SSO / Identity Management Specialist (Python / FastAPI / Microsoft Entra ID) (Hiring Globally)
COGNATIV Spain
About the role
The specialist will implement enterprise Single Sign-On capabilities using Microsoft Entra ID and develop backend APIs with Python and FastAPI. They will also troubleshoot complex authentication flows and collaborate with teams to ensure secure, scalable identity management.
What they look for
Requirements
Candidates must have over 10 years of Python backend development experience and deep expertise in identity protocols like OAuth 2.0, OIDC, and SAML. Strong knowledge of clean architecture and the ability to work independently on focused implementation projects are essential.
Benefits
Full description
Job Overview:
We are looking for an experienced SSO / Identity Management Specialist to support the implementation of enterprise Single Sign-On capabilities, with an initial focus on Microsoft Entra ID integration.
The ideal candidate has strong backend API development experience, especially with Python, FastAPI, and ideally GraphQL, combined with practical experience implementing authentication and identity protocols such as OAuth 2.0, OpenID Connect, SAML, and enterprise SSO flows.
This role is initially expected to support a focused SSO implementation project, but candidates with strong API engineering experience may be considered for additional backend work beyond the initial scope.
- 10+ years of experience in Python backend development.
- Deep understanding of Clean Code, Clean Architecture, Modular Architecture, and Distributed Systems.
- Strong experience with Python backend development.
- Hands-on experience with FastAPI.
- Experience designing and implementing backend APIs.
- Practical experience with OAuth 2.0, OpenID Connect, and SAML.
- Experience implementing SSO integrations, specifically from the relying-party / service-provider side.
- Understanding of identity provider configuration, metadata exchange, redirect flows, token validation, claims mapping, and session handling.
- Ability to troubleshoot SSO issues across application, identity provider, and configuration layers.
- Strong understanding of secure API design and authentication best practices.
- Ability to work independently on a focused implementation project.
- Implement SSO integration with Microsoft Entra ID.
- Build and maintain backend APIs using Python and FastAPI.
- Support authentication and authorization flows using OAuth 2.0, OIDC, and SAML.
- Implement the relying-party side of enterprise SSO integrations.
- Work with technical stakeholders to define, validate, and test identity flows.
- Debug and resolve authentication, token, redirect, metadata, certificate, and session-related issues.
- Collaborate with backend and platform teams to ensure secure, scalable, and maintainable implementation.
- Contribute to documentation for configuration, deployment, troubleshooting, and customer onboarding.
- Potentially support SCIM provisioning for enterprise customer user management.
Nice-to-Have Skills:
- Experience with GraphQL.
- Experience with Microsoft Entra ID enterprise integrations.
- Experience with SCIM provisioning for user and group lifecycle management.
- Experience with MFA flows and enterprise security policies.
- Experience with AWS Cognito.
- Experience supporting enterprise customer onboarding.
- Familiarity with audit logging, identity lifecycle events, and access management workflows.
Ideal Candidate Profile:
We are looking for a highly skilled Backend Engineer or Identity Management Specialist with hands-on experience implementing and supporting Single Sign-On (SSO) solutions in production environments. The ideal candidate should have a strong understanding of enterprise identity and access management concepts and proven experience integrating applications with leading identity providers.
The successful candidate will be comfortable troubleshooting complex authentication and authorization workflows, designing secure and scalable API services, and ensuring seamless user access across systems. They should possess strong problem-solving skills, communicate effectively with technical and cross-functional stakeholders, and be capable of delivering high-quality solutions within fast-paced project timelines.
A proactive mindset, attention to security best practices, and the ability to work independently while collaborating with distributed teams will be key to success in this role.
- A hybrid, flexible working policy.
- Professional growth and development opportunities.
- An international team of world-class engineers that brings positive energy.
- A friendly, supportive, and relaxing working environment in our offices.
Similar roles
-
Senior Ground Support Equipment Engineer - Python & Beckhoff
Varda Space Industries El Segundo, California, United States · $140K–$179K/yr
-
Automation Engineer - Controls & Python
Varda Space Industries El Segundo, California, United States · $109K–$153K/yr
-
Python + Gen AI Developer - Chennai
Photon Ambattur, Tamil Nadu, India
-
Software Designer (PHP, Python, Rush)
Alstom Bangkok, Thailand
-
Python Full Stack Developer
Jobgether India
-
Senior Python engineer - Technology Risk GRACE
NAB Hanoi, Vietnam