Software Engineer - Identity & Access Mgmt

EditShare is a U.S. based company strengthening its world-class media ecosystem through the development of the EditShare One platform and FLOW MAM, focusing on user access management.

• Bachelor's degree in Computer Science, Information Systems, or equivalent experience.
• 4+ years of software engineering experience developing enterprise applications.
• Strong knowledge of Microsoft Active Directory Domain Services (AD DS).
• Experience with Active Directory Single Sign-On (AD SSO) and federated authentication.
• Hands-on experience configuring and supporting SAML 2.0 authentication.
• Experience integrating applications with Identity Providers such as Microsoft Entra ID (Azure AD), Okta, Ping Identity, ForgeRock, and OneLogin.
• Strong understanding of SAML assertions, OAuth 2.0, OpenID Connect (OIDC), LDAP and LDAPS, Kerberos, and NTLM.
• Experience with Active Directory Federation Services (AD FS).
• Experience developing REST APIs and secure web services.
• Proficiency in one or more programming languages such as Java, C++, Python, or JavaScript/TypeScript.
• Experience troubleshooting authentication, authorization, and federation issues.
• Familiarity with SSL/TLS certificates, PKI, and certificate lifecycle management.
• Experience using Git and CI/CD pipelines.

• Design, develop, and maintain enterprise authentication and authorization solutions.
• Implement and support Single Sign-On (SSO) integrations using Active Directory and enterprise identity platforms.
• Develop and maintain integrations utilizing SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and LDAP protocols.
• Configure and troubleshoot Identity Provider (IdP) and Service Provider (SP) integrations.
• Integrate enterprise applications with Microsoft Active Directory, Active Directory Federation Services (AD FS), and cloud identity providers.
• Partner with security architects, infrastructure teams, and application developers to implement secure identity solutions.
• Develop APIs and middleware supporting authentication, authorization, and user provisioning.
• Troubleshoot authentication failures, federation issues, certificate management, and token validation.
• Implement role-based access control (RBAC) and least-privilege access models.
• Support user lifecycle management, directory synchronization, and identity governance initiatives.
• Produce technical documentation, integration guides, and operational procedures.
• Participate in architecture reviews and recommend improvements to identity and access management strategies.

Use of AI to answer application questions or during interviews will result in disqualification. All job offers are contingent upon successful reference checks. Personal data will be processed in accordance with applicable data protection laws, and candidates have rights concerning their personal data as specified by the controller, EditShare.