Identity & Auth Infrastructure Intern at Nuggy.io

You are viewing a preview of this job. Log in or register to view more details about this job.

Nuggy is the first ML-powered retail intelligence platform for cannabis dispensaries.

Most dispensaries fly blind, pricing manually, tracking competitors across dozens of tabs, and making inventory decisions based on gut instinct. We fix that. Nuggy integrates with dispensary systems to deliver real-time pricing recommendations, competitor intelligence, and menu health insights, all optimized continuously using signals like inventory levels, local events, weather, and demand patterns.

We're currently live with dispensaries across Massachusetts and expanding fast. Our founding team brings together nearly a decade of cannabis operating experience and deep ML expertise and we have a proprietary data moat that no competitor can replicate.

• Set up and configure a self-hosted Keycloak instance (Docker / cloud-hosted)
• Audit the existing Auth0 tenant: users, roles, rules, social connections, and machine-to-machine clients
• Migrate user accounts and credentials with zero service interruption using the Keycloak migration SPI
• Re-implement Auth0 rules and actions as Keycloak authenticator flows and event listeners
• Update backend services and API middleware to validate Keycloak-issued JWTs
• Configure realm settings, client scopes, and role mappings to match existing auth behavior
• Write runbooks and operational docs for auth flows and Keycloak admin tasks
• Support testing and rollout: shadow mode, canary deploy, and full cutover

We're looking for detail-oriented engineers who are comfortable owning infrastructure work end-to-end and can move fast without breaking things (especially auth). Strong candidates will have at least 3 of the following:

• Solid understanding of OAuth 2.0 / OIDC: auth flows, token lifecycle, scopes
• Prior hands-on experience with Keycloak or Auth0
• Backend development experience (Node.js, Python, or similar): JWT validation, middleware
• Comfort with Docker and Linux for spinning up and managing containerized services
• High attention to detail: auth migrations are high-stakes
• Clear technical writing: runbooks and docs others can actually follow

• Location:
  
  Remote
• Type:
  Part-time or Internship
• Compensation:
  This role is currently unpaid — we're bootstrapped and raising soon. Strong performers who are a good fit may transition into a paid, longer-term role once funding comes mid to late summer.

Submit your resume and an email to info explaining in a few sentences what interests you about the position and why'd you be a good fit.