Staff Engineer (Platform / IAM & Administration) at Nextiva
Remote, British Columbia, Canada -
Full Time


Start Date

Immediate

Expiry Date

26 Oct, 25

Salary

115000.0

Posted On

26 Jul, 25

Experience

0 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

No

Skills

Data Privacy, Spring Boot, Code, Customer Experience, Multi Factor Authentication, Oauth, Hipaa, Access Control, Java, Authentication Protocols, Distributed Systems, Kafka, Access, Typescript, Idps

Industry

Information Technology/IT

Description

REDEFINE THE FUTURE OF CUSTOMER EXPERIENCES. ONE CONVERSATION AT A TIME.

We’re changing the game with a first-of-its-kind, conversation-centric platform that unifies team collaboration and customer experience in one place. Powered by AI, built by amazing humans.
Our culture is forward-thinking, customer-obsessed and built on an unwavering belief that connection fuels business and life; connections to our customers with our signature Amazing Service®, our products and services, and most importantly, each other. Since 2008, 100,000+ companies and 1M+ users rely on Nextiva for customer and team communication.
If you’re ready to collaborate and create with amazing people, let your personality shine and be on the frontlines of helping businesses deliver amazing experiences, you’re in the right place.

BASIC QUALIFICATIONS:

8-10+ years of experience building large-scale, secure SaaS platforms, with a strong focus on IAM, access management, and distributed systems.

  • Deep proficiency in Java, Spring Boot, and designing stateless backend services that integrate with identity providers (IdPs) and security frameworks
  • Experience implementing authentication protocols (OAuth 2.0, OIDC, SAML), and designing systems that support single sign-on (SSO), multi-factor authentication (MFA), and Just-In-Time (JIT) provisioning
  • Familiarity with access governance tools, secrets management, and key management systems
  • Hands-on experience with Kafka for distributed messaging and event-driven pipelines (e.g., audit logs, user session lifecycle, policy updates)
  • Expertise with cloud infrastructure platforms (AWS/GCP) and IAM-related services such as IAM roles/policies, STS tokens, and cross-account identity
  • Solid understanding of data privacy and regulatory compliance standards (e.g., SOC 2, GDPR, HIPAA) as they relate to access and identity

PREFERRED SKILLS:

  • Experience building or integrating with IAM platforms (e.g., Okta, Auth0, ForgeRock, Keycloak)
  • Knowledge of fine-grained data access control, masking policies, and dynamic authorization patterns at the data layer
  • Experience developing or integrating policy-as-code solutions (e.g., OPA, Cedar, Rego)
  • Familiarity with front-end identity contexts and modern frameworks like React and TypeScript for secure session and role propagation
  • Deep understanding of zero trust architecture principles and secure service-to-service authentication
Responsibilities
  • Lead the design and development of secure, scalable IAM and access control mechanisms, including role-based access control (RBAC), attribute-based access control (ABAC), and fine-grained permissions systems
  • Improve and maintain centralized authentication and authorization services (e.g., OAuth2, OIDC, SAML, SCIM integrations)
  • Ensure secure-by-design principles are embedded across platform services and APIs with a focus on access patterns, identity federation, token lifecycle management, and user provisioning
  • Drive architecture and code-level decisions to mitigate identity risks, reduce complexity, and improve the developer experience around secure access patterns
  • Contribute to operational systems that support auditing, anomaly detection, access reviews, and governance reporting
  • Be involved in every stage of the project - from ideation and system design to delivering products and features in a timely manner
  • Build robust, scalable, and maintainable software
  • Improve code quality through writing unit tests, automation, and code reviews
  • Apply and advocate for team coding, documenting and testing standard
  • Lead code reviews and communicate application changes
  • Provide technical leadership, mentorship and guidance to engineers on the team
  • Collaborate closely with internal teams as well as stakeholders
  • Implement and influence business and operational systems that support billing and usage monitoring needs
Loading...