Beyond Trust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity Saa S portfolio.Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.The Role Beyond Trust is seeking a Senior Software Development Engineer to help build NHI Governance. NHI Governance is the Pathfinder Insights module that discovers, assesses, and remediates non-human identities — service principals, IAM users, access keys and secrets, workload identities, and AI agents — across Microsoft Entra ID, AWS, and on-premise environments. The system spans. NET 10 services over Postgre SQL; an inventory pipeline fed from governed Databricks lakehouse views; durable Temporal workflows (Python workers, a. NET gateway, protobuf contracts) that onboard, rotate, reduce access for, and decommission live customer credentials, with custody in Beyond Trust Password Safe and storage adapters for AWS Secrets Manager, Azure Key Vault, and Hashi Corp Vault; and Angular micro-frontends in the Insights console. It ships through Git Ops to Amazon EKS in commercial and government environments.You will own how NHI Governance connects to the systems it governs — Microsoft Entra ID, AWS IAM, and vault and PAM platforms including Beyond Trust Password Safe — end to end: the integration code and workflow activities, the least-privilege permissions customers grant us, the setup experience that explains them, the screens that expose them,



and the real test environments that prove it all works.What You’ll Do Build and own integrations with Microsoft Graph (Entra ID), AWS IAM/STS, and vault and PAM platforms — Python workflow activities and. NET services that are idempotent, retry-safe, and compensable.Own the per-feature permission matrix: exactly which Graph roles, IAM actions (with resource and condition scoping), and Password Secure permissions each feature needs. Keep it true as the code changes.Build the guided setup assets customers run — an Entra setup script, an AWS Cloud Formation quick-create, and Password Safe checklists with live verification — and the in-product checks that tell a customer what's missing and how to fix it.Own the team's real test environments: Entra test tenants, AWS sandbox accounts, and Password Safe instances, plus the automation that mints, grants, sweeps, and verifies them with least privilege and no standing secrets.Own the live end-to-end suites that run governance journeys against real tenants, and debug failures across the API, workflow, vendor API, and permission layers.Ship the full stack for what you integrate:. NET APIs over Postgre SQL and the Angular micro-frontend screens for connectors, vault setup, and readiness.Be the team's escalation point for opaque vendor failures — the uniform 401s and 403s whose real cause is in an audit log.What You’ll Bring Strong backend engineering in Python and C#/. NET — strong in one, working in the other. REST API design. Postgre SQL.Hands-on Microsoft Entra ID administration as an engineer: app registrations and service principals, Microsoft Graph application permissions and admin consent, app ownership, managed identities, and federated credentials. You have debugged “why is this 403.”AWS IAM in depth: cross-

📌 Sr Software Development Engineer Remote Canada | Remote Unites States Engineering (Winnipeg)
🏢 BeyondTrust
📍 Winnipeg