{"id":4010156,"url":"https://alion.io/job/conga-senior-software-engineer-authentication-authorization-oauthoidc","title":"Senior Software Engineer (Authentication & Authorization (OAuth/OIDC)","company":{"id":5652,"name":"Conga","domain":"conga.com","url":"https://alion.io/company/conga","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bulgaria"],"countries":["BG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Auth0","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure SQL Database","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Databricks","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Java","optional":false},{"name":"Keycloak","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Power BI","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Rust","optional":false},{"name":"Scala","optional":false},{"name":"SQL","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-11-10T07:46:13Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T09:39:07Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"A career that’s the whole package!\nAt Conga, we’ve built a community where our colleagues can thrive. Here you’ll find opportunities to innovate and support growth through individual and team development, all within an environment where every voice is heard.\nConga lines up commercial operations so companies run as connected, smarter businesses. By unifying the people and processes that drive commerce, Conga aligns pricing, quoting, contracting, rebates, and communications so teams stay in sync and buyers keep moving forward. The result is trusted decisions, consistent buyer experiences, and profitable growth. More than 10,000 customers worldwide, including over 50% of the Fortune 100®, trust Conga when commercial complexity is high and global impact is on the line.\nOpportunity Overview \nThis Senior Software Engineer role sits within Conga’s B2B Platform Engineering, Core Services organization. It focuses on building security, identity, access management, and reporting capabilities that are foundational to all Conga B2B products. \nYou will also be a key technical contributor to the Advantage Platform effort, building secure and reusable integration patterns between B2B and Advantage. This role is for a hands-on engineer who enjoys working deep in identity protocols and token flows, and who wants to build shared security services used across Conga’s platform ecosystem. \nWhat You’ll Do \nDesign, build, and maintain platform-level identity services, including authentication and authorization systems. \nImplement and extend OAuth 2.0, OIDC, SAML, and token-based authentication flows, including token issuance, validation, refresh, and revocation. \nBuild and evolve role and permission models and policy-driven access control used across multiple products. \nDevelop external and internal facing reports used for adoption, consumption, and monitoring the platform. \nTurn architectural direction and technical designs into secure, production-ready implementations. \nDevelop RESTful APIs and service contracts that multiple product teams consume. \nImplement tenant-context propagation and service-to-service authentication and authorization across distributed systems. \nBuild secure, scalable, and highly available services that meet strict security, performance, and reliability requirements. \nWork with the Advantage Platform team to implement secure integration patterns between B2B and Advantage, including shared authentication capabilities. \nWork with Architecture and Product Security to apply security patterns, standards, and controls, and to address threat modeling findings in code. \nContribute to an Agile, CI/CD-based environment with a focus on automation, testability, and observability. \nParticipate in code reviews and design reviews, sharing secure coding practices with teammates. \nInvestigate and resolve incidents in security-sensitive services, including root cause analysis and durable fixes. \nHelp build reusable authentication and authorization capabilities that support AI-driven product experiences.\nWhat We’re Looking For \nStrong hands-on experience building and operating identity and access management services in enterprise SaaS environments. \nDeep, practical knowledge of OAuth 2.0, OIDC, SAML, JWT and other token-based authentication, and common flows such as authorization code with PKCE and client credentials. \nExperience implementing role-based and permission-based access control, and policy-driven authorization models. \nExperience building backend systems in a modern language (for example Java, C#, Python, Scala, TypeScript, or Rust). \nStrong experience designing and implementing RESTful APIs with multiple consumers. \nSolid experience with SQL and the data stores that back platform services. \nWorking knowledge of authentication flows, multi-tenancy, and tenant-context handling in distributed systems. \nStrong understanding of software design patterns, distributed systems, and platform tradeoffs. \nSolid grasp of secure coding practices and common identity-related vulnerabilities, such as token misuse, session handling flaws, and privilege escalation. \nExperience delivering features end to end, from design through testing, deployment, and production support. \nClear written and verbal communication, with the ability to document technical decisions and collaborate with Architecture, Security, Product, and other engineering teams. \nPreferred / Bonus Experience \nExperience with identity providers or platforms such as Microsoft Entra ID (Azure AD), Okta, Auth0, Keycloak, or Ping. \nExperience with SCIM, federation, SSO, and MFA implementations. \nExperience with PaaS offerings (Azure, AWS, GCP) and containerized, orchestrated environments (Docker, Kubernetes). \nExperience with Azure SQL Server. \nFamiliarity with cloud-native security patterns, mTLS, and service-to-service communication. \nExposure to DevOps and SRE practices for platform services (monitoring, alerting, automation). \nExperience designing, developing, and maintaining PowerBi reports. \nFamiliarity with Databricks. \nWhat This Role Enables at Conga \nHands-on ownership of security-critical identity and access capabilities that support the B2B portfolio. \nSecure integration between the B2B and Advantage platforms. \nReusable authentication and authorization patterns for cross-platform product and AI experiences. \nGreater consistency in identity, tenant context, permissions, and service-to-service access across Conga platforms. \nImpact across multiple product teams and engineering organizations. \nClose alignment with Architecture and long-term platform strategy. \nA growth path toward staff-level or technical leadership roles. \nA chance to shape Conga’s security posture, engineering standards, and platform foundations.\nDid we pique your interest? \nIf this sounds like the kind of job you would love in the kind of environment where you would thrive, please click apply. We'd love to hear from you!\nPreferred Resume Format \nWe accept resumes in any format, we suggest using PDF or plain text. These formats help ensure that your resume’s formatting remains intact, making it easier for our recruiters to review your application promptly. \nDon’t meet every requirement for the role? \nStudies have shown that women and members of ethnic minorities are less likely to apply to jobs unless they meet every single qualification. At Conga we are dedicated to building a diverse, inclusive, and authentic workplace, so if you’re excited about this role but your experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You just might be the right candidate for this or other roles. \nAdditional Information\nConga is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. We understand interviewing can be stressful for those with disabilities. If reasonable accommodation is needed to allow you to show us your best self, please let your recruiter know as soon as possible. All your information will be kept confidential according to EEO guidelines. Conga is not open to third party solicitation or resumes for our posted FTE positions. Resumes received from third party agencies that are unsolicited will be considered complimentary.\nConga's Applicant Privacy Statement \nThe information you provide during the application process will be used in accordance with Conga’s Applicant Privacy Statement (https://conga.com/applicant-privacy-statement). By submitting your application, you acknowledge and agree to the terms outlined in this privacy statement.","description_format":"text","description_chars":7857,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["CRM Software","Workflow & Process Automation (RPA, BPM)","Legal Software"],"lifecycle":[{"event":"open","at":"2026-11-10T09:39:07Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":55,"reasons":["conf:3","win:early"],"computed_at":"2026-11-10T13:20:21Z"},"pay":null,"html_url":"https://alion.io/job/conga-senior-software-engineer-authentication-authorization-oauthoidc","json_url":"https://alion.io/job/conga-senior-software-engineer-authentication-authorization-oauthoidc.json","meta":{"generated_at":"2026-11-10T13:20:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31011,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5652},"rest":"https://alion.io/mcp/rest/get_company?id=5652"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconga-senior-software-engineer-authentication-authorization-oauthoidc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconga-senior-software-engineer-authentication-authorization-oauthoidc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconga-senior-software-engineer-authentication-authorization-oauthoidc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/conga-senior-software-engineer-authentication-authorization-oauthoidc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconga-senior-software-engineer-authentication-authorization-oauthoidc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4010156}},{"tool":"search_jobs","arguments":{"company":"conga.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4010156},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}