Senior Software Engineer

About the Role

Gruve is looking to hire a Senior Software Engineer with Hands-on builder on IGA/IAM engagements. Develops the connectors, lifecycle workflows, rules and integrations that turn an approved identity design into working platform behavior — and stands behind them through UAT, cutover and hypercare. 

Key Responsibilities

• Build and extend IGA connectors for target applications — out-of-box, configured and fully custom — across SCIM, REST, SOAP, JDBC, LDAP, PowerShell and flat-file integration patterns. 
• Develop identity lifecycle logic: joiner-mover-leaver workflows, provisioning and deprovisioning policies, birthright access rules, and platform rules (BeanShell/Java in IdentityIQ, Saviynt configuration and jobs, Okta Workflows, PowerShell and Microsoft Graph for Entra ID). 
• Implement access request catalogs, approval and escalation workflows, and access certification campaigns including reviewer models and closed-loop revocation. 
• Build aggregation, correlation and entitlement normalization logic; develop data-quality and role-mining support pipelines against messy source data. 
• Integrate the platform with ServiceNow ITSM for ticketed fulfilment and with HR systems (Workday, SuccessFactors) as authoritative identity sources. 
• Configure federation and authentication integrations: SAML and OIDC application onboarding, MFA and adaptive access policy implementation, directory integration. 
• Write unit and integration tests, participate in peer code review, and maintain deployment artifacts through the practice CI/CD pipeline. 
• Support UAT execution, defect triage and root-cause analysis; own assigned defects through closure during cutover and hypercare windows. 
• Produce build documentation, configuration records and knowledge-transfer material to a standard the client can operate against post-go-live. 
• Contribute reusable connectors and accelerators back into the practice IP library. 

Basic Qualifications

• Vendor certification — SailPoint Certified Engineer, Saviynt L200/L300, Okta Certified Developer, or industry equivalent. 
• Cloud identity services on Azure, AWS or GCP; Kubernetes and containerized deployment basics. 
• Exposure to PAM integration (CyberArk, Delinea) or ITDR/ISPM tooling. 
• Specialized target experience — SAP GRC, mainframe/RACF, Epic or Cerner in healthcare, or core banking platforms. 
• Experience on a legacy-to-modern IGA migration. 
• Regulated-environment platform delivery — FedRAMP, HITRUST or PCI-scoped estates. 

Preferred Qualifications

• 6–8+ years of software engineering, with at least 4 years building on IGA/IAM platforms. 
• Hands-on connector and workflow development on at least one of SailPoint IdentityIQ / ISC, Saviynt EIC, Okta, or Microsoft Entra ID. 
• Strong Java (including BeanShell), .NET, and/or Python and PowerShell; solid SQL against identity and entitlement data. 
• REST and SOAP API integration; SCIM 2.0 provisioning; LDAP and Active Directory schema fluency. 
• Practical understanding of core IGA concepts — identity lifecycle, entitlements, roles, aggregation and correlation, access requests, certification, orphan and dormant accounts. 
• Federation fundamentals: SAML 2.0 and OAuth 2.0 / OIDC flows, token handling, application onboarding. 
• Secure engineering hygiene — secrets and credential handling, secure coding against OWASP Top 10, TLS and certificate basics, and an understanding of why an over-permissioned connector is a security finding. 
• Git-based workflow and active participation in CI/CD-driven delivery. 
• Clear written English for design notes, defect records and client-facing documentation. 

Salary Range 

$180k - $200k 

This is a full-time opportunity with Gruve.

‍