical systems from cyber threats. Our flagship product, Xshield Enterprise Microsegmentation platform, empowers organizations to prevent initial compromises from escalating into damaging crises. By emphasizing proactive security measures, ColorTokens ensures comprehensive protection for critical workloads and data, enabling organizations to stay "breach ready."

With a clientele spanning some of the world's largest organizations, including prominent cancer research centers, cities, and national defense departments, ColorTokens serves industries handling sensitive information and subject to stringent regulatory requirements.

ColorTokens' cloud-delivered platform streamlines onboarding efforts and reduces maintenance costs for organizations. Providing pervasive protection, their platform covers data center servers, legacy systems, cloud workloads, containers, and operational technology (OT) and Internet of Things (IoT) devices.

The company's recognition as a Strong Performer in the Forrester New Wave™: Microsegmentation report solidifies ColorTokens' reputation as a trusted provider of microsegmentation solutions for organizations seeking to enhance their security posture.

Our culture

We foster an environment that values customer focus, innovation, collaboration, mutual respect, and informed decision-making. We believe in alignment and empowerment so you can own and drive initiatives autonomously.

Self-starters and high-motivated individuals will enjoy the rewarding experience of solving complex challenges that protect some of world’s impactful organizations – be it a children’s hospital, or a city, or the defense department of an entire country.

Learn more at www.colortokens.com.

Job Summary:

Role Overview:

As a Senior Software Engineer on the Identity Platform team, you will own areas of the platform end to end, starting with identity lifecycle and directory integration, and lead customer migrations onto it. You will set priorities for your areas within the platform's principles, and you will be comfortable making and documenting decisions when the path forward is unclear.

Key Responsibilities:

• Design, develop, test, deploy and operate services of a passwordless identity platform, owning them from data model to user interface.
• Build and sustain the integrations between the platform and the directories, applications and identity providers around it.
• Participate in the on-call rotation for production services, lead incident response, and drive durable fixes and preventive improvements.
• Lead customer migrations onto the platform, including coexistence with the systems being replaced and controlled cutover.
• Lead design and security reviews, define technical direction for your areas, and raise engineering quality through code review and mentorship.
• Manage priorities and deliverables for your areas, making and documenting technical and product decisions.

Required Skills & Qualifications:

Minimum Qualifications:

• Bachelor's degree in Computer Science, a related field, or equivalent practical experience.
• 7 years of experience building and operating backend services in production, ideally in identity, security or similar infrastructure.
• Deep experience with federation protocols such as SAML 2.0 or OpenID Connect, including their security properties.
• Experience with directory and provisioning protocols and systems such as SCIM, LDAP or Active Directory.
• Experience reasoning about the security of authentication, authorization and data-handling flows, and designing with threats in mind.
• Experience designing and operating multi-tenant systems.

Preferred Qualifications:

• Experience with passkeys and WebAuthn, and with session management and step-up authentication.
• Experience in one or more of: public key infrastructure, hardware authenticators and FIDO, access policy such as conditional access and device posture, workload identity, or tamper-evident audit for SOC 2 and ISO 27001.
• Experience integrating with directory, HR and legacy federation systems, or with identity lifecycle and reconciliation at scale.
• Experience with Go in production, building user interfaces in a typed React codebase, and designing APIs against a contract.
• Experience deploying and operating software on customer-managed or on-premises infrastructure, including CI/CD and observability.
• Experience with native mobile development, Windows logon internals, or zero-trust access to servers.

Why Join Us?

• Work on a cutting-edge cybersecurity product in a fast-paced startup environment.
• Collaborate with a world-class team of engineers and security experts.
• Opportunity to learn, grow, and make a real impact from day one.