BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself. BeyondTrust is seeking a Senior Software Development Engineer to help build NHI Governance. NHI Governance is the Pathfinder Insights module that discovers, assesses, and remediates non-human identities — service principals, IAM users, access keys and secrets, workload identities, and AI agents — across Microsoft Entra ID, AWS, and on-premise environments. NET 10 services over PostgreSQL; an inventory pipeline fed from governed Databricks lakehouse views; durable Temporal workflows (Python workers, a .
NET gateway, protobuf contracts) that onboard, rotate, reduce access for, and decommission live customer credentials, with custody in BeyondTrust Password Safe and storage adapters for AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault; and Angular micro-frontends in the Insights console. It ships through GitOps to Amazon EKS in commercial and government environments. You will own how NHI Governance connects to the systems it governs — Microsoft Entra ID, AWS IAM, and vault and PAM platforms including BeyondTrust Password Safe — end to end: the integration code and workflow activities, the least-privilege permissions customers grant us, the setup experience that explains them, the screens that expose them, and the real test environments that prove it all works. Build and own integrations with Microsoft Graph (Entra ID),



AWS IAM/STS, and vault and PAM platforms — Python workflow activities and .
NET services that are idempotent, retry-safe, and compensable. Build the guided setup assets customers run — an Entra setup script, an AWS CloudFormation quick-create, and Password Safe checklists with live verification — and the in-product checks that tell a customer what's missing and how to fix it. Own the team's real test environments: Entra test tenants, AWS sandbox accounts, and Password Safe instances, plus the automation that mints, grants, sweeps, and verifies them with least privilege and no standing secrets. Ship the full stack for what you integrate: .
NET APIs over PostgreSQL and the Angular micro-frontend screens for connectors, vault setup, and readiness. Strong backend engineering in Python and C#/.
NET — strong in one, working in the other. PostgreSQL. Hands-on Microsoft Entra ID administration as an engineer: app registrations and service principals, Microsoft Graph application permissions and admin consent, app ownership, managed identities, and federated credentials. AWS IAM in depth: cross-account roles and external ids, policy conditions and resource scoping, STS, Secrets Manager,



and SSO/CLI profiles. Comfortable reading and writing Terraform and CloudFormation. customers run our setup scripts. Working TypeScript and Angular, enough to own a feature's screens in our module-federation micro-frontends. Testing against real dependencies, including workplace fixtures you set up and tear down yourself. Comfortable in an AI-assisted codebase; BeyondTrust Password Safe (managed systems, functional accounts, rotation plugins), HashiCorp Vault, Azure Key Vault. Additional identity platforms (GCP service accounts, GitHub Apps, Okta). Daily hands-on practice with agentic coding tools such as Claude Code. Patient with vendor documentation, and good at writing the doc the next person needs. Diversity. Inclusion. We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders. BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners. #

📌 Sr Software Development Engineer Remote Canada | Remote Unites States Engineering
🏢 BeyondTrust
📍 Canada