• Design, build, automate, and maintain the internal platforms, infrastructure, tooling, and delivery pipelines • Build and improve internal platform services, automate provisioning and configuration, and support virtualization and infrastructure lifecycle management • Deploy, manage, and troubleshoot Kubernetes environments • Maintain Helm charts, manifests, and deployment automation • Support Docker, Swarm, and Podman workloads • Develop Ansible playbooks and Infrastructure as Code • Build and improve CI/CD pipelines using GitHub Actions • Support infrastructure across AWS, Azure, and GCP • Implement monitoring, logging, and alerting • Assist with incident response and root cause analysis • Work closely with Engineering, QE, Managed Services, Support, and Product teams • Maintain technical documentation • Participate in technical reviews and continuous improvement • Participate in a shared on-call rotation supporting internal platforms and critical infrastructure

Role Description We're looking for a Senior Identity Platform Engineer to take full ownership of a large-scale enterprise OIDC platform supporting thousands of users, hundreds of applications, and mission-critical authentication services. This is not a typical application development role. You'll combine identity architecture, platform engineering, and modernisation leadership, becoming the technical authority for a custom-built authorization platform while driving the roadmap toward a modern, standards-based identity solution. Deep fluency in OAuth2, OpenID Connect, token lifecycle, federation, and authorization systems is essential. This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused. What you'll do - Platform operations - Own the operational health, reliability, and availability of the OIDC platform - Lead incident investigation and root cause analysis - Diagnose authentication, authorization, MFA, federation, and token-related failures - Develop operational runbooks and platform documentation - Identity engineering - Design and implement enhancements to authentication and authorization workflows - Maintain OAuth2 and OIDC integrations - Support MFA technologies including TOTP, SMS, Email, WebAuthn, and passwordless authentication - Support federation with Active Directory and Azure Active Directory - Maintain token issuance, claims mapping, scopes, audiences, and client registrations - Application development - Develop and maintain Node.js and TypeScript services - Troubleshoot production issues through code analysis and debugging - Perform dependency upgrades and security remediation - Build automation and operational tooling - Platform modernisation - Assess migration paths toward modern identity platforms - Lead technical evaluations of platforms such as Zitadel, Keycloak, Authentik, or similar - Define migration strategies for applications, clients, claims, and identity data - Drive platform simplification and reduction of technical debt - Data and infrastructure - Support Elasticsearch-backed identity data stores - Troubleshoot token, session, account, permission, and client data issues - Work with Kubernetes-based deployments and GitOps workflows - Support Redis, background processing, and synchronisation services - Operational Support & On-Call - Participate in a shared on-call rotation - Assist with incident response, troubleshooting, root cause analysis, and continuous service improvements Qualifications - 5+ years working with OAuth2 and OpenID Connect in production environments - Deep understanding of Authorization Code Flow, Client Credentials Flow, Device Authorization Flow, Token Exchange, JWT, JWK/JWKS, PKCE, Refresh Tokens, Federation, and Claims and Scopes - 5+ years of Node.js development - Strong TypeScript experience - Experience supporting and debugging production systems - Kubernetes experience - Elasticsearch and Redis experience - CI/CD and GitOps exposure - Production incident response experience Nice to have - Experience with panva/oidc-provider, Zitadel, Keycloak, or Authentik - LDAP, Active Directory, or Azure AD / Entra ID - WebAuthn / FIDO2 Benefits - Highly competitive salary - Ability to work anywhere in the world - Part of a dynamic team tackling interesting challenges in the technology/infrastructure space

Role Description We're looking for an Identity Platform Engineer to support and enhance an enterprise OpenID Connect platform used across a large application ecosystem. You'll work across application, platform, and infrastructure layers — investigating issues, onboarding clients, maintaining services, and improving how the platform runs day to day. The right candidate has hands-on experience with OAuth2 and OpenID Connect, a solid grasp of authentication and authorization concepts, and the troubleshooting instincts to diagnose problems across a complex stack. This role operates with core collaboration hours of 6:00 PM – 12:00 AM IST to provide overlap with global teams. Outside of core hours, work is flexible and outcome-focused. - Support day-to-day operation of the OIDC platform - Investigate authentication and authorization issues - Assist with client registrations, configuration changes, and onboarding - Maintain Node.js and TypeScript services - Support MFA integrations and identity federation - Monitor platform health and respond to incidents - Develop automation and operational tooling - Support Elasticsearch and Redis-based services - Participate in on-call rotations Qualifications - 2–4 years of experience working with OAuth2 and OpenID Connect - Understanding of Authorization Code Flow, Client Credentials Flow, JWT, PKCE, Claims and Scopes, MFA concepts, and Identity Federation Requirements - Node.js and TypeScript experience - REST API development - Git-based workflows - Kubernetes fundamentals - Linux administration - Monitoring and troubleshooting skills - Basic Elasticsearch knowledge Nice to have - Experience with oidc-provider, Keycloak, Zitadel, or Authentik - Active Directory or Azure AD / Entra ID Benefits - Highly competitive salary - Ability to work anywhere in the world - Part of a dynamic team taking on interesting challenges in the technology/infrastructure space

• Own and evolve the developer experience across all product engineering teams: tooling standards, AI harness integration, deployment pipelines, and governance model. • Define and enforce platform engineering standards that enable engineering teams to ship faster and at a higher quality bar. • Drive adoption of AI-native SDLC practices across the organization, partnering with engineering managers to measure and improve development velocity. • Build and lead the Platform Engineering team, including a Senior Platform Engineer and SRE/DevOps Lead. • Develop engineering talent and establish the culture of the platform function — reliability, craftsmanship, automation-first thinking. • Own the reliability posture of the platform: uptime SLOs, on-call frameworks, incident response standards, and postmortem culture. • Establish telemetry, observability, and alerting standards across all product lines (DataDog, CloudWatch, PagerDuty). • Be an active participant in FMG's AI engineering transformation — from agentic development tools to AI-assisted QA and testing.