Portainer.io

Role Description Portainer is looking for a hands-on DevOps & Platform Engineer to join our Platform Engineering team. In this role, you'll design, build, automate, and maintain the internal platforms, infrastructure, tooling, and delivery pipelines that power our Engineering, Customer Success, Managed Services, and Product teams. You'll work across Kubernetes, container platforms, CI/CD systems, infrastructure automation, cloud services, and observability tooling, helping us build a reliable, scalable, and automated platform foundation. If you have a strong automation mindset and a passion for modern platform engineering practices, we'd love to hear from you. This role operates with core collaboration hours of 6:00 AM – 11:30 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome focused. Reporting to the Platform Engineering and Support Team Leader, and working alongside Senior Platform Engineers, you'll take ownership of the systems and tooling that keep Portainer running at scale. Your day-to-day will span: - Platform & Infrastructure: Build and improve internal platform services, automate provisioning and configuration, and support virtualization and infrastructure lifecycle management. - Container Platforms: Deploy, manage, and troubleshoot Kubernetes environments; maintain Helm charts, manifests, and deployment automation; support Docker, Swarm, and Podman workloads. - Automation & CI/CD: Develop Ansible playbooks and Infrastructure as Code, build and improve CI/CD pipelines using GitHub Actions, and drive standardisation across engineering environments. - Cloud & Observability: Support infrastructure across AWS, Azure, and GCP; implement monitoring, logging, and alerting; assist with incident response and root cause analysis. - Collaboration: Work closely with Engineering, QE, Managed Services, Support, and Product teams; maintain technical documentation; participate in technical reviews and continuous improvement. - Operational Support & On-Call: Participate in a shared on-call rotation supporting internal platforms and critical infrastructure. Assist with incident response, troubleshooting, root cause analysis, and continuous service improvements. Qualifications - 3+ years of experience in DevOps, SRE, Platform Engineering, or Infrastructure Engineering - Strong hands-on experience with Kubernetes and Docker - Experience with Ansible automation - Experience building and maintaining CI/CD and release pipelines - Experience with GitHub Actions or similar workflow platforms - Strong Linux administration and troubleshooting skills - Scripting proficiency in Bash, Python, or PowerShell - Strong problem-solving and communication skills - Comfortable working independently in a remote-first environment - Ability to participate in a scheduled on-call rotation and respond to production incidents when required. Requirements - Experience developing automation tooling, APIs, operators, or platform services in Go - Experience with Docker Swarm and/or Podman - Experience with monitoring, logging, and observability platforms - Experience with Proxmox or other virtualisation platforms - Experience creating VM templates and golden images - Experience with Terraform/OpenTofu - Experience with Portainer Benefits Portainer is a leading tech company offering a broad benefits package including a highly competitive salary and the ability to work anywhere in the world while still being part of a dynamic team taking on some of the most interesting challenges in the technology/infrastructure space.

We're looking for a Software Engineer with Identity and Access Management (IAM) domain experience to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem. This is primarily an application engineering role, not a Kubernetes, DevOps, SRE, or infrastructure engineering position. You'll work on the identity platform itself. Investigating authentication and authorization issues, onboarding applications, maintaining Node.js/TypeScript services, implementing platform enhancements, and troubleshooting complex OAuth2 and OpenID Connect workflows. The ideal candidate has hands-on experience building, supporting, or extending identity platforms and a strong understanding of OAuth2, OpenID Connect, JWTs, claims, scopes, MFA, and identity federation. You should be comfortable reading and modifying application code, debugging production issues, and diagnosing problems across application, data, and infrastructure layers. This role operates with core collaboration hours of **6:00 PM – 12:00 AM IST** to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused. **What you'll do** - Support day-to-day operation of the OIDC platform - Investigate authentication and authorization issues - Assist with client registrations, configuration changes, and onboarding - Maintain Node.js and TypeScript services - Support MFA integrations and identity federation - Monitor platform health and respond to incidents - Develop automation and operational tooling - Support Elasticsearch and Redis-based services - Participate in on-call rotations

• Own the operational health, reliability, and availability of the OIDC platform • Lead incident investigation and root cause analysis • Diagnose authentication, authorization, MFA, federation, and token-related failures • Develop operational runbooks and platform documentation • Design and implement enhancements to authentication and authorization workflows • Maintain OAuth2 and OIDC integrations • Support MFA technologies including TOTP, SMS, Email, WebAuthn, and passwordless authentication • Support federation with Active Directory and Azure Active Directory • Maintain token issuance, claims mapping, scopes, audiences, and client registrations • Develop and maintain Node.js and TypeScript services • Troubleshoot production issues through code analysis and debugging • Perform dependency upgrades and security remediation • Build automation and operational tooling • Assess migration paths toward modern identity platforms • Lead technical evaluations of platforms such as Zitadel, Keycloak, Authentik, or similar • Define migration strategies for applications, clients, claims, and identity data • Drive platform simplification and reduction of technical debt • Support Elasticsearch-backed identity data stores • Troubleshoot token, session, account, permission, and client data issues • Work with Kubernetes-based deployments and GitOps workflows • Support Redis, background processing, and synchronisation services • Participate in a shared on-call rotation. • Assist with incident response, troubleshooting, root cause analysis, and continuous service improvements.

• Design, build, automate, and maintain the internal platforms, infrastructure, tooling, and delivery pipelines • Build and improve internal platform services, automate provisioning and configuration, and support virtualization and infrastructure lifecycle management • Deploy, manage, and troubleshoot Kubernetes environments • Maintain Helm charts, manifests, and deployment automation • Support Docker, Swarm, and Podman workloads • Develop Ansible playbooks and Infrastructure as Code • Build and improve CI/CD pipelines using GitHub Actions • Support infrastructure across AWS, Azure, and GCP • Implement monitoring, logging, and alerting • Assist with incident response and root cause analysis • Work closely with Engineering, QE, Managed Services, Support, and Product teams • Maintain technical documentation • Participate in technical reviews and continuous improvement • Participate in a shared on-call rotation supporting internal platforms and critical infrastructure

Role Description We're looking for a Senior Software Engineer with deep Identity and Access Management (IAM) domain expertise to take ownership of a large-scale enterprise OIDC platform supporting thousands of users, hundreds of applications, and mission-critical authentication services. This is not a Kubernetes, DevOps, SRE, or infrastructure engineering role. It is a senior application engineering and identity architecture position focused on the design, operation, troubleshooting, and evolution of a custom-built authorization platform. You'll become the technical authority for the platform, leading complex investigations, guiding architectural decisions, mentoring other engineers, and driving the roadmap toward a modern, standards-based identity solution. The ideal candidate has hands-on experience building, operating, or extending identity platforms and authorization servers, with deep fluency in: - OAuth2 - OpenID Connect - JWTs - Claims - Scopes - Federation - MFA - Token lifecycle management - Authentication architecture You should be comfortable working in Node.js and TypeScript codebases, diagnosing production issues across application and data layers, and translating identity and security requirements into robust engineering solutions. This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused. Qualifications - 5+ years working with OAuth2 and OpenID Connect in production environments - Deep understanding of Authorization Code Flow, Client Credentials Flow, Device Authorization Flow, Token Exchange, JWT, JWK/JWKS, PKCE, Refresh Tokens, Federation, and Claims and Scopes - 5+ years of Node.js development - Strong TypeScript experience - Experience supporting and debugging production systems - Kubernetes experience - Elasticsearch and Redis experience - CI/CD and GitOps exposure - Production incident response experience Requirements - Own the operational health, reliability, and availability of the OIDC platform - Lead incident investigation and root cause analysis - Diagnose authentication, authorization, MFA, federation, and token-related failures - Develop operational runbooks and platform documentation - Design and implement enhancements to authentication and authorization workflows - Maintain OAuth2 and OIDC integrations - Support MFA technologies including TOTP, SMS, Email, WebAuthn, and passwordless authentication - Support federation with Active Directory and Azure Active Directory - Maintain token issuance, claims mapping, scopes, audiences, and client registrations - Develop and maintain Node.js and TypeScript services - Troubleshoot production issues through code analysis and debugging - Perform dependency upgrades and security remediation - Build automation and operational tooling - Assess migration paths toward modern identity platforms - Lead technical evaluations of platforms such as Zitadel, Keycloak, Authentik, or similar - Define migration strategies for applications, clients, claims, and identity data - Drive platform simplification and reduction of technical debt - Support Elasticsearch-backed identity data stores - Troubleshoot token, session, account, permission, and client data issues - Work with Kubernetes-based deployments and GitOps workflows - Support Redis, background processing, and synchronisation services - Participate in a shared on-call rotation - Assist with incident response, troubleshooting, root cause analysis, and continuous service improvements Benefits - Highly competitive salary - Ability to work anywhere in the world - Dynamic team environment - Engagement with interesting challenges in the technology/infrastructure space

Role Description We're looking for a Senior Identity Platform Engineer to take full ownership of a large-scale enterprise OIDC platform supporting thousands of users, hundreds of applications, and mission-critical authentication services. This is not a typical application development role. You'll combine identity architecture, platform engineering, and modernisation leadership, becoming the technical authority for a custom-built authorization platform while driving the roadmap toward a modern, standards-based identity solution. Deep fluency in OAuth2, OpenID Connect, token lifecycle, federation, and authorization systems is essential. This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused. What you'll do - Platform operations - Own the operational health, reliability, and availability of the OIDC platform - Lead incident investigation and root cause analysis - Diagnose authentication, authorization, MFA, federation, and token-related failures - Develop operational runbooks and platform documentation - Identity engineering - Design and implement enhancements to authentication and authorization workflows - Maintain OAuth2 and OIDC integrations - Support MFA technologies including TOTP, SMS, Email, WebAuthn, and passwordless authentication - Support federation with Active Directory and Azure Active Directory - Maintain token issuance, claims mapping, scopes, audiences, and client registrations - Application development - Develop and maintain Node.js and TypeScript services - Troubleshoot production issues through code analysis and debugging - Perform dependency upgrades and security remediation - Build automation and operational tooling - Platform modernisation - Assess migration paths toward modern identity platforms - Lead technical evaluations of platforms such as Zitadel, Keycloak, Authentik, or similar - Define migration strategies for applications, clients, claims, and identity data - Drive platform simplification and reduction of technical debt - Data and infrastructure - Support Elasticsearch-backed identity data stores - Troubleshoot token, session, account, permission, and client data issues - Work with Kubernetes-based deployments and GitOps workflows - Support Redis, background processing, and synchronisation services - Operational Support & On-Call - Participate in a shared on-call rotation - Assist with incident response, troubleshooting, root cause analysis, and continuous service improvements Qualifications - 5+ years working with OAuth2 and OpenID Connect in production environments - Deep understanding of Authorization Code Flow, Client Credentials Flow, Device Authorization Flow, Token Exchange, JWT, JWK/JWKS, PKCE, Refresh Tokens, Federation, and Claims and Scopes - 5+ years of Node.js development - Strong TypeScript experience - Experience supporting and debugging production systems - Kubernetes experience - Elasticsearch and Redis experience - CI/CD and GitOps exposure - Production incident response experience Nice to have - Experience with panva/oidc-provider, Zitadel, Keycloak, or Authentik - LDAP, Active Directory, or Azure AD / Entra ID - WebAuthn / FIDO2 Benefits - Highly competitive salary - Ability to work anywhere in the world - Part of a dynamic team tackling interesting challenges in the technology/infrastructure space

Role Description We're looking for a Software Engineer with Identity and Access Management (IAM) domain experience to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem. This is primarily an application engineering role, not a Kubernetes, DevOps, SRE, or infrastructure engineering position. You'll work on the identity platform itself, investigating authentication and authorization issues, onboarding applications, maintaining Node.js/TypeScript services, implementing platform enhancements, and troubleshooting complex OAuth2 and OpenID Connect workflows. The ideal candidate has hands-on experience building, supporting, or extending identity platforms and a strong understanding of: - OAuth2 - OpenID Connect - JWTs - Claims - Scopes - MFA - Identity federation You should be comfortable reading and modifying application code, debugging production issues, and diagnosing problems across application, data, and infrastructure layers. This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused. Qualifications - 2–4 years of experience working with OAuth2 and OpenID Connect - Understanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, Claims and Scopes, MFA concepts, and Identity Federation Requirements - Node.js and TypeScript experience - REST API development - Git-based workflows - Kubernetes fundamentals - Linux administration - Monitoring and troubleshooting skills - Basic Elasticsearch knowledge Nice to have - Experience with oidc-provider, Keycloak, Zitadel, or Authentik - Active Directory or Azure AD / Entra ID Benefits - Highly competitive salary - Ability to work anywhere in the world - Dynamic team environment - Engagement in interesting challenges in the technology/infrastructure space

Role Description We're looking for an Identity Platform Engineer to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem. You'll work across application, platform, and infrastructure layers — investigating issues, onboarding clients, maintaining services, and improving how the platform runs day to day. The right candidate has hands-on experience with OAuth2 and OpenID Connect, a solid grasp of authentication and authorization concepts, and the troubleshooting instincts to diagnose problems across a complex stack. This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused. - Support day-to-day operation of the OIDC platform - Investigate authentication and authorization issues - Assist with client registrations, configuration changes, and onboarding - Maintain Node.js and TypeScript services - Support MFA integrations and identity federation - Monitor platform health and respond to incidents - Develop automation and operational tooling - Support Elasticsearch and Redis-based services - Participate in on-call rotations Qualifications - 2–4 years of experience working with OAuth2 and OpenID Connect - Understanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, Claims and Scopes, MFA concepts, and Identity Federation Requirements - Node.js and TypeScript experience - REST API development - Git-based workflows - Kubernetes fundamentals - Linux administration - Monitoring and troubleshooting skills - Basic Elasticsearch knowledge Nice to have - Experience with oidc-provider, Keycloak, Zitadel, or Authentik - Active Directory or Azure AD / Entra ID Benefits - Highly competitive salary - Ability to work anywhere in the world - Part of a dynamic team taking on interesting challenges in the technology/infrastructure space