Senior Software Engineer - Permission & Identity

Get to know us<br/>Do you want to help us shape what the future of work will look like and how it will best embrace our life's aspirations? If this sounds like a journey you want to embark on, we may have the right role for you!PayFit is an intuitive cloud-based payroll and employee management solution designed specifically for SMBs. Since 2015, we have set ourselves a mission to simplify payroll for SMBs and enable employers and employees to grow together. We are a European company operating from 3 main countries (France, Spain, and the UK) where we are supporting over 9500 clients. <br/>Creating a fulfilling work environment and culture is also a core mission at PayFit, and our day-to-day work philosophy is reflected in our four values:<br/>Care We genuinely care for others whoever they are, whatever they thinkExcellence We aim to improve and achieve better results every dayHumility Staying humble and exchanging transparent feedback helps us to grow and improvePassion We are the architects of PayFit´s success<br/>A key part of our culture, and essential for our success, is also improving the diversity of our teams and building an inclusive culture where you can be yourself at work. <br/>This is why our recruitment focuses on the skills you demonstrate, and not only on your academic background or previous professional experiences. At PayFit we understand that you can gain applicable skills through a variety of life experiences and we are interested in knowing them, too.<br/>About the role :<br/>We are seeking a highly skilled and experienced Senior Software Engineer to join our dedicated and focused team known as "Permission &amp; Identity". <br/>You will play a pivotal role in handling the intricate and critical tasks of authentication, authorization, audit logs, and activity logs. <br/><br/>Responsibilities :<br/>- Product Evolution in a Secured and reliable Context: Collaborate closely with our dedicated “great” Product and Design squad members to ensure that as our product evolves its security remains robust. Your insight into the rich concepts of AuthN and AuthZ will play a pivotal role in making this a reality. You will need to lead and facilitate the roadmap definition, and translate the streams into comprehensible and pragmatic tasks.  - Architectural Mastery in Security: Take charge of conceptualizing, crafting, and evolving PayFit’s authentication and authorization frameworks. Dive deep into OAuth, SAML, JWT, OpenID Connect, and other industry-standard protocols to ensure that our systems are not only compliant but set benchmarks for PayRoll and HRIS businesses.- Token Lifecycle Management: Map the generation, refresh, and revocation processes for access and refresh tokens, ensuring optimal lifecycles and minimizing potential security risks against our critically sensitive customer data portfolio.- Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC), Relation-Based Access Control (ReBAC): Help fine-tuning our current permissioning system(s), ensuring that users only access the resources they're entitled to. Your understanding of RBAC, ABAC and ReBAC models will be crucial in designing and maintaining these controls.- Secure API Endpoints: Work on ensuring our API endpoints are well secured using best practices such as OAuth scopes and API gateways ensuring a secure end-to-end communication within our ecosystem.- Integration with Identity Providers (IdPs): Whether it's integrating with internal IdPs or external ones like Google and Okta, your experience will ensure a good understanding of seamless and secure integrations and align with future strategy decisions.- Audit and Logging: Challenge the current implementation and participate in the refinement of detailed audit trails for all authenticated and authorized events, enabling any abnormal behavior detection and investigations. You will also be key in creating a solid bridge with our current Domain and Event community leveraging our current Messaging mechanism’s capabilities. - Cross-Functional Collaboration: Collaborate with various teams and tribes, ensuring that all new features and services are developed with security at their core. Your expertise will be crucial in guiding our communication and customer satisfaction colleagues.- Education and Advocacy: Serve as the go-to expert for all things related to authentication and authorization, mentoring teams, leading workshops, and, with the help of our security colleagues, ensure a good security awareness within PayFit.<br/>We will be impressed if you show these qualities:- Protocol Proficiency: Hands-on expertise with a wide array of AuthN and AuthZ protocols, showcasing the ability to challenge the existing and select the right tool for the job and implement it flawlessly.- Adaptive Threat Modeling: A keen ability to anticipate and model potential security threats, especially in the realm of identity and access, and design systems and subsystems that preemptively address