Bridgenext is a digital consulting services leader that helps clients innovate with intention and realize their digital aspirations by creating digital products, experiences, and solutions around what real people need. Our global consulting and delivery teams facilitate highly strategic digital initiatives through digital product engineering, automation, data engineering, and infrastructure modernization services, while elevating brands through digital experience, creative content, and customer data analytics services.

Don't just work, thrive. At Bridgenext, you have an opportunity to make a real difference - driving tangible business value for clients, while simultaneously propelling your own career growth. Our flexible and inclusive work culture provides you with the autonomy, resources, and opportunities to succeed. 

Bridgenext is looking for a talented and experienced Backend / Platform Engineer to join our team in Latin America. We are seeking an engineer with strong experience in Identity and Access Management (IAM), Kubernetes/containerization, Infrastructure as Code (Terraform), and modern software development.

The primary focus of this role will be access and identity management, with additional responsibilities across cloud infrastructure, backend engineering, CI/CD, troubleshooting, observability, and production support.

The ideal candidate is a strong communicator and collaborative team player who can work across application and platform boundaries. The candidate should be comfortable troubleshooting complex technical issues, supporting production deployments, contributing to technical decisions, and mentoring other engineers.

While experience with the specific access-management technologies used by the team is valuable, we are open to candidates with strong IAM and engineering fundamentals who demonstrate a strong willingness and ability to learn.

This position requires working during U.S. Central Time (CST) business hours and participating in a shared on-call rotation, including weekends. The new engineer will provide approximately two week 12-hour on-call shifts every four weeks, covering the 9:00 AM–9:00 PM ET onshore support window.

Responsibilities include, but are not limited to:

• Design, configure, maintain, and troubleshoot IAM solutions covering OIDC, SAML, SSO, identity federation, authentication, authorization, RBAC, access controls, and related access issues across multiple environments.
• Configure and support identity platforms such as Keycloak, including realms, clients, identity providers, authentication flows, role mapping, service accounts, and administrative APIs, with support for multi-tenant SaaS environments and tenant-specific identity integrations.
• Build, deploy, manage, and troubleshoot containerized workloads on Kubernetes, including Azure Kubernetes Service (AKS), covering deployments, configuration, networking, environment provisioning and platform reliability.
• Manage application secrets and credentials using Azure Key Vault and support secure cloud infrastructure.
• Create, maintain, and troubleshoot Terraform-based Infrastructure as Code for cloud and identity infrastructure, including environment provisioning, upgrades, and configuration changes.
• Design, develop, maintain, and troubleshoot backend services and APIs using JavaScript, TypeScript, or other modern programming languages.
• Work with microservices, distributed systems, GraphQL, REST, event-driven services, and relational databases as applicable.
• Create, maintain, and troubleshoot CI/CD workflows, automated testing, code-quality checks, and deployment validation.
• Investigate application and infrastructure issues using logs, metrics, traces, and observability tools, perform root-cause analysis, and drive issues through resolution.
• Participate in production support, on-call and deployment captain rotations, including maintaining operational runbooks and troubleshooting documentation.
• Collaborate with engineering, architecture, DevOps, QA, security, product, and support teams to deliver secure, reliable, and maintainable solutions.
• Participate in code reviews, technical design and architecture discussions, and contribute to engineering standards and continuous improvement.
• Take ownership of complex technical problems, mentor other engineers, share knowledge, and demonstrate strong communication, teamwork, and problem-solving skills.

Workplace:  This is a remote, full-time, long-term contracting role open to candidates in LATAM who are willing to support Central timezone hours.

Must Have Skills

• Strong understanding of IAM, authentication, authorization, and identity federation.
• Hands-on experience with OIDC and/or SAML, including SSO and IdP integrations.
• Strong experience with Kubernetes and containerization.
• Hands-on experience with Terraform / Infrastructure as Code.
• Strong programming experience with JavaScript/TypeScript, Node.js, or another transferable modern programming language.
• Experience with GraphQL and REST APIs and understanding event-driven architecture and Kafka.
• Strong troubleshooting and problem-solving skills, including log investigation and root-cause analysis.
• Experience with cloud-based applications and infrastructure.
• Understanding of microservices, distributed systems, and software architecture.
• Experience supporting production applications and deployments.
• Strong communication, collaboration, ownership, and accountability.
• Willingness to participate in on-call support, including weekends.

Nice to Have Skills

• Experience with Keycloak or similar identity platforms.
• Experience with Azure/AKS and Azure Key Vault.
• Experience with Apollo GraphQL, SQL/MSSQL, automated testing, or application security.
• Experience with tools such as GitHub Actions, Argo CD, or New Relic.
• Experience in logistics, transportation management, or multi-tenant SaaS environments.

Bridgenext is an Equal Opportunity Employer

#LI-CG1

#LI-REMOTE