Staff Fullstack Software Engineer responsible for securing Navan products by identifying weaknesses and driving scalable solutions. Responsible for design and development of core services related to authentication, authorization, and encryption.
Requirements
- 8+ years of experience as a software engineer with technical-leadership responsibilities
- Prior experience architecting, building, launching and maintaining complex systems
- Experience working in an Agile environment using technologies such as Java Spring Framework, Hibernate, JavaScript/Typescript, and React
- Containers (Docker, Kubernetes, or similar)
- Infrastructure as code (Vagrant, Docker, Ansible, Chef, Terraform, or similar)
- Continuous integration (Github Actions or similar)
- Integration of Security testing tools into CI pipelines
- Defect tracking (Jira, ServiceNow, or similar)
- Source code management (GitLab, GitHub, or similar)
- Cloud environment (AWS, or similar)
- Knowledge of modern authentication mechanisms like SAML, JWT, OIDC connect, Passkey
- Knowledge of authorization frameworks for complex multi-tenant SaaS applications
- Knowledge of cryptographic primitives
- Knowledge of application security issues and tools
- Knowledge of compliance requirements for industry-standard certifications like PCI DSS, SOC2, HIPAA, and FedRAMP
- Experience working in small teams and delivering outsized impact