Negotiable
Inside
Hybrid
Sheffield, England, United Kingdom
Summary: The Application Developer role is focused on developing secure and scalable identity and access workflows on Google Cloud Platform. The position requires expertise in identity API development, data ingestion, and event-driven architectures, with a strong emphasis on collaboration with various technical teams. The developer will design and implement IAM automation and identity lifecycle workflows while ensuring robust security and performance. This role is a hybrid position, requiring on-site work 2 to 3 days a week in Sheffield, UK.
Key Responsibilities:
- Design and implement identity flows for provisioning, de-provisioning, and orchestration of identity lifecycle events.
- Integrate with Cloud Identity Services, ServiceNow, and internal services to streamline identity provisioning and lifecycle management.
- Build policy-based orchestration workflows for adaptive authentication and context-aware access.
- Design, build, and secure RESTful APIs and backend services supporting identity workflows.
- Integrate APIs with authentication services for token validation and application-level authorization.
- Develop pipelines for API events to publish to Pub/Sub for asynchronous workflows.
- Build Cloud Functions, Cloud Run microservices, or containerized services for processing Pub/Sub messages.
- Automate deployment and validation of identity and access configurations via CI/CD pipelines.
- Troubleshoot identity, access, and API workflow issues across distributed systems.
- Provide technical guidance on secure API design and IAM best practices.
Key Skills:
- Proven experience with modern identity orchestration platforms (Auth0 Actions, Okta Workflows, etc.).
- Strong programming skills in Python, Go, Java, or Node.js.
- Experience designing and deploying cloud-native APIs.
- Deep understanding of event-driven architectures and workflow automation.
- Strong knowledge of OAuth2, OIDC, JWT, SAML, and identity federation patterns.
- Proficiency in Terraform or equivalent IaC tools.
- Experience using API gateways or service mesh technologies.
- Analytical thinker with strong debugging abilities.
- Clear communication skills for collaboration across teams.
- Ownership mindset with a security-first mentality.
Salary (Rate): undetermined
City: Sheffield
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: inside IR35
Seniority Level: undetermined
Industry: IT
Position: Application Developer
Type: Inside IR35 Contract
Mode: Hybrid for 2 to 3 days on site in a week
Location: Sheffield, UK
Role Summary
We are looking for a highly skilled Application Developer with strong expertise in identity API development, data ingestion and transformation, and event-driven (Pub/Sub) architectures . This role focuses on building secure, scalable identity and access workflows across Google Cloud Platform, integrating identity services with custom APIs, Pub/Sub pipelines, and cloud-native applications. You will collaborate closely with tech leads, Cloud Security, DevOps, and Application Engineering teams to design and implement robust IAM automation, identity lifecycle workflows, and secure service integrations that support enterprise-level cloud and Identity operations.
Key Responsibilities
- Identity Orchestration
- Design and implement identity flows for provisioning, de-provisioning and orchestration of identity lifecycle events.
- Integrate with Cloud Identity Services, ServiceNow, and internal services to streamline / orchestrate identity provisioning and identity lifecycle management.
- Build policy-based orchestration workflows for adaptive authentication and context-aware access using industry standards (like OPA).
- API Development
- Design, build, and secure RESTful APIs and backend services supporting identity, provisioning, and governance workflows.
- Integrate APIs with our new authentication service for token validation, user sessions, and application-level authorization.
- Build and document internal SDKs, middleware, and shared libraries for consistent IAM logic across services.
- Ensure API security, performance, reliability, resilience, and observability.
- API-to-Pub/Sub Event Processing
- Develop pipelines where API events publish to Pub/Sub for asynchronous workflows such as:
- automated identity lifecycle tasks
- access review event triggers
- logging and audit forwarding
- security anomaly detection
- Build Cloud Functions, Cloud Run microservices, or containerized services to process Pub/Sub messages.
- Implement robust event-processing patterns including retries, idempotency, DLQs, and structured logging.
- Automation & Infrastructure as Code
- Build and maintain Terraform modules for IAM, API services, Pub/Subtopics, workloads, and permissions .
- Automate deployment and validation of identity and access configurations via CI/CD pipelines.
- Implement automated testing for IAM policies and API behaviour.
- Support, Troubleshooting & Collaboration
- Troubleshoot identity, access, and API workflow issues across distributed systems.
- Provide technical guidance to engineering teams on secure API design, IAM best practices, and identity workflows.
- Work with security teams during audits, compliance checks, and incident investigations.
Required Skills & Experience
Technical Expertise
- Proven experience with modern identity orchestration platforms (Auth0 Actions, Okta Workflows, WorkOS, or SlashID)
- Strong programming skills in Python, Go, Java, or Node.js for API and microservice development.
- Experience designing and deploying cloud-native APIs (Cloud Run, Cloud Functions, GKE).
- Deep understanding of event-driven architectures , Pub/Sub, message processing, and workflow automation.
- Strong knowledge of OAuth2, OIDC, JWT, SAML , and identity federation patterns.
- Proficiency in Terraform or equivalent IaC tools.
- Experience using API gateways, reverse proxies, or service mesh technologies.
Soft Skills
- Analytical thinker with strong debugging and root-cause analysis abilities.
- Clear communication skills with the ability to collaborate across engineering, security, and operations teams.
- Ownership mindset, with a security-first mentality and attention to detail.
- Ability to work in an agile, fast-paced environment.
Nice-to-Have
- Google Professional Cloud Security Engineer or Cloud Architect certification.
- Experience with additional identity providers (Okta, Azure AD, Ping Identity).
- Familiarity with Kubernetes (GKE RBAC + workload identity).
- Experience using Secret Manager, Vault, or other secrets management tools.
- Knowledge of compliance frameworks (SOC2, ISO 27001, PCI, HIPAA).
Education
Bachelor’s degree in computer science, Engineering, Information Security, or equivalent hands-on experience.