Senior Backend & Identity Engineer (Sovereign Deployment)

About the role

AFAQ AI is looking for a Senior Backend & Identity Engineer to design and operate a secure, regulated backend platform for sovereign wealth funds and other institutional investors. You will lead the integration of identity solutions and ensure the platform meets strict audit and compliance requirements.

Key responsibilities

• Implement OIDC/SAML SSO integration with a sovereign identity provider, enforcing MFA.
• Develop server‑side JWT verification, RBAC, and fund‑level access controls.
• Own the core backend monolith architecture and guide module implementation in Python.
• Design PostgreSQL schemas and object‑storage layouts for an encrypted data platform.
• Build workflow and report orchestration, as well as authentication modules.
• Define and maintain backup, restore, and disaster‑recovery procedures within a sovereign network.

Required profile

• Proven production experience with OIDC or SAML SSO integration (e.g., Okta, Azure AD, Keycloak).
• Hands‑on experience with server‑side JWT verification and RBAC at scale.
• Background in building backend monolith or modular monolith APIs using Python (FastAPI, Django) or TypeScript.
• Experience deploying applications in regulated environments with network segmentation, allow‑listed egress, or air‑gapped constraints.
• Familiarity with append‑only audit trails, immutable storage, and compliance frameworks such as SOC 2, ISO 27001, or PCI.

Required skills

• OIDC, SAML, SSO, MFA
• JWT, RBAC
• Python, FastAPI, Django
• TypeScript
• PostgreSQL
• Object storage design
• Workflow orchestration
• Backup & restore, disaster recovery
• Network segmentation, air‑gapped topology
• SOC 2, ISO 27001, PCI compliance