Cloud Integration Engineer

Primary Skillset: SAML, OIDC, SSO, IAM, RBAC, AWS
Secondary Skillset: Entra ID, Azure AD, Okta, Ping, OAuth, JWT, SCIM
Experience: 6 Plus
Requirement: Full-Time
Location: Hyderabad Work from Office

Company Description

At NStarX, we live by our mission: being the Lodestar to Success for enterprises navigating the rapidly evolving digital landscape. We build cutting-edge, production-ready platforms that integrate advanced AI, cloud-native architecture, and robust data engineering to solve complex business challenges at scale. If you thrive in a collaborative environment that values technical excellence, architectural ownership, and production-first innovation, NStarX is where your impact will shine.

ABOUT THE ROLE

You own authentication, authorization, and session handling for a multi-user enterprise AI application, integrating against the client’s corporate identity provider. This work sits on the delivery critical path.

WHAT YOU’LL DO

• Implement SSO/SAML authentication against an enterprise identity provider, working with the client’s IdP team on endpoints, metadata, and configuration.
• Build persona-based role-based access control and baseline user management.
• Implement robust session handling for authenticated multi-user access.
• Integrate application services with cloud platform services — secrets management, object storage, managed database.
• Support hardening of the identity layer alongside a security engineer.
• Troubleshoot integration issues across the boundary between our services and client-controlled infrastructure.

REQUIRED SKILLS AND EXPERIENCE

• 6+ years in cloud/backend integration engineering.
• Hands-on SAML 2.0 and/or OIDC implementation against a corporate IdP (Entra ID / Azure AD, Okta, Ping, or similar) — including the debugging, not just the happy path.
• RBAC design and implementation; session and token lifecycle management.
• Strong AWS service integration experience.
• Comfort working across an organizational boundary where you do not control the identity provider.

PREFERRED

• SCIM provisioning, entitlement propagation, or attribute-based access control.
• Integrating auth into a containerized microservice architecture.
• Security certification (AWS Security Specialty or equivalent).