Application Developer

We are looking for an experienced and motivated IAM Application Developer – Google Cloud, APIs & Pub/Sub to join the Identity and Access Management technology team in Sheffield.

This role focuses on developing secure, scalable identity and access workflows across Google Cloud Platform, integrating identity services with custom APIs, Pub/Sub pipelines, and cloud-native applications.

Job Description:

The successful candidate will work closely with Technical Leads, Cloud Security, DevOps, Application Engineering, and IAM teams to design and implement robust identity automation, lifecycle workflows, and secure service integrations that support enterprise-level cloud and Identity operations.

Key Responsibilities

Identity Orchestration

• Design and implement identity flows for provisioning, deprovisioning, and identity lifecycle events.
• Integrate Cloud Identity services, ServiceNow, and internal applications to streamline identity provisioning and lifecycle management.
• Build policy-based orchestration workflows for adaptive authentication and context-aware access using standards such as Open Policy Agent (OPA).
• Support secure identity governance and automation across enterprise systems.

API Development:

• Design, build, secure, test, and maintain RESTful APIs and backend services supporting identity, provisioning, and governance workflows.
• Integrate APIs with authentication services for token validation, user sessions, and application-level authorization.
• Build and document internal SDKs, middleware, and shared libraries to promote consistent IAM logic across services.
• Ensure API solutions meet requirements for security, performance, reliability, resilience, and observability.

API-to-Pub/Sub Event Processing:

• Develop pipelines in which API events publish to Google Cloud Pub/Sub for asynchronous workflows, including:Automated identity lifecycle tasks
• Access review event triggers
• Logging and audit forwarding
• Security anomaly detection
• Build Cloud Functions, Cloud Run microservices, or containerized services to process Pub/Sub messages.
• Implement robust event-processing patterns, including retries, idempotency, dead-letter queues, structured logging, and monitoring.
• Troubleshoot message-processing failures, data issues, and distributed workflow problems.

Automation and Infrastructure as Code:

• Build and maintain Terraform modules for IAM, API services, Pub/Sub topics, workloads, and permissions.
• Automate the deployment and validation of identity and access configurations through CI/CD pipelines.
• Implement automated testing for IAM policies, APIs, integrations, and event-driven workflows.
• Support secure and repeatable deployment practices across cloud environments.

Support and Collaboration:

• Troubleshoot identity, access, API, and event-processing issues across distributed systems.
• Provide technical guidance on secure API design, IAM best practices, identity workflows, and cloud security.
• Work with security teams during audits, compliance reviews, vulnerability assessments, and incident investigations.
• Collaborate with engineering, operations, architecture, DevOps, and third-party technology teams.

Required Skills & Experience:

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
• Proven experience in application development, IAM engineering, cloud development, or identity platform engineering.
• Strong programming experience in Python, Go, or Node.js.
• Hands-on experience designing and deploying cloud-native APIs using Cloud Run, Cloud Functions, GKE, or comparable services.
• Strong experience with Google Cloud Platform and Google Cloud Pub/Sub.
• Deep understanding of event-driven architectures, asynchronous processing, and workflow automation.
• Strong knowledge of OAuth 2.0, OIDC, JWT, SAML, and identity federation patterns.
• Experience with identity orchestration platforms such as Auth0 Actions, Okta Workflows, WorkOS, SlashID, or equivalent platforms.
• Proficiency in Terraform or an equivalent Infrastructure-as-Code tool.
• Experience with API gateways, reverse proxies, service mesh technologies, or cloud-native networking.
• Understanding of API security, authentication, authorization, token validation, and secure service-to-service communication.
• Experience implementing retries, idempotency, dead-letter queues, structured logging, monitoring, and observability.
• Strong analytical, debugging, root-cause analysis, communication, and stakeholder-management skills.
• Experience working in Agile and fast-paced technology environments.

Preferred Skills:

• Experience with React or full-stack application development.
• Google Professional Cloud Security Engineer or Google Professional Cloud Architect certification.
• Experience with Okta, Microsoft Entra ID/Azure AD, Ping Identity, or other identity providers.
• Familiarity with Kubernetes, GKE RBAC, workload identity, and containerized services.
• Experience with Google Secret Manager, HashiCorp Vault, or other secrets-management platforms.
• Knowledge of SOC 2, ISO 27001, PCI DSS, HIPAA, or comparable compliance frameworks.
• Experience working in banking, financial services, or another regulated environment