Senior Full-Stack Software Engineer with OAuth

Endava is partnering strategically with WTW, a global leader in Insurance Consulting and Technology, providing data-driven software and advisory services with over 1,700 colleagues across 35 markets. The role supports the WTW Insurance Consulting and Technology Division by developing next-generation identity and access management products that enhance security and developer experience across multiple insurance products worldwide.

Software Engineering:

• 6+ years of commercial software development with C# and modern .NET.
• Strong experience with REST API design and scalable enterprise applications.
• Solid understanding of object-oriented programming and modern design principles.

Identity & Security:

• Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), and JWT.
• Understanding of modern authentication and authorization concepts.
• Experience integrating applications with enterprise identity providers.
• Knowledge of secure API design and identity-based access control.

Cloud & Platform Engineering:

• Experience developing cloud-native applications on Microsoft Azure.
• Familiarity with Azure DevOps, Git, and CI/CD pipelines.
• Experience using Infrastructure as Code with Terraform or OpenTofu.
• Understanding of Azure API Management or similar API Gateway technology.

Front-End Development:

• Experience developing Angular applications using TypeScript.
• Experience building administrative or developer-facing web applications.

Engineering Practices:

• Experience writing automated tests (unit, integration, API testing).
• Experience working in Agile Scrum teams.
• Strong communication and collaboration skills.
• Ability to work effectively across multiple teams and influence technical outcomes.

Preferred Skills:

• Experience with Auth0 and Fine-Grained Authorization (FGA).
• Knowledge of Google Zanzibar authorization model.
• Experience with Azure API Management (APIM), SCIM integrations, Identity Federation.
• Familiarity with Datadog, Playwright, Trivy, GitLeaks, Invicti.
• Experience building reusable developer platforms and working with enterprise shared services.

Identity Platform Development:

• Design, develop and maintain authentication and authorization services using modern .NET technologies.
• Develop reusable platform services for secure authentication across multiple business applications.
• Build scalable REST APIs and integration services.
• Develop and maintain Angular-based administration portals.
• Contribute to Fine-Grained Authorization (FGA) capabilities and centralized access management.

Platform Services & Developer Experience:

• Develop reusable SDKs, libraries, and APIs simplifying integration with the identity platform.
• Build developer tooling to improve onboarding and adoption.
• Produce and maintain technical documentation.
• Design stable, reusable platform interfaces.
• Lead technical work packages and mentor engineers.

Cloud & Platform Engineering:

• Develop cloud-native services on Microsoft Azure.
• Build and maintain reverse proxy capabilities using Azure API Management.
• Implement Infrastructure as Code with OpenTofu/Terraform.
• Contribute to CI/CD using Azure DevOps.
• Improve platform scalability, security, and resilience.

Engineering Excellence:

• Write unit, integration, and automated tests.
• Participate in peer reviews and architecture discussions.
• Promote Clean Code, automated testing, and secure development.
• Collaborate across teams for high-quality delivery.
• Support less experienced engineers through mentoring.

Operations & Collaboration:

• Participate in third-line production support and on-call rotation.
• Investigate and improve platform reliability.
• Collaborate with multiple product teams.
• Help establish long-term ownership of the Authentication & Authorization capability.

The offer complies with Polish Labour Code amendments implementing Directive on pay transparency; remuneration decisions are based on non-discriminatory, gender-neutral criteria. The administrator of personal data is Endava Poland Sp. z o.o., with data processed for recruitment purposes and rights to access, rectify, delete, or restrict data as per applicable law. Candidates' current or past remuneration is not considered during recruitment.