Back End Engineer – Identity & Access Management (IAM) - Madagascar
JOB DESCRIPTION Back End Engineer – Identity & Access Management (IAM) Information Technology |
Ref.: DIA-2026-IT-04 |
■ Location | ■ Seniority | ■ Estimated duration | ■ Contract |
Madagascar – Remote | Senior – 5 to 10 years | 5 months to 1 year | To be confirmed |
ABOUT THE PROJECT
Our client, an international multi-entity group, is building a security-critical, privacy-first information system on its own on-premise infrastructure: hardened mobile and desktop applications, hardware-key authentication, legally isolated data for each group entity, and self-hosted finance and AI capabilities.
The programme is delivered by a senior, multi-disciplinary team working in two-week agile sprints, with compartmentalised access and a strong culture of security by design.
WORK ARRANGEMENT
This is a remote position: you will work from home, from Madagascar. No attendance at DI-Africa's offices is required.
THE ROLE
Own the identity and access layer of the platform: enterprise identity provider, zone-based claims, hardware-key authentication on web and mobile, device binding and session revocation.
KEY RESPONSIBILITIES
● Configure and extend the Authentik identity provider (OIDC) and its zone-based claims.
● Implement WebAuthn / FIDO2 authentication over NFC and USB, on web and mobile.
● Build device binding, session revocation and account-freeze mechanisms.
● Design RBAC across several legal entities with strict non-impersonation between zones and tenants.
● Manage seller and partner profiles within the access model.
TECHNICAL ENVIRONMENT
● Go, Rust and/or Python, SQL, Shell.
● Authentik, OIDC, JWT claims.
● WebAuthn / FIDO2 (NFC + USB).
PROFILE
Location | ● Based in Madagascar, working remotely from home. |
Experience | ● Senior – 5 to 10 years of relevant professional experience. |
Required skills | ● Enterprise identity provider (IdP) implementation. ● Zone / tenant isolation and non-impersonation. ● WebAuthn on web and mobile. ● Multi-entity RBAC. |
Nice to have | ● NFC WebAuthn edge cases on GrapheneOS. |
Languages | ● Professional English required; French is a plus. |
Ways of working | ● Work independently on software development tasks. ● Write clean, straightforward, efficient code that meets acceptance criteria and specifications. ● Cover code with unit, property and integration tests where applicable. ● Write code documentation. ● Willingness to handle hardware: YubiKeys, HSMs, air-gapped machines, phone flashing. ● Comfortable working with compartmentalised access. ● Proactive, requiring minimal supervision or mentoring. ● Proactive in identifying potential problems and implementing solutions. ● Efficient time management and respect of deadlines. ● Practical experience with agile software development methods. |
HR Consulting · www.di-africa.com
Confidential – For recruitment purposes only
À propos de DI-Africa
DI-Africa accompagne les groupes industriels, miniers, pétroliers et de services dans leurs recrutements en Afrique : portage salarial (EOR), recrutement & sourcing, paie & conformité, immigration & permis de travail, mobilité internationale, assurance santé.
Notre process de recrutement
- Candidature en ligne — accusé de réception sous 48 h.
- Entretien DI-Africa — échange avec un consultant recrutement.
- Entretien client — présentation de la short-list au client.
- Offre & intégration — nous vous accompagnons jusqu'à la prise de poste.
Ce poste vous correspond ?
Votre candidature est traitée par l'équipe Recrutement DI-Africa.
Postuler maintenant Toutes les offres