IAM Software Engineer (Node.js/Python)

About the role

A wholly-owned subsidiary of GovTech, Assurity Trusted Solutions is hiring a Software Engineer for a 2-year direct contract with permanent benefits. The role builds secure, scalable Identity and Access Management (IAM) automation services for Whole-of-Government, focusing on backend services, APIs, automated testing and integrations with Microsoft Entra ID, Microsoft Graph and SailPoint.

Key responsibilities

• Design, develop and maintain secure IAM applications, backend services, APIs and automation workflows.
• Integrate with Microsoft Entra ID and Microsoft Graph to automate users, groups, enterprise applications, Administrative Units, PIM, Conditional Access Policies and access governance workflows.
• Integrate with SailPoint to automate users, groups, entitlement management, provisioning and access review workflows.
• Develop and maintain automated test suites, contract tests and validation checks for APIs, integrations and critical workflows.
• Support Java-based backend utilities or plugins using Core Java, object-oriented design and encapsulation.
• Implement secure authentication and authorisation using SSO, MFA, OAuth 2.0, OpenID Connect and SAML.
• Deploy code through CI/CD pipelines with testing, security scanning, release controls and rollback practices.
• Produce technical documentation such as API specifications, sequence diagrams, runbooks and operational guides.

Required profile

• Related degree in Computer Science, Software Engineering, Information Systems, Cybersecurity or a related field.
• 2-5 years of hands-on software engineering experience.
• Experience building RESTful APIs, backend services, automation scripts and enterprise integrations.
• Experience with automated test suites and contract testing.
• Working knowledge of IAM concepts such as identity lifecycle, RBAC, SSO, MFA, OAuth 2.0, OpenID Connect and SAML.

Required skills

• Node.js, JavaScript, TypeScript, Python, Java or equivalent.
• Familiarity with Microsoft Entra ID, Microsoft Graph API, SailPoint, GitLab, Docker, Jira and Confluence.
• Preferred: Microsoft Identity and Access Administrator, Azure Developer, Azure Security Engineer or DevOps Engineer certifications; SailPoint certifications; CISSP, CCSP, CompTIA Security+; Terraform, Kubernetes, secure coding, SAST, secrets management or Zero Trust.

What we offer

• Remuneration commensurate with qualifications and experience.
• Annual leave with additional perks such as Family Care and Birthday Leave.
• A learning culture within a wholly-owned subsidiary of GovTech.