Software Engineer - IAM, Aura

About the role

Neo4j is looking for a specialist to design and manage identity and access management strategies for Aura, our managed cloud graph database platform. You will work across security, development, and product teams to build secure, compliant, and scalable authentication and authorization solutions.

Key facts

What you'll do

• Define the IAM roadmap and design unified architecture for Aura.
• Build and maintain identity governance and authentication frameworks.
• Configure protocols including OAuth2, OIDC, SAML, LDAP, MFA, and SCIM.
• Manage enterprise SSO integrations with providers like Okta, Azure AD, and Ping Identity.
• Implement access control models such as RBAC, ABAC, PBAC, ReBAC, and FGA.
• Oversee application authentication via Auth0 and enforce least privilege policies.
• Support encryption and authentication methods including JWT, mTLS, SPIFFE/SPIRE, and workload identity.
• Apply zero trust security principles and ensure SOC 2 compliance.
• Mentor team members and create technical documentation for diverse audiences.

Requirements

• 7+ years of professional software engineering or backend development experience.
• Proficiency in Python or GoLang.
• Experience with at least one major cloud provider: AWS, GCP, or Azure.
• Proven understanding of IAM principles, identity lifecycle management, and security design patterns.
• Practical experience with IAM systems such as Auth0, Okta, Ping Identity, AWS IAM, Azure AD/Entra ID, or Oracle Access Manager.

Nice to have

• 3+ years of specific professional experience in Identity and Access Management.
• Familiarity with Kubernetes.

Skills & tools

• IAM protocols: OAuth2, OIDC, SAML, LDAP, SCIM, JWT.
• Access control: RBAC, ABAC, PBAC, ReBAC, FGA.
• Security: Zero Trust, mTLS, SPIFFE/SPIRE, SOC 2.
• Languages: Python, GoLang.
• Identity providers: Auth0, Okta, Azure AD, Ping Identity.
• Infrastructure: Kubernetes, AWS, GCP, Azure.

Practical notes

This is a hybrid role based in Malmö. Neo4j encourages candidates from underrepresented groups to apply even if they do not meet every listed qualification.