Software Engineer

Role Summary

As a Software Engineer II (SE2) within the Identity team at Sophos, you will play a pivotal role in building and evolving our ITDR (Identity Threat Detection and Response) product. This position is ideal for an experienced engineer capable of independently designing features, influencing technical decisions, and upholding high engineering standards.

Key Responsibilities

• Backend Development: Design, develop, test, and maintain scalable backend services and APIs using Go (Golang), with a focus on security and reliability in distributed cloud environments.
• Identity Services: Build and enhance critical identity features including authentication, authorization, user lifecycle management, token handling, and policy enforcement.
• System Architecture: Contribute to system design discussions, helping shape service architecture and implementation strategies for microservices.
• Code Quality: Write clean, maintainable code following secure development best practices; actively participate in rigorous code reviews.
• Cross-Functional Collaboration: Work closely with Product Managers, Architects, Security teams, SREs, and other engineering groups to deliver robust identity solutions.
• Ops & Support: Troubleshoot production issues, debug complex problems, and participate in on-call rotations as required by service needs.

What You Will Bring

• Bachelor's degree in Computer Science/Engineering or equivalent practical experience.
• Experience Level: 2-4 years of professional backend software engineering experience (SE2-level).
• Technical Stack: Hands-on expertise developing production systems using Go (Golang); solid understanding of distributed systems, APIs, concurrency, and performance tuning.
• Infrastructure: Familiarity with containerization (Docker) and orchestration (Kubernetes).

Differentiators & Preferred Skills

• Strong foundation in data structures, algorithms, and core software engineering principles.
• Domain experience in Identity, Authentication, or Access Management is highly valued.
• Familiarity with Microsoft Entra (formerly Azure AD) or similar identity providers.
• Expertise in modern identity protocols: OAuth2, OpenID Connect, SAML, JWTs.
• Experience designing and operating highly available, low-latency microservices.
• Knowledge of security best practices, threat modelling, and secure coding techniques (OWASP).
• Skill with CI/CD pipelines, Infrastructure-as-Code (IaC), and observability tools (metrics, logging, tracing).