<p class="p1"><span class="s1"><strong>Location : Pune<br>About Team & About Role:</strong></span></p> <p> </p> <p>As a Software Engineer (SE) in the Continuous Product Delivery (CPD) team, you will play a key role in providing long term stability and last mile delight to our customers. You will work closely with the core engineering team, product, and support org.</p> <p>You will be working across Rubrik releases on our on-premise data backup & management offering, with a focus on the identity and access layer that secures it. You are expected to develop a strong understanding of our product and engineering architecture — particularly how authentication and authorization flow through the system, including our integrations with enterprise identity providers, directory services, and certificate-based trust chains.</p> <p>We are seeking a highly skilled Golang developer with deep, practical experience in identity protocols (OIDC/OAuth 2.0, SAML 2.0) and applied cryptography/PKI. As a Software Engineer on this team, you will be responsible for designing, building, and hardening the systems that authenticate users, machines, and services across our platform — reasoning carefully about threat models, not just shipping features. You should have strong programming and troubleshooting skills, excellent design skills, and a solid understanding of distributed systems, OS fundamentals, and networking. The successful candidate will preferably have working knowledge of Active Directory and be able to work independently and as part of a team.</p> <p> </p> <div id="message-list-preview-list_1678950356.205689" class="c-virtual_list__item c-virtual_list__item--initial-activeitem" data-qa="virtual-list-item" data-item-key="1678950356.205689"> <div class="c-message_kit__background c-message_kit__background--hovered p-message_pane_message__message c-message_kit__message" data-qa="message_container" data-qa-unprocessed="false" data-qa-placeholder="false"> <div class="c-message_kit__hover c-message_kit__hover--hovered" data-qa-hover="true"> <div class="c-message_kit__actions c-message_kit__actions--default"> <div class="c-message_kit__gutter"> <div class="c-message_kit__gutter__right" data-qa="message_content"> <div class="c-message_kit__blocks c-message_kit__blocks--rich_text"> <div class="c-message__message_blocks c-message__message_blocks--rich_text" data-qa="message-text"> <div class="p-block_kit_renderer" data-qa="block-kit-renderer"> <div class="p-block_kit_renderer__block_wrapper p-block_kit_renderer__block_wrapper--first"> <div class="p-rich_text_block"> <div class="p-rich_text_section"> </div> <div><strong>Responsibilities</strong><br><br></div> <ul> <li>Design, build, and harden identity and access flows — OIDC/OAuth 2.0, SAML 2.0, Active Directory integrations — that sit in front of mission-critical systems.</li> <li>Own token and assertion lifecycle correctness: issuance, validation, expiry, rotation, and failure-mode handling for JWT/JWKS and SAML assertions.</li> <li>Apply strong applied-cryptography and PKI practices (X.509 certs, key rotation, TLS) to keep the auth path secure by default, not as an afterthought.</li> <li>Build and maintain reverse-proxy/HTTP-layer components (TLS termination, header handling) that front customer authentication traffic.</li> <li>Debug and resolve customer-facing identity/access issues, working with support to triage escalations quickly.</li> <li>Contribute to build/release and cross-platform packaging (Linux deb/rpm, Windows MSI) as needed.</li> <li>Maintain a small Windows companion application written in C#/.NET.</li> <li>Write and enhance end-to-end tests covering auth flows, failure modes, and edge cases (clock skew, revoked tokens, malformed assertions, etc.).</li> <li>Document known issues, workarounds, and design decisions in the team knowledge base as the team and product mature.</li> <li>Communicate clearly with product and engineering stakeholders on design tradeoffs, security posture, and escalation status.</li> </ul> <div><br><strong>Requirements</strong><br><br><strong>Must-have</strong></div> <ul> <li>Strong hands-on programming skills in <strong>Golang</strong>.</li> <li>Deep, practical knowledge of identity protocols: <strong>OIDC/OAuth 2.0</strong> and <strong>SAML 2.0</strong> — including token/assertion internals, standard flows, and failure modes.</li> <li>Working knowledge of<strong> Active Directory</strong>.</li> <li>Applied cryptography/PKI experience: <strong>X.509, JWT/JWKS, key rotation, TLS</strong>.</li> <li>Strong security engineering discipline — comfortable reasoning about threat models and building software to protect mission-critical systems, not just make features work.</li> <li>Solid understanding of OS fundamentals, networking, and concurrency.</li> <li>Working knowledge of Linux; comfortable writing shell/bash scripts.</li> <li>Simple, effective written and verbal communication.</li> </ul> <div><strong>Nice-to-have</strong></div> <ul> <li>Directory internals (schema, bind operations).</li> <li>HTTP internals and reverse proxying (TLS, header injection).</li> <li>Build/release and cross-platform packaging (Linux deb/rpm, Windows MSI).</li> <li>Secret-manager internals, Redis, Win32, policy engines.</li> <li>Basic C#/.NET (to maintain the companion app).</li&