Back End Engineer – Identity & Access Management (IAM) - Madagascar
JOB DESCRIPTION Back End Engineer – Identity & Access Management (IAM) Information Technology |
Ref.: DIA-2026-IT-04 |
■ Location | ■ Seniority | ■ Estimated duration | ■ Contract |
Madagascar – Remote | Senior – 5 to 10 years | 5 months to 1 year | To be confirmed |
ABOUT THE PROJECT
Our client, an international multi-entity group, is building a security-critical, privacy-first information system on its own on-premise infrastructure: hardened mobile and desktop applications, hardware-key authentication, legally isolated data for each group entity, and self-hosted finance and AI capabilities.
The programme is delivered by a senior, multi-disciplinary team working in two-week agile sprints, with compartmentalised access and a strong culture of security by design.
WORK ARRANGEMENT
This is a remote position: you will work from home, from Madagascar. No attendance at DI-Africa's offices is required.
THE ROLE
Own the identity and access layer of the platform: enterprise identity provider, zone-based claims, hardware-key authentication on web and mobile, device binding and session revocation.
KEY RESPONSIBILITIES
● Configure and extend the Authentik identity provider (OIDC) and its zone-based claims.
● Implement WebAuthn / FIDO2 authentication over NFC and USB, on web and mobile.
● Build device binding, session revocation and account-freeze mechanisms.
● Design RBAC across several legal entities with strict non-impersonation between zones and tenants.
● Manage seller and partner profiles within the access model.
TECHNICAL ENVIRONMENT
● Go, Rust and/or Python, SQL, Shell.
● Authentik, OIDC, JWT claims.
● WebAuthn / FIDO2 (NFC + USB).
PROFILE
Location | ● Based in Madagascar, working remotely from home. |
Experience | ● Senior – 5 to 10 years of relevant professional experience. |
Required skills | ● Enterprise identity provider (IdP) implementation. ● Zone / tenant isolation and non-impersonation. ● WebAuthn on web and mobile. ● Multi-entity RBAC. |
Nice to have | ● NFC WebAuthn edge cases on GrapheneOS. |
Languages | ● Professional English required; French is a plus. |
Ways of working | ● Work independently on software development tasks. ● Write clean, straightforward, efficient code that meets acceptance criteria and specifications. ● Cover code with unit, property and integration tests where applicable. ● Write code documentation. ● Willingness to handle hardware: YubiKeys, HSMs, air-gapped machines, phone flashing. ● Comfortable working with compartmentalised access. ● Proactive, requiring minimal supervision or mentoring. ● Proactive in identifying potential problems and implementing solutions. ● Efficient time management and respect of deadlines. ● Practical experience with agile software development methods. |
HR Consulting · www.di-africa.com
Confidential – For recruitment purposes only
About DI-Africa
DI-Africa supports industrial, mining, oil & gas and services groups with their hiring across Africa: Employer of Record (EOR), recruitment & sourcing, payroll & compliance, immigration & work permits, international mobility, health insurance.
Our recruitment process
- Online application — acknowledgement within 48 hours.
- DI-Africa interview — conversation with a recruitment consultant.
- Client interview — short-list presented to the client.
- Offer & onboarding — we support you until your first day.