Senior Software Engineer (Authentication & Authorization (OAuth/OIDC)

Opportunity Overview

This Senior Software Engineer role sits within Conga’s B2B Platform Engineering, Core Services organization. It focuses on building security, identity, access management, and reporting capabilities that are foundational to all Conga B2B products.

You will also be a key technical contributor to the Advantage Platform effort, building secure and reusable integration patterns between B2B and Advantage. This role is for a hands-on engineer who enjoys working deep in identity protocols and token flows, and who wants to build shared security services used across Conga’s platform ecosystem.

What You’ll Do

Design, build, and maintain platform-level identity services, including authentication and authorization systems.

Implement and extend OAuth 2.0, OIDC, SAML, and token-based authentication flows, including token issuance, validation, refresh, and revocation.

Build and evolve role and permission models and policy-driven access control used across multiple products.

Develop external and internal facing reports used for adoption, consumption, and monitoring the platform.

Turn architectural direction and technical designs into secure, production-ready implementations.

Develop RESTful APIs and service contracts that multiple product teams consume.

Implement tenant-context propagation and service-to-service authentication and authorization across distributed systems.

Build secure, scalable, and highly available services that meet strict security, performance, and reliability requirements.

Work with the Advantage Platform team to implement secure integration patterns between B2B and Advantage, including shared authentication capabilities.

Work with Architecture and Product Security to apply security patterns, standards, and controls, and to address threat modeling findings in code.

Contribute to an Agile, CI/CD-based environment with a focus on automation, testability, and observability.

Participate in code reviews and design reviews, sharing secure coding practices with teammates.

Investigate and resolve incidents in security-sensitive services, including root cause analysis and durable fixes.

Help build reusable authentication and authorization capabilities that support AI-driven product experiences.

What We’re Looking For

Strong hands-on experience building and operating identity and access management services in enterprise SaaS environments.

Deep, practical knowledge of OAuth 2.0, OIDC, SAML, JWT and other token-based authentication, and common flows such as authorization code with PKCE and client credentials.

Experience implementing role-based and permission-based access control, and policy-driven authorization models.

Experience building backend systems in a modern language (for example Java, C#, Python, Scala, TypeScript, or Rust).

Strong experience designing and implementing RESTful APIs with multiple consumers.

Solid experience with SQL and the data stores that back platform services.

Working knowledge of authentication flows, multi-tenancy, and tenant-context handling in distributed systems.

Strong understanding of software design patterns, distributed systems, and platform tradeoffs.

Solid grasp of secure coding practices and common identity-related vulnerabilities, such as token misuse, session handling flaws, and privilege escalation.

Experience delivering features end to end, from design through testing, deployment, and production support.

Clear written and verbal communication, with the ability to document technical decisions and collaborate with Architecture, Security, Product, and other engineering teams.

Preferred / Bonus Experience

Experience with identity providers or platforms such as Microsoft Entra ID (Azure AD), Okta, Auth0, Keycloak, or Ping.

Experience with SCIM, federation, SSO, and MFA implementations.

Experience with PaaS offerings (Azure, AWS, GCP) and containerized, orchestrated environments (Docker, Kubernetes).

Experience with Azure SQL Server.

Familiarity with cloud-native security patterns, mTLS, and service-to-service communication.

Exposure to DevOps and SRE practices for platform services (monitoring, alerting, automation).

Experience designing, developing, and maintaining PowerBi reports.

Familiarity with Databricks.

What This Role Enables at Conga

Hands-on ownership of security-critical identity and access capabilities that support the B2B portfolio.

Secure integration between the B2B and Advantage platforms.

Reusable authentication and authorization patterns for cross-platform product and AI experiences.

Greater consistency in identity, tenant context, permissions, and service-to-service access across Conga platforms.

Impact across multiple product teams and engineering organizations.

Close alignment with Architecture and long-term platform strategy.

A growth path toward staff-level or technical leadership roles.

A chance to shape Conga’s security posture, engineering standards, and platform foundations.