Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Federated Authentication Engineer - OESIS Framewor

Home > Other programming jobs

Federated Authentication Engineer - OESIS Framewor in Others

  • Ho Chi Minh City, Vietnam

Responsibilities

  • Design and implement OAuth2 and OIDC authentication flows for third-party enterprise platforms.
  • Implement SAML 2.0 federation for enterprise SSO passthrough scenarios.
  • Build secure multi-tenant credential and token storage with rotation using secrets managers.
  • Design passthrough authentication so the embedded SDK connects directly to each customer’s device-management tenant without OPSWAT storing or proxying raw credentials.
  • Implement token refresh, expiry, revocation, and re-authentication logic for long-running query pipelines.
  • Define least-privilege scopes and support certificate-based authentication and mutual TLS.
  • Support customer onboarding through app registration, consent, API client setup, and role or privilege configuration.

Requirements

  • At least 3 years of identity and access engineering experience with hands-on OAuth2, OIDC, and SAML 2.0; SCIM is preferred.
  • Direct experience with Microsoft Entra ID app registrations and Graph API authentication flows.
  • Experience implementing OAuth2 client-credentials flows against third-party enterprise APIs such as CrowdStrike Falcon or JAMF Pro.
  • Strong understanding of token lifecycle management, including refresh tokens, expiry, revocation, and scope or claim design.
  • Experience with secrets management and secure credential storage in multi-tenant SaaS environments.
  • Familiarity with certificate-based authentication, mutual TLS, and client certificates.
  • Working knowledge of common authentication vulnerabilities, including token leakage, replay attacks, and scope creep.
  • Experience with passthrough or delegated authentication architectures for OEM or SDK products is preferred.
  • Background with enterprise IAM tools such as Okta, Ping Identity, or Entra ID, or with CIAM, is preferred.
  • Familiarity with ZTNA, device posture or compliance, security certifications such as CISSP or OSCP, cybersecurity, software development, and compliance frameworks is preferred.

Benefits

  • Work with the mission-driven OESIS Framework team on technology that protects critical infrastructure.
  • OPSWAT promotes innovation, collaboration, and continuous development.
  • OPSWAT is an equal opportunity employer committed to a diverse, discrimination-free workplace.

OPSWAT

OPSWAT protects critical infrastructure. Our goal is to eliminate malware and zero-day attacks. We believe that every file and every device pose a threat. Threats must be addressed at all locations at all times—at entry, at exit, and at rest. Our products focus on threat prevention and process cr...

Similar positions

Data Engineer (Snowflake/DataStage)

  • VSP Vision
  • Full time
  • USA
  • 10/04/2026
  • Salary: $59k-$102k
  • Remote

CQLC : Lead Associate - QA

  • Davies Group
  • Full time
  • Others
  • 10/04/2026
  • Pune, India

Sr. Software Engineer II

  • Samsara
  • Full time
  • Remote
  • 10/04/2026
  • Poland

Senior Software Engineer, AI Enablement

  • Telnyx
  • Full time
  • Remote
  • 10/04/2026
  • Argentina, Brazil

Senior Forward Deployed Engineer

  • Typeform
  • Full time
  • UK
  • 10/04/2026
  • Remote

Listings

by


Job Type

Language

Country

CodingJobBoard.com © 2026