Senior Software Engineer, Identity & Access Discovery

Keeper Security is a cybersecurity software company that provides zero-knowledge and zero-trust solutions, including privileged access management. The company is seeking a Senior Software Engineer to lead backend development for Discovery capabilities, building services, data pipelines, integrations, and secure workflows that identify and manage privileged identities and infrastructure across enterprise environments.

Responsibilities:

• Design and develop the Python discovery engine that runs on customer-deployed gateways, and the Java/Kotlin cloud services that store and serve discovered data
• Build systems that discover privileged accounts, service accounts, keys, machines and related identity data across Active Directory, cloud IAM, databases and endpoints
• Solve identity correlation and reconciliation challenges, including determining when accounts discovered across multiple systems represent the same principal
• Build incremental re-scan and state-reconciliation capabilities that maintain an accurate view of customer environments without accumulating duplicate or stale data
• Build the test coverage and diagnostic tooling that let us trust code we can't debug in the field: unit, integration and automated tests, plus logging and error reporting good enough to root-cause an issue from a customer's logs alone
• Design discovery workflows that operate safely inside customer production networks, respecting API limits, limiting blast radius and remaining resilient to partial failures across large environments
• Develop secure data-processing workflows that operate within Keeper’s zero-knowledge architecture and protect discovered data throughout collection, transmission and storage
• Collaborate with Product, QA and other PAM engineers on technical design, testing, troubleshooting and delivery of Discovery features
• Use AI-assisted tools such as Claude, ChatGPT, GitHub Copilot or similar platforms to support development, debugging, research and documentation

Requirements:

• • 8+ years of professional software development experience, with a strong focus on backend systems
• • Strong Python experience with Python is the primary language of Keeper's Discovery engine
• • Working proficiency in Java or Kotlin for backend services, plus enough comfort in TypeScript/React to make changes in our administrative interface when needed
• • Strong experience with distributed systems, APIs and data-processing pipelines, including systems that must run reliably in environments you don't control
• • Hands-on experience with Active Directory and/or LDAP
• • Working knowledge of at least one major cloud IAM model, such as AWS IAM and Organizations, Microsoft Entra ID or GCP IAM
• • Strong knowledge of secure software development practices, authentication, authorization and encryption
• • Bachelor's degree in Computer Science, Engineering or a related field, or equivalent practical experience
• • Strong data modeling instincts, ideally including graph or relationship-oriented models
• • Due to this role's involvement in GovCloud and FedRAMP environments, qualified candidates must be a U.S. Person, defined as a U.S. citizen or lawful permanent resident
• • Experience developing Privileged Access Management, identity security or cybersecurity products
• • Experience with identity discovery, account discovery, asset inventory or similar infrastructure discovery systems
• • Experience with containerized or cloud-native applications
• • Experience developing high-scale enterprise SaaS products