Golang engineer on Rubrik's identity and access layer in Pune: building the OIDC, OAuth 2.0 and SAML flows that secure its on-premise backup and data management product.

This Pune role was posted on 31 August 2026. The team owns the identity layer across Rubrik releases for its on-premise offering: authentication flows, token lifecycles, Active Directory integration and the reverse-proxy components that front customer auth traffic. The listing asks for a highly skilled Golang developer with deep, practical knowledge of identity protocols and applied cryptography/PKI.

About Rubrik

Rubrik (NYSE: RBRK) describes itself as the Security and AI Operations Company: one platform for data security, identity and AI operations that gives enterprises cyber resilience - backup, recovery and protection of the data that runs their business. Its Cloud Native Protection business is one of its fastest growing teams, which it calls a startup inside a startup. Learn more on Rubrik's website.

The role in plain terms

You design, build and harden identity and access flows - OIDC/OAuth 2.0, SAML 2.0, Active Directory integrations - and own token and assertion lifecycle correctness: issuance, validation, expiry, rotation and failure handling for JWT/JWKS. The listing also covers applied cryptography and PKI (X.509 certificates, key rotation, TLS), reverse-proxy and HTTP-layer components, debugging customer-facing identity issues with support, and cross-platform packaging for Linux deb/rpm and Windows MSI.

What you will do

Per the employer's listing, you will:

Design, build, and harden identity and access flows — OIDC/OAuth 2.0, SAML 2.0, Active Directory integrations — that sit in front of mission-critical systems.
Own token and assertion lifecycle correctness: issuance, validation, expiry, rotation, and failure-mode handling for JWT/JWKS and SAML assertions.
Apply strong applied-cryptography and PKI practices (X.509 certs, key rotation, TLS) to keep the auth path secure by default, not as an afterthought.
Build and maintain reverse-proxy/HTTP-layer components (TLS termination, header handling) that front customer authentication traffic.
Debug and resolve customer-facing identity/access issues, working with support to triage escalations quickly.

What the employer asks for

These requirements are quoted from the employer's listing, kept in their exact words so eligibility details are not distorted:

Strong hands-on programming skills in Golang.
Deep, practical knowledge of identity protocols: OIDC/OAuth 2.0 and SAML 2.0.
Applied cryptography/PKI experience: X.509 certificates, key rotation, TLS.
Strong security engineering discipline - comfortable reasoning about threat models and building software to protect mission-critical systems.
Solid understanding of OS fundamentals, networking, and concurrency, with working knowledge of Linux and shell/bash scripting.

Who this role suits

Backend engineers who write Go daily and know identity protocols at the wire level - this is security-critical code where token validation bugs become CVEs. Strong fit for engineers from identity vendors, auth platform teams or security product companies. Not for Go beginners or protocol generalists.

Practical notes

Expect protocol-depth interviews: how SAML assertions and OIDC tokens differ, where validation goes wrong, JWKS rotation edge cases. The cross-platform packaging note (deb/rpm/MSI) is unusual - mention any installer or packaging work you have done. Pune location; posted 31 August.

How to apply

Apply directly on the employer's site: Software Engineer - IAM at Rubrik. We found this listing on the Greenhouse public job board (job-boards.greenhouse.io), where it was posted on 31 Aug 2026 and was still open when we checked on 31 Oct 2026. Before applying, re-read the employer's own description in full, since eligibility details, deadlines and process steps can change at any time and the employer's page is always the final word. Tailor your resume to the specific requirements above rather than sending a generic one: mirror the skills and tools the listing names where you genuinely have them. A short, specific note on why this team and this problem interest you goes further than a long generic cover letter. Never pay a fee to apply or interview; genuine employers, including this one, do not charge candidates.

Related openings on GetFirstJob

If this role is not the right fit, these current openings are in a similar area:

We write and maintain this page from the employer's public listing and link straight to their application page. We do not act as a recruiter, and applying is always free. If the link above stops working, the role has likely been filled.

This is our short summary of the employer's listing. The full description, eligibility and deadline are on the employer's page.