Application Developer

We are working with a leading financial services organisation who are looking to engage a highly skilled Application Developer to support the build-out of modern, cloud-native identity and access management (IAM) capabilities.

This contract role is focused on developing secure identity APIs, event-driven workflows, and automation across Google Cloud Platform, supporting enterprise-scale identity lifecycle management and access orchestration.

You will work closely with cloud security, DevOps, platform, and application engineering teams to deliver scalable, secure identity services in a fast-paced, regulated environment., * Design and implement identity lifecycle workflows covering provisioning, de-provisioning, and orchestration

• Build secure, scalable RESTful APIs supporting identity, access, and governance use cases
• Integrate APIs with authentication and token services using OAuth2, OIDC, JWT, and federation standards
• Develop event-driven architectures using Pub/Sub to support asynchronous identity and access workflows
• Build cloud-native services using Cloud Run, Cloud Functions, GKE, or containerised workloads
• Implement Infrastructure as Code using Terraform for IAM, APIs, Pub/Sub topics, and permissions
• Support CI/CD pipelines, automated testing, and validation of IAM policies and API behaviour
• Troubleshoot identity, access, and API issues across distributed systems
• Collaborate with security teams on audits, compliance, and incident investigations
• Produce clear technical documentation and reusable components

• Strong experience building identity-focused APIs and workflows
• Hands-on experience with identity orchestration platforms (e.g. Auth0 Actions, Okta Workflows, WorkOS, SlashID)
• Strong programming skills in Python, Go, Java, or Node.js
• Solid understanding of event-driven architectures, Pub/Sub, and message processing patterns
• Proven experience with cloud-native development on GCP
• Good knowledge of Terraform or equivalent IaC tooling
• Experience with API gateways, service mesh, or reverse proxies
• Strong understanding of security-first design principles in enterprise environments

Nice to Have

• Experience with additional identity providers (Okta, Azure AD, Ping Identity)
• Exposure to Kubernetes (GKE, workload identity, RBAC)
• Experience with secrets management tools (Vault, Secret Manager)
• Familiarity with compliance frameworks such as SOC2, ISO 27001, or PCI