Senior Backend & Identity Engineer — Sovereign Deployment

What you will own

• OIDC/SAML SSO integration with a sovereign identity provider, with MFA enforcement
• Server-side JWT verification, RBAC, and fund-level access checks across the backend
• Core Backend Monolith architecture and oversight of module implementation in Python
• Postgres schema design and Object Storage layout for a regulated, encrypted data platform
• Workflow orchestration, report orchestration, and authentication modules
• Backup, restore, and disaster recovery procedures inside the sovereign network

• At least one production OIDC or SAML SSO integration against an enterprise identity provider — Okta, Azure AD, Ping, Forge Rock, Keycloak, or sovereign IdP
• Server-side JWT verification and RBAC at production scale, with role and resource-level access checks
• Backend monolith or modular monolith API design in Python (FastAPI, Django) or Type Script, with Postgres
• Deployment into a regulated environment with explicit network segmentation, allow listed egress, or air-gapped constraints
• Append-only audit trail design, immutable storage patterns, or regulated logging work — SOC2, ISO 27001, PCI, or equivalent

• Prior work with sovereign wealth funds, central banks, or tier-1 institutional clients
• Financial services backend experience — private markets, asset management, banking
• Direct experience with no-egress private network topologies