Senior Software Engineer (Authentication & Authorization (OAuth/OIDC)

Conga | Software

1h 8m ago

On-site

Full Time

Bulgaria

Title: Senior Software Engineer (Authentication & Authorization (OAuth/OIDC) Location: Bulgaria

A career that’s the whole package!

At Conga, we’ve built a community where our colleagues can thrive. Here you’ll find opportunities to innovate and support growth through individual and team development, all within an environment where every voice is heard.

Conga lines up commercial operations so companies run as connected, smarter businesses. By unifying the people and processes that drive commerce, Conga aligns pricing, quoting, contracting, rebates, and communications so teams stay in sync and buyers keep moving forward. The result is trusted decisions, consistent buyer experiences, and profitable growth. More than 10,000 customers worldwide, including over 50% of the Fortune 100®, trust Conga when commercial complexity is high and global impact is on the line.

Opportunity Overview

This Senior Software Engineer role sits within Conga’s B2B Platform Engineering, Core Services organization. It focuses on building security, identity, access management, and reporting capabilities that are foundational to all Conga B2B products.

You will also be a key technical contributor to the Advantage Platform effort, building secure and reusable integration patterns between B2B and Advantage. This role is for a hands-on engineer who enjoys working deep in identity protocols and token flows, and who wants to build shared security services used across Conga’s platform ecosystem.

What You’ll Do

Design, build, and maintain platform-level identity services, including authentication and authorization systems.

Implement and extend OAuth 2.0, OIDC, SAML, and token-based authentication flows, including token issuance, validation, refresh, and revocation.

Build and evolve role and permission models and policy-driven access control used across multiple products.

Develop external and internal facing reports used for adoption, consumption, and monitoring the platform.

Turn architectural direction and technical designs into secure, production-ready implementations.

Develop RESTful APIs and service contracts that multiple product teams consume.

Implement tenant-context propagation and service-to-service authentication and authorization across distributed systems.

Build secure, scalable, and highly available services that meet strict security, performance, and reliability requirements.

Work with the Advantage Platform team to implement secure integration patterns between B2B and Advantage, including shared authentication capabilities.

Work with Architecture and Product Security to apply security patterns, standards, and controls, and to address threat modeling findings in code.

Contribute to an Agile, CI/CD-based environment with a focus on automation, testability, and observability.

Participate in code reviews and design reviews, sharing secure coding practices with teammates.

Investigate and resolve incidents in security-sensitive services, including root cause analysis and durable fixes.

Help build reusable authentication and authorization capabilities that support AI-driven product experiences.

What We’re Looking For

Strong hands-on experience building and operating identity and access management services in enterprise SaaS environments.

Deep, practical knowledge of OAuth 2.0, OIDC, SAML, JWT and other token-based authentication, and common flows such as authorization code with PKCE and client credentials.

Experience implementing role-based and permission-based access control, and policy-driven authorization models.

Experience building backend systems in a modern language (for example Java, C#, Python, Scala, TypeScript, or Rust).

Strong experience designing and implementing RESTful APIs with multiple consumers.

Solid experience with SQL and the data stores that back platform services.

Working knowledge of authentication flows, multi-tenancy, and tenant-context handling in distributed systems.

Strong understanding of software design patterns, distributed systems, and platform tradeoffs.

Solid grasp of secure coding practices and common identity-related vulnerabilities, such as token misuse, session handling flaws, and privilege escalation.

Experience delivering features end to end, from design through testing, deployment, and production support.

Clear written and verbal communication, with the ability to document technical decisions and collaborate with Architecture, Security, Product, and other engineering teams.

Preferred / Bonus Experience

Experience with identity providers or platforms such as Microsoft Entra ID (Azure AD), Okta, Auth0, Keycloak, or Ping.

Experience with SCIM, federation, SSO, and MFA implementations.

Experience with PaaS offerings (Azure, AWS, GCP) and containerized, orchestrated environments (Docker, Kubernetes).

Experience with Azure SQL Server.

Familiarity with cloud-native security patterns, mTLS, and service-to-service communication.

Exposure to DevOps and SRE practices for platform services (monitoring, alerting, automation).

Experience designing, developing, and maintaining PowerBi reports.

Familiarity with Databricks.

What This Role Enables at Conga

Hands-on ownership of security-critical identity and access capabilities that support the B2B portfolio.

Secure integration between the B2B and Advantage platforms.

Reusable authentication and authorization patterns for cross-platform product and AI experiences.

Greater consistency in identity, tenant context, permissions, and service-to-service access across Conga platforms.

Impact across multiple product teams and engineering organizations.

Close alignment with Architecture and long-term platform strategy.

A growth path toward staff-level or technical leadership roles.

A chance to shape Conga’s security posture, engineering standards, and platform foundations.

Did we pique your interest? 

If this sounds like the kind of job you would love in the kind of environment where you would thrive, please click apply. We'd love to hear from you! 

Preferred Resume Format

We accept resumes in any format, we suggest using PDF or plain text. These formats help ensure that your resume’s formatting remains intact, making it easier for our recruiters to review your application promptly.

Don’t meet every requirement for the role?

Studies have shown that women and members of ethnic minorities are less likely to apply to jobs unless they meet every single qualification. At Conga we are dedicated to building a diverse, inclusive, and authentic workplace, so if you’re excited about this role but your experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You just might be the right candidate for this or other roles.

Additional Information

Conga is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. We understand interviewing can be stressful for those with disabilities. If reasonable accommodation is needed to allow you to show us your best self, please let your recruiter know as soon as possible. All your information will be kept confidential according to EEO guidelines. Conga is not open to third party solicitation or resumes for our posted FTE positions. Resumes received from third party agencies that are unsolicited will be considered complimentary.

Conga's Applicant Privacy Statement

The information you provide during the application process will be used in accordance with Conga’s Applicant Privacy Statement ( ). By submitting your application, you acknowledge and agree to the terms outlined in this privacy statement.

Required Skills

oauthopenid_connectsamljwtsql

Required Languages

🇬🇧 English