Staff Software Engineer, Privileged Access Management (PAM) / Password Manager (PWM) - India

All roles at JumpCloud® are Remote unless otherwise specified in the Job Description.

About JumpCloud®

JumpCloud® is the AI-powered unified IT management platform designed to secure the modern workforce. By consolidating identity, device, and access management, JumpCloud provides intelligent, secure IT that scales from human users to autonomous AI agents. We help organizations around the globe eliminate complexity and turn AI risk into an optimized advantage, ensuring the right people and agents have secure access to the right resources at all times.

JumpCloud is Intelligent, Secure IT.

Position Overview

We are seeking a Staff Software Engineer with 12+ years of experience to serve as a technical anchor, system architect, and engineering catalyst for our core platform. In this high-impact role, you will define macro-architectural strategy, author and pitch technical visions to cross-functional leaders, and anchor engineering teams in executing scalable, highly secure microservices. You will blend deep hands-on expertise in .NET, Go, and PAM solutions with strategic leadership in AI-driven development and modern release engineering.

Architectural Leadership & Executive Pitching:

• Architectural Ownership: Own the end-to-end technical vision and architectural decisions for high-throughput, highly available microservices and multi-platform solutions.

• Technical Anchoring: Serve as the primary technical anchor across multiple engineering squads—establishing engineering standards, resolving complex system trade-offs, and mentoring senior engineers.

• Technical Pitches & RFCs: Craft and deliver compelling technical pitches, Architecture Decision Records (ADRs), and RFCs to convince executive leadership, Product, and Infrastructure partners on strategic platform investments.

• Cross-Functional Alignment: Translate complex business objectives into clear, scalable technical roadmaps while balancing velocity, technical debt, and system stability.

Core Systems & Security Engineering

• Platform Development: Architect and write high-performance production code using C#, .NET (ASP.NET Core / ABP Framework), Go, TypeScript, and gRPC.

• Privileged Access Management (PAM): Design and deploy enterprise PAM/IDAM architectures (CyberArk, BeyondTrust, HashiCorp Vault) and SCIM protocol integrations enforcing Zero Trust and Least Privilege principles.

• Multi-Platform Strategy: Collaborate with the cross-functional teams (e.g., data engineering team) to define data architecture strategy across relational (SQL Server, PostgreSQL) and NoSQL (DocumentDB) platforms; across environments and similarly collaborative with the infrastructure teams to have better infrastructure strategy in place that targets towards cost-saving on a long-term basis.

• Problem solving & Troubleshooting: Active participation in the incident management process and contributing PIRs, taking ownership/accountability for a quick turn-around to resolve the incident.

Delivery Automation & AI Strategy:

• CI/CD & Quality Rigor: Champion deployment automation across Origin CI, Kargo, and WoK, ensuring comprehensive unit, functional, Playwright E2E, and Performance, Scalability, and Reliability (PSR) testing.

• AI Framework Governance: Pioneer spec-driven AI development by championing the BMAD framework to standardize, govern, and scale AI-assisted coding (Cursor, Claude Code, Copilot) and reusable skill libraries.

Required Qualifications:

• Experience: 12+ years of progressive software development experience, with a proven track record operating as a Staff Engineer, Principal Engineer, or Lead Architect in enterprise product environments.

• Architectural Mastery: Demonstrated history of making company-level architectural decisions, pitching complex technical solutions to non-technical stakeholders, and anchoring multi-team initiatives.

• Core Tech Stack: Advanced proficiency in C#, .NET (ABP framework), Go, gRPC, TypeScript, and database engineering (PostgreSQL / DocumentDB).

• Security & Infrastructure: Hands-on expertise in Privileged Access Management (PAM), SCIM, AWS/GCP cloud platforms, and Kubernetes.

• Testing & Release: Expertise in continuous delivery pipelines, PSR non-functional testing, and automated E2E testing frameworks (Playwright).

**Where …