Staff Software Engineer, Privileged Access Management (PAM) / Password Manager (PWM) - JumpCloud

About JumpCloud

JumpCloud® is the AI-powered unified IT management platform designed to secure the modern workforce. By consolidating identity, device, and access management, JumpCloud provides intelligent, secure IT that scales from human users to autonomous AI agents. We help organizations around the globe eliminate complexity and turn AI risk into an optimized advantage, ensuring the right people and agents have secure access to the right resources at all times.

Position Overview

We are seeking a Staff Software Engineer with 12+ years of experience to serve as a technical anchor, system architect, and engineering catalyst for our core platform. In this high-impact role, you will define macro-architectural strategy, author and pitch technical visions to cross-functional leaders, and anchor engineering teams in executing scalable, highly secure microservices. You will blend deep hands-on expertise in .NET, Go, and PAM solutions with strategic leadership in AI-driven development and modern release engineering.

Key Responsibilities

Architectural Leadership & Executive Pitching

• Architectural Ownership: Own the end-to-end technical vision and architectural decisions for high-throughput, highly available microservices and multi-platform solutions.
• Technical Anchoring: Serve as the primary technical anchor across multiple engineering squads—establishing engineering standards, resolving complex system trade-offs, and mentoring senior engineers.
• Technical Pitches & RFCs: Craft and deliver compelling technical pitches, Architecture Decision Records (ADRs), and RFCs to convince executive leadership, Product, and Infrastructure partners on strategic platform investments.
• Cross-Functional Alignment: Translate complex business objectives into clear, scalable technical roadmaps while balancing velocity, technical debt, and system stability.

Core Systems & Security Engineering

• Platform Development: Architect and write high-performance production code using C#, .NET (ASP.NET Core / ABP Framework), Go, TypeScript, and gRPC.
• Privileged Access Management (PAM): Design and deploy enterprise PAM/IDAM architectures (CyberArk, BeyondTrust, HashiCorp Vault) and SCIM protocol integrations enforcing Zero Trust and Least Privilege principles.
• Multi-Platform Strategy: Collaborate with cross-functional teams (e.g., data engineering) to define data architecture strategy across relational (SQL Server, PostgreSQL) and NoSQL (DocumentDB) platforms, and collaborate with infrastructure teams to optimize long-term cost-saving infrastructure strategies.
• Problem Solving & Troubleshooting: Actively participate in the incident management process, contribute Post-Incident Reviews (PIRs), and take ownership of quick turn-around resolutions.

Delivery Automation & AI Strategy

• CI/CD & Quality Rigor: Champion deployment automation across Origin CI, Kargo, and WoK, ensuring comprehensive unit, functional, Playwright E2E, and Performance, Scalability, and Reliability (PSR) testing.
• AI Framework Governance: Pioneer spec-driven AI development by championing the BMAD framework to standardize, govern, and scale AI-assisted coding (Cursor, Claude Code, Copilot) and reusable skill libraries.

Required Qualifications

• Experience: 12+ years of progressive software development experience, with a proven track record operating as a Staff Engineer, Principal Engineer, or Lead Architect in enterprise product environments.
• Architectural Mastery: Demonstrated history of making company-level architectural decisions, pitching complex technical solutions to non-technical stakeholders, and anchoring multi-team initiatives.
• Core Tech Stack: Advanced proficiency in C#, .NET (ABP framework), Go, gRPC, TypeScript, and database engineering (PostgreSQL / DocumentDB).
• Security & Infrastructure: Hands-on expertise in Privileged Access Management (PAM), SCIM, AWS/GCP cloud platforms, and Kubernetes.
• Testing & Release: Expertise in continuous delivery pipelines, PSR non-functional testing, and automated E2E testing frameworks (Playwright).

Additional Requirements

• Location: Must be located in and authorized to work in India.
• On-Call: Expectation to participate in on-call shifts and respond promptly to alerts.
• Language: Fluent written and spoken English is required for all internal business and interviews.