Senior DevOps Engineer (m/f/d) – Identity & Access Management

Role overview

Build and operate a large-scale identity broker platform that supports high-volume authentication and federation. The work combines IAM engineering with DevOps practices: designing sign-on flows, resolving serious production incidents, planning migrations, and improving the performance and scalability of infrastructure used by millions of people and thousands of business customers.

Responsibilities

- Develop and maintain a platform based on Ping Identity and ForgeRock technologies. - Design federation and single sign-on flows using OIDC and SAML, including modern methods such as WebAuthn and passkeys. - Investigate incidents, resolve complex faults, and address their underlying causes. - Plan and carry out data migrations, including migrations to PingDirectory. - Improve IAM infrastructure performance and scalability. - Serve as a technical contact for customers and internal teams, contributing designs, solution guidance, and support for colleagues.

Requirements

- Several years of IAM experience, with strong knowledge of federation, single sign-on, OIDC, and SAML. - Project experience with Ping Identity products such as PingAM, PingIDM, and PingDirectory. - Hands-on experience designing, implementing, and operating IAM solutions. - Professional experience as a DevOps engineer in distributed, cross-functional teams. - Practical experience with data migration and system performance optimization. - Professional English proficiency.

Nice to have

- Experience with WebAuthn and passkeys, containerized applications, or zero-downtime deployment approaches. - German language skills.

Benefits and work setup

- Hybrid or remote work from Bulgaria, with listed locations in Plovdiv, Sofia, and Varna. - Flexible hours, a flexitime model, and 25 days of annual leave. - Listed benefits include private health insurance, meal vouchers, a company mobile phone, wellbeing support, and learning opportunities.