Senior Software Engineer
- Role
- Security
- Experience
- Senior
- Employment
- Full-time
- Company size
- Startup
Open to US only. Set where you work from to check your eligibility.
No BS summary
Hands-on builder on IGA/IAM engagements. Develops connectors, lifecycle workflows, rules and integrations that turn an approved identity design into working platform behavior — and stands behind them through UAT, cutover and hypercare.
Core skills
Required skills
Optional skills
Required languages
About Gruve
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.
About the Role
Gruve is looking to hire a Senior Software Engineer with Hands-on builder on IGA/IAM engagements. Develops the connectors, lifecycle workflows, rules and integrations that turn an approved identity design into working platform behavior — and stands behind them through UAT, cutover and hypercare .
Key Responsibilities
Build and extend IGA connectors for target applications — out-of-box, configured and fully custom — across SCIM, REST, SOAP, JDBC, LDAP, PowerShell and flat-file integration patterns. Develop identity lifecycle logic: joiner-mover-leaver workflows, provisioning and deprovisioning policies, birthright access rules, and platform rules (BeanShell/Java in IdentityIQ, Saviynt configuration and jobs, Okta Workflows, PowerShell and Microsoft Graph for Entra ID). Implement access request catalogs, approval and escalation workflows, and access certification campaigns including reviewer models and closed-loop revocation. Build aggregation, correlation and entitlement normalization logic; develop data-quality and role-mining support pipelines against messy source data. Integrate the platform with ServiceNow ITSM for ticketed fulfilment and with HR systems (Workday, SuccessFactors) as authoritative identity sources. Configure federation and authentication integrations: SAML and OIDC application onboarding, MFA and adaptive access policy implementation, directory integration. Write unit and integration tests, participate in peer code review, and maintain deployment artifacts through the practice CI/CD pipeline. Support UAT execution, defect triage and root-cause analysis; own assigned defects through closure during cutover and hypercare windows. Produce build documentation, configuration records and knowledge-transfer material to a standard the client can operate against post-go-live. Contribute reusable connectors and accelerators back into the practice IP library.
Basic Qualifications
Vendor certification — SailPoint Certified Engineer, Saviynt L200/L300, Okta Certified Developer, or industry equivalent. Cloud identity services on Azure, AWS or GCP; Kubernetes and containerized deployment basics. Exposure to PAM integration (CyberArk, Delinea) or ITDR/ISPM tooling. Specialized target experience — SAP GRC, mainframe/RACF, Epic or Cerner in healthcare, or core banking platforms. Experience on a legacy-to-modern IGA migration. Regulated-environment platform delivery — FedRAMP, HITRUST or PCI-scoped estates.
Preferred Qualifications
6–8+ years of software engineering, with at least 4 years building on IGA/IAM platforms. Hands-on connector and workflow development on at least one of SailPoint IdentityIQ / ISC, Saviynt EIC, Okta, or Microsoft Entra ID. Strong Java (including BeanShell), .NET, and/or Python and PowerShell; solid SQL against identity and entitlement data. REST and SOAP API integration; SCIM 2.0 provisioning; LDAP and Active Directory schema fluency. Practical understanding of core IGA concepts — identity lifecycle, entitlements, roles, aggregation and correlation, access requests, certification, orphan and dormant accounts. Federation fundamentals: SAML 2.0 and OAuth 2.0 / OIDC flows, token handling, application onboarding. Secure engineering hygiene — secrets and credential handling, secure coding against OWASP Top 10, TLS and certificate basics, and an understanding of why an over-permissioned connector is a security finding. Git-based workflow and active participation in CI/CD-driven delivery. Clear written English for design notes, defect records and client-facing documentation.
Salary Range
$180k - $200k
This is a full-time opportunity with Gruve.
Why Gruve
At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.
Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.
What you'll do
- Build and extend IGA connectors for target applications across SCIM, REST, SOAP, JDBC, LDAP, PowerShell and flat-file integration patterns.
- Develop identity lifecycle logic: joiner-mover-leaver workflows, provisioning and deprovisioning policies, birthright access rules, and platform rules.
- Implement access request catalogs, approval and escalation workflows, and access certification campaigns.
- Build aggregation, correlation and entitlement normalization logic; develop data-quality and role-mining support pipelines.
- Integrate the platform with ServiceNow ITSM and HR systems (Workday, SuccessFactors).
What they require
- Vendor certification — SailPoint Certified Engineer, Saviynt L200/L300, Okta Certified Developer, or industry equivalent.
- Cloud identity services on Azure, AWS or GCP; Kubernetes and containerized deployment basics.
- Exposure to PAM integration (CyberArk, Delinea) or ITDR/ISPM tooling.
- Specialized target experience — SAP GRC, mainframe/RACF, Epic or Cerner in healthcare, or core banking platforms.
- Experience on a legacy-to-modern IGA migration.
- Regulated-environment platform delivery — FedRAMP, HITRUST or PCI-scoped estates.
- 6–8+ years of software engineering, with at least 4 years building on IGA/IAM platforms.
- Strong Java (including BeanShell), .NET, and/or Python and PowerShell; solid SQL against identity and entitlement data.
- REST and SOAP API integration; SCIM 2.0 provisioning; LDAP and Active Directory schema fluency.
- Practical understanding of core IGA concepts — identity lifecycle, entitlements, roles, aggregation and correlation, access requests, certification, orphan and dormant accounts.
- Federation fundamentals: SAML 2.0 and OAuth 2.0 / OIDC flows, token handling, application onboarding.
- Secure engineering hygiene — secrets and credential handling, secure coding against OWASP Top 10, TLS and certificate basics, and an understanding of why an over-permissioned connector is a security finding.
- Git-based workflow and active participation in CI/CD-driven delivery.
- Clear written English for design notes, defect records and client-facing documentation.
Benefits
- Foster a culture of innovation, collaboration, and continuous learning.
- Commitment to building a diverse and inclusive workplace.
- Opportunity to make an impact.
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. It specializes in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models.