Software Engineer – Identity Applications & Integrations

Location: Manhattan, New YorkWork arrangement: Hybrid — two days per week onsiteEmployment type: Full-timeBase salary: $115,000–$135,000 annuallyAbout the roleWe are adding a mid-level full-stack software engineer to help own, operate, and enhance a portfolio of production identity-governance and application-provisioning systems.These applications automate identity lifecycle workflows such as onboarding, offboarding, deprovisioning, access requests, and SCIM credential rotation. They also support integrations and reporting across enterprise platforms such as Salesforce, Microsoft Entra ID, and Google Workspace.This is a software engineering position rather than an end-user help-desk role. Production support primarily involves diagnosing application, integration, workflow, configuration, and data issues and implementing durable fixes.You will work primarily with Spring Boot backend services, React and Next.js frontends, PostgreSQL databases, and containerized applications running on Kubernetes and AWS. You will receive architectural guidance, day-to-day support, and code review from senior engineers while taking increasing ownership of the existing application portfolio.As capacity allows, you will also contribute to AI-enabled application features, building practical experience with Spring AI and related model platforms.This role is a strong fit for an engineer who has solid full-stack fundamentals, enjoys solving production problems, takes pride in keeping applications healthy, and wants to build expertise in identity governance, enterprise integrations, cloud platforms, and AI.Strong Java/Spring Boot, React/TypeScript, API integration, database, and production-support fundamentals are the primary requirements for this role.Responsibilities:Own, operate, and enhance production applicationsTake increasing ownership of the day-to-day health, support, and enhancement of identity-governance and application-provisioning systems.Triage and resolve application defects, integration failures, workflow issues, and support requests during normal business hours.Use application logs, metrics, dashboards, database queries, and other diagnostic tools to identify root causes and implement durable fixes.Document root causes, corrective actions, and operational procedures for recurring or material incidents.Work with senior engineers when issues require architectural changes or deeper platform expertise.Occasional planned after-hours deployments or urgent production support may be required.Deliver full-stack enhancementsDesign and implement enhancements across Spring Boot backend services and React or Next.js frontends.Translate user needs and operational findings into maintainable application improvements.Build and maintain REST APIs and third-party integrations.Write unit and integration tests and validate changes to APIs, database workflows, and external integrations.Participate in code reviews and incorporate feedback from senior engineers.Maintain enterprise integrationsSupport integrations with Salesforce using REST APIs, OAuth 2.0, polling, case events, and related integration patterns.Maintain integrations with identity platforms such as Microsoft Entra ID and Google Workspace.Support provisioning, deprovisioning, access-request, and credential-management workflows.Work with messaging and queue-based processes used to coordinate asynchronous application activity.Support data, configuration, and securityMaintain PostgreSQL schemas, application configuration, and database migrations.Work with ORM and migration frameworks such as JPA, Liquibase, or Prisma.Follow secure engineering practices for authentication, authorization, credentials, secrets, audit information, and sensitive identity data.Help maintain secure configuration and secret-management processes using tools such as Vault.Support dependency updates and application security improvements.Improve reliability and maintainabilityImprove automated testing, logging, monitoring, error handling, and operational documentation.Reduce recurring manual work and operational toil.Help maintain Docker images, Helm charts, dependencies, and deployment configurations.Collaborate with senior engineers to identify technical debt and prioritize maintainability improvements.Contribute to AI initiativesAs capacity allows:Contribute to AI-enabled application features built with Spring AI and related model platforms.Help integrate language models into secure and reliable enterprise application workflows.Build practical experience with model APIs, prompt design, structured outputs, retrieval, testing, and AI application safeguards.Required qualificationsApproximately three to six years of professional software engineering experience.Strong Java and Spring Boot development experience.Experience building user interfaces with React and TypeScript.Experience supporting and maintaining production applications, including diagnosing defects and safely releasing fixes.Experience designing, building, or consuming REST APIs.Experience integrating with third-party services.Understanding of OAuth 2.0 and common authentication and authorization patterns.Experience working with relational databases, SQL, and an ORM such as JPA.Experience writing unit or integration tests.Familiarity with Git, version control, code review, and collaborative software-development practices.Experience working with Docker or other container technologies.Understanding of secure coding and application-security fundamentals.Strong troubleshooting, communication, and documentation skills.Ability to collaborate with senior engineers and business stakeholders and incorporate feedback through code review.Preferred qualificationsExperience with one or more of the following is helpful but not required:Identity governance, identity lifecycle management, IAM, SCIM, provisioning, or deprovisioning.Microsoft Entra ID or Google Workspace administration and integration.Salesforce REST APIs, OAuth 2.0, Spring Cloud OpenFeign, or event-based Salesforce integrations.PostgreSQL, Liquibase, Prisma, or database migration frameworks.Next.js and Material UI.Kubernetes, Helm, Amazon EKS, or another container-orchestration platform.AWS application deployment and operational support.Messaging or queue-based systems such as Azure Service Bus, RabbitMQ, or Amazon SQS.Vault or another secrets-management platform.Python.Spring AI, Azure AI Foundry, Amazon Bedrock, or another LLM integration platform.AI-assisted development tools such as Cursor, Claude Code, Codex, or comparable tools.Technology environment:Languages: Java 17/21, JavaScript, TypeScript, PythonBackend: Spring Boot 3, Spring Security, OAuth 2.0, Spring Cloud OpenFeign, JPA, MavenFrontend: React, Material UI, Next.js, TypeScript, Node.jsData: PostgreSQL, Liquibase, PrismaIntegrations: Salesforce APIs, Microsoft Entra ID, Google Workspace, REST APIs, OAuth 2.0Messaging: Azure Service Bus, RabbitMQ, Amazon SQSPlatform: Docker, Docker Compose, Kubernetes, Helm, AWS, Amazon EKSSecurity: Vault and related secret-management practicesAI: Spring AI and related model platformsDevelopment tooling: Git, automated testing tools, Cursor, Claude Code, Codex, and AI-assisted development environmentsWork arrangementThis is a hybrid position requiring two days per week onsite in the New York metro area. The remaining days may generally be worked remotely.Candidates must be able to commute consistently to the designated office location and participate in occasional in-person planning, collaboration, or team sessions.BenefitsMedical, dental, and vision insurance401(k) plan with company matchPaid time offPaid company holidaysHybrid work arrangementCompensationThe anticipated base salary range for this position is $115,000–$135,000 annually. Actual compensation will depend on relevant experience, technical proficiency, production application-support experience, integration expertise, and other job-related qualifications. This range represents base salary and does not include the value of benefits.