Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 57 days ago

Sr Software Development Engineer

BeyondTrust44 open roles

Where
Remote Canada
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSr Software Development EngineerBeyondTrust · Remote Canada

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on BeyondTrust's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. BeyondTrust postings stay open a median of 49 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 57 days ago

BeyondTrust median: 49 days open

The posting

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role

BeyondTrust is seeking a Senior Software Development Engineer to help build NHI Governance. NHI Governance is the Pathfinder Insights module that discovers, assesses, and remediates non-human identities — service principals, IAM users, access keys and secrets, workload identities, and AI agents — across Microsoft Entra ID, AWS, and on-premise environments. The system spans .NET 10 services over PostgreSQL; an inventory pipeline fed from governed Databricks lakehouse views; durable Temporal workflows (Python workers, a .NET gateway, protobuf contracts) that onboard, rotate, reduce access for, and decommission live customer credentials, with custody in BeyondTrust Password Safe and storage adapters for AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault; and Angular micro-frontends in the Insights console. It ships through GitOps to Amazon EKS in commercial and government environments.

You will own how NHI Governance connects to the systems it governs — Microsoft Entra ID, AWS IAM, and vault and PAM platforms including BeyondTrust Password Safe — end to end: the integration code and workflow activities, the least-privilege permissions customers grant us, the setup experience that explains them, the screens that expose them, and the real test environments that prove it all works.

What You’ll Do

  • Build and own integrations with Microsoft Graph (Entra ID), AWS IAM/STS, and vault and PAM platforms — Python workflow activities and .NET services that are idempotent, retry-safe, and compensable.
  • Own the per-feature permission matrix: exactly which Graph roles, IAM actions (with resource and condition scoping), and Password Safe permissions each feature needs. Keep it true as the code changes.
  • Build the guided setup assets customers run — an Entra setup script, an AWS CloudFormation quick-create, and Password Safe checklists with live verification — and the in-product checks that tell a customer what's missing and how to fix it.
  • Own the team's real test environments: Entra test tenants, AWS sandbox accounts, and Password Safe instances, plus the automation that mints, grants, sweeps, and verifies them with least privilege and no standing secrets.
  • Own the live end-to-end suites that run governance journeys against real tenants, and debug failures across the API, workflow, vendor API, and permission layers.
  • Ship the full stack for what you integrate: .NET APIs over PostgreSQL and the Angular micro-frontend screens for connectors, vault setup, and readiness.
  • Be the team's escalation point for opaque vendor failures — the uniform 401s and 403s whose real cause is in an audit log.

What You’ll Bring

  • Strong backend engineering in Python and C#/.NET — strong in one, working in the other. REST API design. PostgreSQL.
  • Hands-on Microsoft Entra ID administration as an engineer: app registrations and service principals, Microsoft Graph application permissions and admin consent, app ownership, managed identities, and federated credentials. You have debugged “why is this 403.”
  • AWS IAM in depth: cross-account roles and external ids, policy conditions and resource scoping, STS, Secrets Manager, and SSO/CLI profiles. Comfortable reading and writing Terraform and CloudFormation.
  • Experience automating credential lifecycle — creating, rotating, or revoking keys, client secrets, certificates, or vault secrets — with a sound instinct for blast radius.
  • Scripting fluency in PowerShell and bash; customers run our setup scripts.
  • Working TypeScript and Angular, enough to own a feature's screens in our module-federation micro-frontends.
  • Testing against real dependencies, including environment fixtures you set up and tear down yourself.
  • Comfortable in an AI-assisted codebase; reviews generated code critically, especially permission and IAM changes.

Nice To Have

  • PAM or vault platform administration: BeyondTrust Password Safe (managed systems, functional accounts, rotation plugins), HashiCorp Vault, Azure Key Vault.
  • Temporal or another durable workflow engine; Kafka.
  • Additional identity platforms (GCP service accounts, GitHub Apps, Okta).
  • Playwright or other browser end-to-end testing; Docker Compose local stacks.
  • GovCloud / FedRAMP experience.
  • Daily hands-on practice with agentic coding tools such as Claude Code.

Who You Are

  • Someone who enjoys making real systems actually work, not just compile.
  • Patient with vendor documentation, and good at writing the doc the next person needs.
  • Careful by default with privileged access.
  • A collaborator who owns problems end to end and shares what they learn.

Better Together

Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

About Us

BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.

BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.

Learn more at www.beyondtrust.com.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against BeyondTrust's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on BeyondTrust's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    BeyondTrust's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.