Senior Software Engineer – User Management

Software Mind

. Design, build, and run features in the User Management API, including tenant and landscape lifecycle, user and group administration, role-based access control, service accounts, client credentials, and audit and security tooling .

Posted 10/13/2026full-timeRemote • Costa RicaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and managing back-end services with a strong focus on identity and access management, including proficiency in C# / .NET, OAuth 2.0, and multi-tenant architectures. Capable of designing secure APIs and managing integrations with enterprise identity providers like Okta and Microsoft Entra ID.

Highest-signal resume keywords

C# / .NET DevelopmentIdentity And Access ManagementOAuth 2.0 And OpenID ConnectREST API Design And VersioningSQL Server And EF Core

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

C#ASP.NET Core Web APIOAuth 2.0OpenID ConnectJWT Claims DesignMulti-Tenant User ModelsSQL ServerEF CoreGRPCUnit Testing

Tools & Technologies

OktaMicrosoft Entra IDAzure Key VaultAzure ServicesNUnitMoqMicrosoft GraphAuth0PingAngular

Industry Keywords

Identity ProviderTenant IsolationService AccountsAudit And Security ToolingRegulated Industry Experience

Tech Stack

Tools & technologies

AngularASP.NETAzureCloudGRPCSQLVault.NET

About the role

Key responsibilities & impact

Design, build, and run features in the User Management API, including tenant and landscape lifecycle, user and group administration, role-based access control, service accounts, client credentials, and audit and security tooling
Own Okta and Microsoft Entra ID integrations, including provisioning, lifecycle synchronization, event handling, and app-registration automation
Maintain safe and recoverable integration failure modes
Maintain the API authentication model and authorization rules
Change and version gRPC and REST contracts and coordinate SDK releases
Manage secrets using Azure services
Support multi-tenancy, auditing, and data integrity across tenants
Write NUnit and Moq unit tests, integration tests, and automated smoke suites focused on authentication, permissions, and tenant isolation
Collaborate with frontend engineers on sign-in and admin experiences
Work with product teams consuming the platform through the SDK
Participate in on-call and incident response for the PowerPlan cloud service
Within the first 90 days, run the identity stack locally, explain the portal-to-authorized-API flow, and ship a change spanning at least two services
Within the first year, own a major platform area, improve test coverage and observability, and advise product teams on identity questions

Requirements

What you’ll need

5+ years building production back-end services in C# / .NET
Experience with ASP.NET Core Web API, dependency injection, and async patterns
Hands-on identity and access management experience
Experience with OAuth 2.0 and OpenID Connect, including authorization code with PKCE, client credentials, token validation and refresh
Experience with JWT claims design, validation against multiple issuers and audiences, signing keys, and key rotation
Experience with multi-tenant user, role, and permission models, including tenant isolation
Experience with user lifecycle management and synchronization with an external identity provider
Production experience with at least one enterprise identity provider: Okta, Microsoft Entra ID / Azure AD, Auth0, Ping, or another provider
Solid relational database skills with SQL Server and EF Core, including migrations and query performance
Experience designing and versioning REST APIs; ideally gRPC / Protocol Buffers
Knowledge of OWASP Top 10
Ability to handle secrets carefully, write auditable code, and apply least-privilege principles
Nice to have: Okta Management API / SDK, Okta event hooks and inline hooks, or Okta Identity Engine (IDX)
Nice to have: Microsoft Graph, especially app registrations, service principals, and credential management
Nice to have: SAML 2.0, SCIM provisioning, or enterprise SSO federation
Nice to have: Azure Key Vault, App Configuration, Managed Identity, and Data Protection
Nice to have: internal NuGet package publishing and versioning using GitVersion and Conventional Commits
Nice to have: Angular or another modern front-end framework
Nice to have: regulated-industry experience
Nice to have: familiarity with AI-assisted development tools

Benefits

Comp & perks

Remote work availability
Excellent work environment certified by Great Place To Work
Multicultural company environment
On-call and incident response participation