SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Rubrik is seeking a Software Engineer to join the Continuous Product Delivery (CPD) team, focusing on identity and access management (IAM) for their on-premise data backup and management platform. You will design, build, and harden the identity and access layers that secure mission-critical systems, working closely with core engineering, product, and support teams.
Key responsibilities include:
- Design and implement secure identity and access flows using OIDC/OAuth 2.0, SAML 2.0, and Active Directory integrations
- Own the complete token and assertion lifecycle: issuance, validation, expiry, rotation, and failure handling for JWT/JWKS and SAML assertions
- Apply applied cryptography and PKI best practices (X.509 certificates, key rotation, TLS) to ensure security by design
- Build and maintain reverse-proxy and HTTP-layer components for TLS termination and authentication traffic handling
- Debug and resolve customer-facing identity and access issues in collaboration with support teams
- Contribute to build, release, and cross-platform packaging (Linux deb/rpm, Windows MSI)
- Maintain a Windows companion application written in C#/.NET
- Write comprehensive end-to-end tests covering authentication flows, failure modes, and edge cases
- Document design decisions, known issues, and workarounds in team knowledge base
- Communicate clearly with product and engineering stakeholders on design tradeoffs and security posture
Required qualifications:
- Strong hands-on programming skills in Golang
- Deep, practical knowledge of identity protocols (OIDC/OAuth 2.0, SAML 2.0) including token internals and failure modes
- Working knowledge of Active Directory
- Applied cryptography and PKI experience (X.509, JWT/JWKS, key rotation, TLS)
- Strong security engineering discipline with ability to reason about threat models
- Solid understanding of OS fundamentals, networking, and concurrency
- Working knowledge of Linux and shell/bash scripting
- Clear written and verbal communication skills
Nice-to-have skills include directory internals (schema, bind operations) and HTTP internals/reverse proxying experience.
