Senior Software Engineer - User Management

About the role

Software Mind is looking for a Senior Software Engineer to own the User Management API, which covers tenant and landscape lifecycle, user and group administration, role-based access control, service accounts and client credentials, and audit and security tooling. The role also owns the integrations with Okta and Microsoft Entra ID, and involves on-call and incident response for a core PowerPlan cloud service.

Key responsibilities

• Design, build and run features in the User Management API, including tenant and landscape lifecycle, user and group administration, RBAC, service accounts and client credentials, and audit and security tooling.
• Own the Okta and Microsoft Entra ID integrations: provisioning, lifecycle sync, event handling and app-registration automation, with safe and recoverable failure modes.
• Maintain the API's authentication model and the authorization rules behind it.
• Change and version gRPC and REST contracts carefully, and coordinate SDK releases so consumers do not break.
• Manage secrets with Azure Services and maintain multi-tenancy, auditing and data integrity across tenants.
• Write NUnit and Moq unit tests, integration tests and automated smoke suites for authentication flows, permission boundaries and tenant isolation.
• Work with frontend engineers on the sign-in and admin experience and with product teams using the SDK.
• Take part in on-call and incident response.

Required profile

• 5+ years building production back-end services in C# / .NET (ASP.NET Core Web API, dependency injection, async patterns).
• Hands-on identity and access management experience, including OAuth 2.0 and OpenID Connect, multi-tenant RBAC and user lifecycle (invitation, activation, deprovisioning, sync with an external identity provider).
• Production experience with at least one enterprise identity provider (Okta strongly preferred, also Microsoft Entra ID / Azure AD, Auth0, Ping or similar).
• Solid relational database skills with SQL Server and EF Core, including migrations and query performance.
• Experience designing and versioning APIs used by other teams (REST, ideally gRPC / Protocol Buffers).
• Security awareness: OWASP Top 10, secret handling, auditable code and least privilege.

Required skills

• .NET 10, ASP.NET Core, gRPC / Protobuf, EF Core, SQL Server, Okta, Microsoft Entra ID / Graph, Azure Key Vault and App Configuration, Autofac, NLog, NUnit / Moq, Azure DevOps.
• Nice to have: Okta Management API / IDX, Microsoft Graph, SAML 2.0 / SCIM, Azure Managed Identity, NuGet package publishing, Angular, regulated-industry experience, AI-assisted development tools.