Jump Cloud

Senior Software Engineer, ISPM - India

Apply Now

Job Description

 

 

 



The Problem Statement: The Invisible Identity Perimeter

Modern enterprises no longer have a physical perimeter; identity is the new boundary. However, this boundary is currently fragmented, opaque, and highly volatile. IT Admins today are drowning in "Identity Debt"—stale accounts, over-privileged permissions, and hidden misconfigurations that remain invisible until they are exploited.

The industry is reactive. At JumpCloud, we believe security should be proactive. The challenge is to build a platform that doesn't just manage identities but actively audits, predicts, and remediates risks across millions of objects in real-time. We need to turn "Trust Nothing, Verify Everything" from a slogan into a high-scale, event-driven reality

 


The Opportunity: Founding the ISPM Platform

As a Senior Software Engineer for our newly formed Identity Security Posture Management (ISPM) team, you will play a foundational role in building a proactive, AI-driven security discipline from the ground up. You are a master of your craft in Go, capable of navigating complex event-driven architectures and ensuring our stream-processing pipelines are both resilient and performant.

You will own the execution of critical ISPM workstreams, turning high-level designs into robust, production-ready code while mentoring mid-level engineers on best practices.


What you’ll be doing:
  • Technical Leadership & Architecture: Lead the high-level architecture and low-level design of new Go microservices. You will break down complex requirements, mentor other engineers, and collaborate with senior technical leaders to manage technical debt and feature detailing.
  • Build and Launch Foundational ISPM Services: Within the first 6–12 months, design, code, test, and deploy the initial full-stack services for the new ISPM product to the production environment, ensuring high performance and stability.
  • Deliver Core Security Features: Collaborate closely with Product and UX teams to define and deliver the first iterations of features that identify misconfigurations, over-privileged accounts, and stale identities.
  • Establish Operational Excellence: Take ownership of the deployment lifecycle by establishing robust CI/CD pipelines and comprehensive health monitoring/telemetry strategies for the newly built services.
  • Prepare the Runway for ML:  Utilise Machine learning concepts to harness the inhouse data to build solutions for IT Admins.  
  • Strategy & Collaboration: Partner with the Platform Engineering team to define data contracts. You will help shape the future of our Identity Management services roadmap by participating in planning conversations with Product Managers

  • We’re looking for:
  • 6-8+ years of backend software development experience.

  • Expert Proficiency in Go (Golang): You understand concurrency patterns, memory management, and how to build services that scale.

  • Event-Driven Architecture: Proven experience building systems that consume and produce messages via Kafka, Kinesis, or SQS.

  • Stream Processing: Experience with Apache Flink or Spark Streaming.

  • Database Fluency: Experience modeling data in both Relational (Postgres) and NoSQL (Redis/DynamoDB) stores.

  • Cloud Native: Deep experience with AWS services (Lambda, ECS/EKS) and Infrastructure-as-Code (Terraform).

  • ML Infrastructure Interest: You don't need to be a Data Scientist, but you have a working interest in MLOps or Model Serving. You are excited about building the "pipes" that put ML models into production.

  • Distributed Systems Expertise: building scalable, fault tolerant systems handling large data sets


  • Bonus Points:
  • Prior experience with Security/Risk Posture Management  tools.
  • SOC / SIEM Empathy: Experience building tools for Security Operations Centers. You understand concepts like "False Positive Fatigue," "Triage," and "Incident Context."
  • Security & Identity: Exposure to authentication standards (OAuth, OIDC, SAML) or experience building logic for Fraud/Risk engines.
  • Integrations: Experience integrating with third-party threat feeds (e.g., GeoIP, IP Reputation)