# Senior Software Engineer, Admin & IAM **Company:** [Mural](https://scaleengineer.com/companies/mural) Senior Software Engineer on Mural's Admin & IAM team responsible for designing and shipping end-to-end identity and access management systems, including authentication, authorization, SSO, MFA, and enterprise administration experiences. This role requires 4+ years of full-stack production software experience with strong expertise in Node.js/TypeScript backend systems and React frontends, combined with domain knowledge in IAM concepts and B2B SaaS platform design. **Role:** Senior Software Engineer **Seniority:** Senior **Locations:** Argentina Remote **Remote:** yes **Salary:** 150000–200000 USD [Apply](https://jobs.ashbyhq.com/mural/ab1be58a-fa75-48bd-90c1-8bdfac4336d2) Canonical: https://scaleengineer.com/jobs/mural/senior-software-engineer-admin-iam --- ## Responsibilities - Design and Ship Core Identity Systems: Build and evolve authentication and authorization systems, Single Sign-On (SSO), Multi-Factor Authentication (MFA), user provisioning via SCIM, session management, and the core permission model that powers roles and access control across Mural's platform. This includes designing scalable identity primitives and implementing security best practices throughout the infrastructure. - Build Enterprise Administration Experiences: Design and implement the enterprise administration interface that company and workspace administrators use daily to manage organizations, configure user access, handle content administration, manage billing, and maintain internal admin tooling. Ensure these surfaces are intuitive, secure, and support complex organizational structures. - Lead End-to-End Technical Initiatives: Own complex technical projects from initial design through implementation, rollout, and ongoing operational support. Drive decisions around technology choices, architecture patterns, and platform standards while maintaining accountability for security, quality, performance, and reliability metrics. - Collaborate on Cross-Functional Design: Partner closely with Product, Design, Security, and Infrastructure teams to design secure and intuitive access and administration experiences. Participate in technical design discussions, provide expert input on security implications, and ensure alignment across organizational functions. - Mentor and Support Engineering Team: Provide technical leadership through thoughtful code reviews, architectural guidance, and hands-on mentorship of team members. Help teammates grow technical skills and decision-making capabilities while continuously improving team processes and engineering best practices. - Build Observable and Maintainable Solutions: Develop flexible, observable, and maintainable backend systems and frontend interfaces with strong emphasis on logging, monitoring, and alerting. Implement solutions that are easy to debug, scale, and maintain while leveraging AI-driven development practices to improve code quality and system understanding. - Prototype and Implement Platform Features: Serve as technical expert in prototyping, implementing, and maintaining Admin and IAM platform capabilities. Balance rapid experimentation with long-term maintainability, contributing to both greenfield initiatives and evolution of existing systems. ## Requirements ### education - {"name":"Computer Science Foundation","description":"Bachelor's degree in Computer Science, Software Engineering, or equivalent practical experience demonstrating mastery of core computer science fundamentals including data structures, algorithms, and system design principles."} ### technical - {"name":"Backend Systems Development","description":"4+ years of proven experience building and shipping production-grade backend systems and APIs using Node.js and TypeScript/JavaScript. Demonstrate deep understanding of asynchronous programming patterns, API design principles, error handling, and backend scaling challenges."} - {"name":"Frontend Development with React","description":"Hands-on production experience building user interfaces with React and modern frontend patterns including component design, state management, performance optimization, and accessibility considerations. Experience with React hooks and contemporary frontend tooling required."} - {"name":"Database Design and Optimization","description":"Strong experience with MongoDB or comparable NoSQL databases, including schema design, query optimization, indexing strategies, and working with document-oriented data models. Understanding of when to apply relational versus document-oriented approaches."} - {"name":"Identity and Access Management Domain Knowledge","description":"Demonstrated experience with IAM concepts including authentication flows (OAuth 2.0, OpenID Connect), authorization models (RBAC, ABAC), roles and permissions systems, SSO implementation, SCIM provisioning, and session management security patterns."} - {"name":"Enterprise Administration Systems","description":"Experience building B2B SaaS configuration surfaces such as organization management dashboards, billing administration panels, user provisioning interfaces, and workspace configuration systems. Understanding of enterprise-grade permission models and multi-tenant architecture patterns."} - {"name":"AI-Assisted Development","description":"Comfort and pragmatism with incorporating AI tools into development workflows for improved productivity, code quality analysis, and system comprehension. Experience evaluating and integrating tools like GitHub Copilot or similar assistants into engineering practice."} ### experience - {"name":"Large-Scale Production Software Development","description":"Minimum 4+ years of professional experience building and shipping large-scale production software within agile engineering teams. Demonstrated track record of delivering complex features from conception through production deployment and operational support."} - {"name":"Rapid Technology Adoption","description":"Proven ability to quickly learn new technologies, platforms, frameworks, and technology stacks while maintaining high code quality standards. Experience getting productive rapidly in large, existing codebases and unfamiliar architectural patterns."} - {"name":"Iterative Project Delivery","description":"Track record of planning and delivering technical projects iteratively while balancing the competing priorities of development speed, code quality, and long-term maintainability. Experience working within agile methodologies and adapting to changing requirements."} - {"name":"Growth-Stage Environment Experience","description":"Experience working in fast-moving or growth-stage environments where requirements and priorities evolve rapidly. Demonstrated ability to adapt to changing business needs, scale systems as product demands grow, and work effectively in dynamic settings."} - {"name":"Cross-Functional Collaboration","description":"Proven ability to work effectively across product management, design, security, and infrastructure teams. Strong track record of influencing decisions, building consensus, and delivering solutions that serve multiple stakeholder needs."} ## Skills ### required - {"name":"Node.js and TypeScript","description":"Expert-level proficiency building production backend systems with Node.js and TypeScript/JavaScript, including async/await patterns, error handling, API design, and performance optimization."} - {"name":"React Frontend Development","description":"Strong hands-on experience building production user interfaces with React, including component architecture, state management, hooks, and modern frontend patterns that translate to intuitive user experiences."} - {"name":"MongoDB and NoSQL Database Design","description":"Practical experience designing and optimizing MongoDB schemas, writing efficient queries, implementing proper indexing strategies, and understanding document-oriented data model trade-offs versus relational databases."} - {"name":"System Design and Architecture","description":"Ability to design scalable, maintainable systems with consideration for performance, reliability, security, and observability. Experience with API design, microservices patterns, and architectural decision-making at scale."} - {"name":"Authentication and Authorization","description":"Hands-on experience implementing authentication mechanisms and authorization systems, including understanding of session management, token-based authentication, and secure credential handling practices."} - {"name":"Code Quality and Testing","description":"Commitment to writing testable code with appropriate unit test coverage, integration testing, and automated testing practices. Experience with testing frameworks and quality assurance principles."} - {"name":"Agile Software Development","description":"Experience working within agile methodologies, collaborating in sprint-based workflows, participating in code reviews, and contributing to continuous improvement of development processes."} ### preferred - {"name":"OAuth 2.0 and OpenID Connect","description":"Hands-on experience implementing or integrating OAuth 2.0 and OpenID Connect flows for single sign-on and third-party authentication scenarios in production applications."} - {"name":"SCIM Provisioning","description":"Experience building or integrating SCIM (System for Cross-domain Identity Management) provisioning systems for automated user lifecycle management across enterprise environments."} - {"name":"Role-Based Access Control (RBAC)","description":"Practical experience designing and implementing RBAC systems that scale to support complex organizational hierarchies, nested permissions, and enterprise-grade permission models."} - {"name":"Multi-Tenant SaaS Architecture","description":"Experience architecting and implementing multi-tenant SaaS platforms with proper data isolation, tenant-specific configuration, and scalability considerations for enterprise deployments."} - {"name":"Security Best Practices","description":"Understanding of security principles including secure credential storage, encryption standards, secure session management, prevention of common vulnerabilities (OWASP Top 10), and security-first design patterns."} - {"name":"Observability and Monitoring","description":"Experience implementing comprehensive logging, distributed tracing, metrics collection, and monitoring systems to enable debugging, performance analysis, and proactive issue detection."} - {"name":"AI-Assisted Development Tools","description":"Familiarity with GitHub Copilot, ChatGPT, or similar AI development assistants, with pragmatic approach to leveraging these tools for productivity gains and code quality improvement."} - {"name":"GraphQL or REST API Design","description":"Experience designing and implementing well-architected APIs using either REST principles or GraphQL, with consideration for API versioning, backward compatibility, and developer experience."} ## Tech stack ### tools - {"name":"Git and GitHub","description":"Version control and collaboration platform for managing code repositories, code review workflows, pull request processes, and maintaining team coordination on identity and admin systems."} - {"name":"Docker","description":"Containerization platform for packaging Node.js services and ensuring consistent deployment environments across development, testing, and production identity infrastructure."} - {"name":"Kubernetes","description":"Container orchestration platform potentially used for managing scalable deployment of identity services, session managers, and authentication infrastructure at enterprise scale."} - {"name":"GitHub Copilot or AI Development Assistants","description":"AI-powered coding assistants leveraged to improve development productivity, generate boilerplate code, assist with complex problem-solving, and enhance code quality through pragmatic integration into development workflows."} ### others - {"name":"OAuth 2.0 and OpenID Connect Standards","description":"Industry-standard protocols for implementing secure authentication and authorization, enabling single sign-on capabilities and third-party integrations within Mural's identity infrastructure."} - {"name":"SCIM Protocol","description":"Standard protocol for automating user provisioning and lifecycle management across enterprise systems, enabling automated user creation, updates, and deprovisioning from HR systems."} - {"name":"JWT and Session Tokens","description":"Authentication mechanisms for securing API requests and maintaining user sessions, with understanding of token expiration, refresh strategies, and security considerations for identity tokens."} - {"name":"Multi-Factor Authentication (MFA)","description":"Security protocols including TOTP, SMS, hardware keys, and other MFA mechanisms that add additional layers of authentication security for protecting user accounts and administrative access."} ### databases - {"name":"MongoDB","description":"Primary document database for persisting user identity data, organizational hierarchies, permission models, session data, and configuration state with flexible schema capabilities."} - {"name":"PostgreSQL or MySQL","description":"Relational database potentially used for transactional operations, billing data, audit logging, or systems requiring strong ACID guarantees and complex relational queries."} - {"name":"Redis","description":"In-memory data store for session management, caching frequently accessed identity data, rate limiting authentication attempts, and ensuring low-latency access to security-critical data."} ### languages - {"name":"TypeScript","description":"Primary backend development language for Admin & IAM team, providing type safety, improved development experience, and better code maintainability at scale across complex identity systems."} - {"name":"JavaScript","description":"Full-stack language used for both backend Node.js services and frontend React applications, enabling code sharing patterns and consistent tooling across the technology stack."} - {"name":"SQL","description":"Supplementary language for database queries and optimization, useful for working with relational databases or hybrid data storage approaches that complement MongoDB."} ### frameworks - {"name":"React","description":"Modern frontend framework for building the enterprise administration interfaces and user-facing access management surfaces that users and administrators interact with daily on Mural."} - {"name":"Node.js","description":"Backend runtime environment for building scalable, event-driven backend services that power authentication, authorization, session management, and identity provisioning systems."} - {"name":"Express.js or similar","description":"Lightweight web framework typically used for building Node.js APIs and services within IAM and admin platforms, handling HTTP routing, middleware chains, and request processing."} ## Benefits ### benefits - {"name":"Remote-First Work Environment","description":"Flexible remote work arrangement supporting distributed team collaboration while maintaining productivity, with optional access to Mural's Buenos Aires office location for those who prefer in-person collaboration."} - {"name":"Professional Development and Learning","description":"Investment in continuous skill development through access to technical training, conference attendance, online courses, and time allocated for learning emerging technologies and identity management advancements."} - {"name":"Collaborative Engineering Culture","description":"Work within a focused, small team emphasizing knowledge sharing, code review quality, and mentorship opportunities. Strong engineering practices and opportunities to influence platform-wide technical decisions."} - {"name":"Impact on Enterprise Security","description":"Opportunity to directly impact how thousands of enterprise organizations securely manage identity and access across their teams, knowing your work helps millions of users collaborate with confidence."} - {"name":"Work with Cutting-Edge Technologies","description":"Regular exposure to modern development practices, AI-assisted development tools, and contemporary security patterns. Opportunity to architect and implement systems using industry best practices."} - {"name":"Cross-Functional Collaboration","description":"Close partnership with talented Product, Design, Security, and Infrastructure teams, providing diverse perspectives and opportunities to grow beyond pure engineering through exposure to business and security considerations."} ## Compensation - **max:** 0 - **min:** 0 - **currency:** - **stockOptions:** false ## Interview process ### steps ## Full description ### ABOUT THE TEAM The Admin & Identity and Access Management (Admin & IAM) team at Mural defines how users sign in, manage their identities, and access Mural's products, as well as how administrators configure and govern their organizations. We own authentication & authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), user provisioning (SCIM), session management, and the core permission model that powers roles and access control across companies and workspaces. We also own the enterprise administration experience; the configuration and controls that company and workspace admins use to manage their organizations and users. By providing secure, clear, and intuitive controls for users and administrators, we help organizations adopt Mural quickly and collaborate with confidence. ### YOUR MISSION As a Senior Software Engineer on the Admin & IAM team, you will design and ship these capabilities end-to-end, from identity primitives like the permission model and authentication flows to the admin surfaces enterprise customers use every day. Senior Engineers on Admin & IAM own complex technical initiatives, influence platform and security best practices, and collaborate closely with Product, Design, and Infrastructure to deliver secure experiences that feel simple and intuitive. You will report to an Engineering Manager and work with a small, focused team in a remote-first environment, with the option to work from our Buenos Aires office. ### WHAT YOU'LL DO * Build and evolve core identity and access systems that power authentication & authorization, SSO, user provisioning, session management, and permissions across Mural * Build and evolve the enterprise administration experience, including company and workspace configuration, user and content administration, billing, and internal admin tooling * Collaborate with cross-functional partners to design and ship secure, intuitive access and administration experiences for users and administrators * Prototype, implement, and maintain Admin & IAM platform features, contributing as a technical expert and supporting teammates through collaboration and mentorship * Own technical initiatives from design through implementation, rollout, and operational support * Build flexible, observable and maintainable solutions while being accountable for security, quality, performance, and reliability * Use AI tools as a part of your fundamental workflows to improve productivity, code quality, and system understanding * Contribute to technical design discussions, provide thoughtful code reviews, mentor teammates, and continuously improve the quality of the team's engineering work * Contribute to continuously improving the team's processes and engineering best practices ### WHAT YOU'LL BRING * 4+ years building and shipping large-scale production software as part of an agile engineering team * Experience learning new technologies, platforms, and stacks, and getting productive quickly in large, existing codebases * An outcome-oriented and pragmatic interest in using AI-driven development practices to improve productivity, code quality, and system understanding * Strong experience building backend systems and APIs using Node.js, TypeScript / JavaScript, MongoDB, or comparable technologies * Hands-on experience building production user interfaces with React and modern frontend patterns * Proven ability to plan and deliver technical projects iteratively, balancing speed, quality, and long-term maintainability * Strong collaboration and communication skills, with the ability to work effectively across product, design, security, and engineering partners * Experience working in a fast-moving or growth-stage environment, adapting to evolving requirements and priorities * Domain experience with identity and access management concepts such as authentication flows, authorization models, roles and permissions, SSO, SCIM provisioning, or session management * Experience building enterprise administration or B2B SaaS configuration surfaces, such as org management, billing, or admin dashboards Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. . ### Equal Opportunity We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.