Вакансии

— Аудит платежных сервисов, API, PSP-интеграций; — Выявление уязвимостей, расследование мошенничества (Carding, ATO, Chargebacks);

Ищем AppSec инженера, способного выявлять уязвимости на уровне кода и архитектуры, а не на уровне отчётов сканеров. Ключевая ценность специалиста — глубокое понимание того, что именно находят SAST/DAST/SCA инструменты, где их слепые зоны, и умение закрывать эти зоны ручной работой.

Требования: — От 4 лет коммерческого опыта в бэкенде, из которых более 3 лет с NestJS и TypeScript. — Опыт разработки сложных API, включая микросервисы, GraphQL, REST и WebSockets. — Глубокие знания PostgreSQL, принципов чистого кода и системного дизайна. — Навыки написания тестов и понимание вопросов безопасности, таких как mTLS, OAuth и JWT.

Talablar: — PHP dasturlash tilida 2+ yil tajriba, Laravelda 1,5+ yil ishlash — MySQL yoki PostgreSQL ma’lumotlar bazalari bilan ishlash, SQL optimizatsiyasi — REST API yaratish, Sanctum, Passport yoki JWT autentifikatsiya vositalari — Laravel Queues, Redis va kesh tizimlari — Git, Code Review, Docker va Linux muhitida ishlash — Agile yoki Scrum metodologiyalari, Jira yoki ClickUp boshqaruv tizimlari — Rus va o‘zbek tillarini bilish Vazifalar: — UYSOT.uz va UyQur ERP backend qismini ishlab chiqish — Web va mobil ilovalar uchun REST API yaratish — Ma’lumotlar bazasini loyihalash va optimallashtirish — API tezligi va xavfsizligini oshirish — Mavjud kodni qo‘llab-quvvatlash va rivojlantirish — Code Review va jamoaviy ishlab chiqishda faol ishtirok etish Qo‘shimcha ustunliklar: — Ko‘chmas mulk, qurilish yoki yuqori yuklamali tizimlar bilan ishlash tajribasi Sharoitlar: — Rivojlanayotgan PropTech mahsulotlarida ishlash imkoniyati — Texnik qarorlar va mahsulot rivojiga ta’sir qilish — Professional o‘sish va tajriba almashish Ish joyi: Toshkent, Yunusobod 12-mavze, 20A Ish vaqti: 6/1, kuniga 8 soat Rasmiy ishga olish, oyiga 2 marta to‘lov

Responsibilities: — Design, build and maintain backend services in Go with clean, idiomatic, and readable code — Design gRPC and REST APIs, maintain stable contracts, and version them when changes occur — Write efficient PostgreSQL queries, design schemas, and create safe, reversible migrations — Properly use goroutines, channels, and context to avoid leaks and ensure correct timeouts and cancellations — Handle errors explicitly, including retries and idempotency for repeatable calls — Write unit and integration tests covering business logic and failure cases — Implement structured logging, metrics, and health checks for problem diagnosis — Ensure service security by validating input, authenticating callers, and keeping secrets out of code and logs — Profile and optimize CPU, memory, and database load as needed — Write concise technical documentation for owned APIs and services — Review teammates' pull requests to maintain code consistency Requirements: — 1–3 years of commercial backend development experience in Go — Experience building or maintaining at least one production service in Go (REST or gRPC) — Proficiency with PostgreSQL including queries, indexes, and migrations — Experience using Docker and writing Dockerfiles — Basic Kubernetes knowledge is a plus — Experience integrating third-party APIs, preferably payments or webhooks — Familiarity with Git and pull requests in a team environment — Required skills include Go concurrency primitives (goroutines, channels, context), error handling, REST API design, gRPC and Protobuf knowledge, PostgreSQL SQL queries and migrations, Docker, Git, unit testing in Go, HTTP basics including JWT authentication, and Linux basics Nice to have: — Kubernetes basics (pods, deployments, logs via kubectl) — Experience with payment providers (Click, Payme, Uzum) or webhooks — Experience with message queues such as RabbitMQ, Kafka, or NATS — Redis — CI/CD with GitHub Actions — Monitoring tools like Prometheus or Grafana — Experience with Helm, ArgoCD, or other GitOps tools — Experience with HashiCorp Vault or other secrets managers — Experience with IoT or hardware integrations (barriers, cameras, ANPR) — Experience with payment providers and fiscal requirements — Networking experience including tunnels, VPNs (IPsec), and load balancers — Some knowledge of C#/.NET Soft Skills: — Takes responsibility for results beyond just completing tasks — Proactively asks for help when stuck — Communicates clearly about progress and blockers — Accepts code review feedback calmly — Learns new tools quickly — Pays attention to detail, especially in payment logic — Works well in a small team Candidate Assessment Process: 1. CV review including GitHub within 3 working days 2. Short call (20–30 minutes) discussing experience and role 3. Technical interview (60–120 minutes) covering Go basics, concurrency, PostgreSQL, REST/gRPC, and a live coding task 4. Final interview (30 minutes) with team lead discussing work style and offer Apply https://hh.uz/vacancy/139299572

- Разрабатывать и развивать мобильные приложения на Flutter (iOS и Android). - Реализовывать новые функции и интегрировать REST API.

Требования: — От 4 лет коммерческого опыта в бэкенде, из которых не менее 3 лет с NestJS и TypeScript. — Опыт разработки сложных API, включая микросервисы, GraphQL, REST и WebSockets. — Глубокие знания PostgreSQL, принципов чистого кода и системного дизайна. — Опыт написания тестов и понимание вопросов безопасности, таких как mTLS, OAuth и JWT. — Будет преимуществом опыт работы с Kafka, RabbitMQ, распределёнными транзакциями (Saga) и GraphQL Federation. Локация: из любой точки мира, работа по московскому времени, полный рабочий день.

Location: Intellias Meet your recruiter Olha Yakuba olha.yakuba@intellias.com https://www.linkedin.com... Vacancy details DevOps Engineering DevOps Engineer (AWS) Principal Bulgaria, Croatia, India, Poland, Portugal, Spain, Ukraine Remote APPLY NOW REFER A FRIEND We are looking for a Senior Identity & Access Management Engineer to design and implement secure identity propagation and authorization patterns across AI agent ecosystems. The role focuses on runtime identity, On-Behalf-Of (OBO) token exchange, identity federation, and secure agent-to-tool communication using AWS Bedrock AgentCore and modern enterprise identity platforms. You will be responsible for ensuring that agents, tools, and downstream APIs operate with properly scoped identities and permissions, enabling secure delegation, authorization enforcement, and credential isolation throughout the agent invocation lifecycle. This position requires deep hands-on experience with OAuth 2.0, OIDC, JWT validation, token exchange workflows, and enterprise identity federation. Experience with workload identity brokering, agent authorization models, and policy-based access control is highly desirable. What project we have for you Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia’s mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. What you will do Design and implement secure identity propagation across agent → tool → API interaction chains. Build and support On-Behalf-Of (OBO) token exchange flows and scoped delegation mechanisms. Integrate AWS Bedrock AgentCore Identity capabilities into agent runtime workflows. Implement OAuth 2.0, OpenID Connect (OIDC), and JWT-based authentication and authorization patterns. Develop identity federation integrations with enterprise identity providers such as Microsoft Entra ID, Okta, or Amazon Cognito. Configure gateway-level outbound authorization and per-target credential management, ensuring sensitive credentials are never exposed to calling agents. Build secure token issuance, validation, exchange, rotation, and lifecycle management processes. Design and implement workload identity brokering and agent identity mapping mechanisms. Implement identity-aware authorization controls using Cedar policies, claims mapping, and fine-grained access enforcement. Collaborate with platform, security, and runtime teams to align identity controls with enterprise security standards. Support secure agent-to-agent (A2A) and agent-to-tool invocation authorization patterns. Participate in security reviews, threat modeling, and architecture discussions related to AI agent platforms. Define and enforce best practices for runtime identity, federated access, delegated authorization, and credential protection. What you need for this Skills: • AWS Bedrock AgentCore Identity or similar technology (inbound auth, outbound auth, token vault) • On-Behalf-Of (OBO) token exchange and scoped identity propagation across agent → tool → API chains • JWT / OAuth 2.0 / OIDC (claims, scopes, audience/issuer validation, short-lived scoped tokens) • Identity federation and MS Entra Agent ID integration or similar technology (workload identity brokering) • Gateway outbound authorization and per-target credential management (secrets never exposed to the calling agent) • AgentCore Runtime integration of identity into the agent invocation lifecycle • Cedar / MS Entra claims mapping for identity-aware authorization (coordination with Runtime Controls) Experience: • 5+ years cloud security or identity engineering • Hands-on OAuth 2.0 / OIDC / JWT implementation (token issuance, validation, exchange) • On-Behalf-Of / token-exchange flows in production (RFC 8693 or equivalent) • Enterprise identity federation with MS Entra, Okta, or Cognito • Secure credential/secret management and token lifecycle (rotation, vaulting) Nice to have: • AWS Bedrock AgentCore Identity early adopter or equivalent • AWS AgentCore Gateway outbound-auth integration • MCP / A2A tool-invocation auth patterns • AgentCore Policy (Cedar) or AWS Verified Permissions exposure What it’s like to work at Intellias At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth. We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law. We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.

Задачи: — Создавать и поддерживать модули интеграции с внешними системами и между различными внутренними сервисами; — Создавать и поддерживать модули ядра приложения; — Создавать и поддерживать различные микросервисы. Требования: — Минимум 3 года опыта работы с NestJS и Typescript; — Опыт разработки сложных API (SOA, микросервисы) с использованием GraphQL (code-first, schema-first), REST и WebSockets; — Опыт тестирования кода (функциональное, юнит, интеграционное тестирование); — Опыт работы с инструментами мониторинга производительности и оптимизации; — Глубокие знания реляционных баз данных, в частности PostgreSQL; — Понимание современных подходов к безопасности, таких как mTLS, OAuth, JWT и другие; — Знание принципов разработки ПО, включая Clean Code и System Design; — Способность брать на себя ответственность и автономно решать задачи. Дополнительные плюсы: — Знание различных подходов к архитектуре облачных приложений; — Опыт работы с MQ, такими как Kafka и RabbitMQ; — Опыт работы с современными технологиями и инструментами DevOps и CI/CD; — Опыт работы с Saga, распределёнными транзакциями, GraphQL Federation/Supergraphs. Условия: — Работа над востребованными продуктами, используемыми реальными пользователями; — Возможность внедрять новые технологии; — Отсутствие бюрократических процессов, быстрые решения и обсуждение новых идей; — Поддержка в повышении квалификации и компенсация курсов; — Возможность обсуждения повышения дохода при активном развитии и расширении зоны ответственности; — Работа в сильной команде для прокачки профессиональных навыков. Гражданство и локация не имеют значения, работа по часовому поясу МСК.

Location: Intellias Meet your recruiter Bohdana Rubets bohdana.rubets@intellias.com https://www.linkedin.com... Vacancy details Information Security Security Engineer Strong Middle Bulgaria, Canada, Croatia, Cyprus, Egypt, Germany, India, Japan, Malta, Poland, Portugal, Saudi Arabia, Spain, Ukraine, United Arab Emirates, United Kingdom Remote APPLY NOW REFER A FRIEND We are looking for a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. The role focuses on Cedar policy development, identity provider integrations, policy enforcement, and attribute-based access control. The ideal candidate combines hands-on security engineering experience with strong Python skills and a deep understanding of modern authorization architectures. What project we have for you Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia’s mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. What you will do Design, implement, and maintain authorization policies using Cedar policy language. Develop and test policy definitions, validation workflows, and policy enforcement mechanisms. Configure and manage AWS AgentCore Policy in LOG_ONLY and ENFORCE modes. Build Python-based tooling for policy validation, testing, and governance. Integrate authorization frameworks with Microsoft Entra ID and other identity providers. Design claims mapping and token-based authorization flows using OAuth 2.0 and JWT. Implement fine-grained and parameter-level access control models. Develop and maintain ABAC and RBAC authorization patterns for platform services and AI agents. Partner with platform and security teams to ensure secure access governance across distributed systems. Create auditability and traceability mechanisms for authorization decisions. Support adoption of policy-as-code practices and authorization best practices. What you need for this • Cedar policy language — authoring and testing • AWS AgentCore Policy LOG_ONLY / ENFORCE modes • Python (policy validation tooling) • MS Entra claims mapping • Parameter-level access control patterns Experience: • 3+ years security engineering or backend engineering • Identity provider integration (Entra, Okta, Cognito) • Policy definition in any ABAC or RBAC system • Open Policy Agent (OPA) or Cedar hands-on Will be a plus: • LangGraph tool invocation patterns • AWS AgentCore Gateway integration What it’s like to work at Intellias At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth. We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law. We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.

Location: Intellias Meet your recruiter Karolina Sowa karolina.sowa@intellias.com https://www.linkedin.com... Vacancy details Software Engineering Python Engineer Senior Bulgaria, Colombia, Croatia, Poland, Portugal, Spain, Ukraine Remote APPLY NOW REFER A FRIEND We are looking for a Senior Interoperability Engineer to build and scale healthcare integrations for a Digital Health platform connecting providers, payers, clinical systems, and external healthcare networks. This is a hands-on engineering role focused on Python, Kafka, high-scale APIs, healthcare interoperability, and secure data exchange . What project we have for you The platform connects healthcare data from multiple clinical and administrative systems and makes it available through secure, standards-based APIs. The Interoperability domain is responsible for building and operating integrations with external healthcare systems, processing high-volume data exchange, and providing reliable APIs consumed by internal products and partners. The engineering environment is based on Python, event-driven architecture, Kafka, REST/FHIR APIs, OAuth-based security, and cloud-native services . What you will do Design and develop scalable healthcare interoperability services and APIs . Build event-driven integrations using Python and Kafka . Implement and support FHIR-based healthcare data exchange. Develop secure APIs using OAuth 2.0/OIDC and JWT . Integrate external healthcare systems, data providers, and partner APIs. Implement data validation, transformation, mapping, and error-handling logic required for interoperability workflows. Troubleshoot complex integration, authentication, and distributed-system issues. Improve API performance, scalability, reliability, and observability. Build automated tests covering API behavior and integration scenarios. Participate in architecture discussions, code reviews, and engineering standards. What you need for this Requirements: 5+ years of professional backend or integration engineering experience. Strong hands-on experience with Python in production environments. Experience designing and operating high-scale REST APIs and backend services . Strong experience with Kafka or comparable event-streaming technologies. Solid understanding of distributed and event-driven architectures . Strong experience with API authentication and authorization, including OAuth 2.0, OIDC, and JWT . Experience integrating external systems and APIs in complex enterprise environments. Hands-on experience with FHIR or healthcare interoperability APIs . Strong understanding of API reliability, error handling, retries, idempotency, and observability. Experience with SQL and/or NoSQL databases. Experience with Docker, cloud-native environments, and CI/CD. Strong troubleshooting and production problem-solving skills. Nice to Have: Experience with FHIR R4, SMART on FHIR, US Core, or USCDI . Knowledge of HL7 v2 or CDA/C-CDA . Experience integrating EHR/EMR, payer, HIE/HIN, pharmacy, or laboratory systems. Experience with Patient Access APIs, Bulk FHIR, or CMS interoperability requirements . Experience with Kubernetes and AWS. Healthcare or Digital Health domain experience. Experience using AI-assisted engineering tools in day-to-day software development. What it’s like to work at Intellias At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth. We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law. We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.

Location: Москва В Сбербанк Онлайн мы строим щит, который защищает финансы и данные миллионов клиентов. Наш продукт — это не просто приложение, а среда, где каждый пользователь может управлять безопасностью своих счетов и спать спокойно. Присоединяйтесь к команде Кибербезопасность Сбербанка и создавайте надёжное мобильное приложение, от которого зависят реальные деньги людей. Обязанности * формирование функциональных требований (FR) и нефункциональных требований (NFR) * проектирование API для REST сервисов * подготовка технической документации * работа со стейкхолдерами в части выявления и согласования требований к функционалу продукта * участие в discovery требований к новому функционалу * взаимодействие со смежными подразделениями и продуктовыми командами в части реализации функций на их стороне, необходимых для развития нашего продукта. Требования * подтвержденный опыт работы системным аналитиком 3–6 лет * опыт работы с API (OpenAPI 3.0/Swagger, знание REST) * понимание архитектуры брокеров сообщений (Kafka, RabbitMQ и др.) и описания асинхронных интеграций * практические навыки работы с нотациями BPMN, UML, ERD * основы работы с БД (SQL - базовые запросы, понимание нормализации данных, транзакции, ACID) * опыт разработки и сопровождения технической документации по продукту * опыт проектирования микросервисов * безопасность и аутентификация: знание принципов аутентификации/авторизации: OAuth2, JWT, SSO, cookie-based сессии * опыт работы с требованиями и процессами: описание ФТ и НФТ, включая требования к производительности, отказоустойчивости, аудиту * знания принципов UХ/UI * понимание CI/CD и современных процессов разработки * инструментальное владение AI для анализа, генерации и автоматизации. Условия * комфортный современный офис в Москве рядом с м. Кутузовская * график работы – офис * ежегодный пересмотр зарплаты, квартальная и годовая премия * корпоративный спортзал и зоны отдыха * более 400 образовательных программ СберУниверситета для профессионального и карьерного развития * программа адаптации и помощь руководителя на старте (для Junior позиций) * расширенный ДМС, льготное страхование для семьи и корпоративная пенсионная программа * подписка Прайм с возможностью совместного использования на трёх близких * вознаграждение за рекомендацию друзей в команду Сбера.

Location: Perm; Moscow Workplace: hybrid ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. THE ROLE We are hiring a Tech Lead, Parental Controls. You will build the team and the service that checks a player's age and gets a parent's consent before a child can buy. This is a coding role. You write production code at least half of your week, you make the architecture decisions, and you hire the engineers who build this with you. Responsibilities WHAT YOU WILL DO Write production Go and TypeScript: the status API, token validation, consent rules, the standalone widget and the web SDK Own the architecture and write it down Hire and grow a team of about six backend, frontend and QA engineers: write the role profiles, run the interviews, onboard each person Set up how the team works: code review, CI, releases, on-call, AI coding tools in the repositories Keep children's data safe: token validation, consent records, no decision from a result that only the browser reports Work with Legal, Security teams on requirements, dependencies and release gates WHAT YOU WILL WORK WITH Go, go-kit, gRPC and REST, PostgreSQL, Redis, RabbitMQ, Temporal; TypeScript with Angular and React; OpenTelemetry and Datadog; Docker, Kubernetes, GitLab CI; a third-party age-verification and consent vendor. REQUIRED 7+ years in software engineering, Go as your main language for the last 3+ years. You still write and ship code 2+ years as a tech lead or team lead of 4+ engineers, with hiring experience: you have built a team or a large part of one Backend depth: API design, PostgreSQL, message queues, idempotent integrations with third-party APIs, workflow orchestration (Temporal or similar) TypeScript: enough to review React or Angular code and design a small embeddable web SDK Security basics for identity flows: JWT, OAuth2, webhook signatures, XSS, CSRF, CSP Operations: Docker, Kubernetes, CI/CD, tracing and metrics, on-call for a service you own Daily use of AI coding tools (Claude Code, Codex, Cursor), including their setup for a repository English at B2 or higher BENEFITS We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play. EMPLOYMENT DETAILS Location: Perm or Moscow, hybrid Employment Type: Full-time Schedule: 10:00-19:00 (flexible) Contract: Employment agreement EQUAL EMPLOYMENT STATEMENT Xsolla is dedicated to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, language, sexual orientation, national origin, genetics, political beliefs, disability, age, marital status, social background or other characteristics. We are committed to compliance with all fair employment practices regarding citizenship and immigration status. CONTACT If you have questions regarding our hiring practices, please contact careers@xsolla.com. For more vacancies, visit xsolla.com/careers.

Location: Bangalore Principal UI Engineer Location: Bengaluru, India (Hybrid) About Reltio At Reltio®, an SAP Company, we believe data should fuel your success in the enterprise AI era. Our  Context Intelligence Platform turns fragmented data into a trusted, connected context so AI agents and systems can act with expert-level judgement at enterprise scale. Reltio’s cloud-native SaaS platform harmonizes, unifies, and governs data across sources and formats—including unstructured data—in real time, turning them into data assets that can be mobilized in milliseconds to any application, user, or AI agent. Trusted by more than 200 of the world’s largest brands across industries such as life sciences, financial services, healthcare, and technology, we fuel frictionless operations and help enterprises accelerate  innovation and reduce risk. At Reltio, our values guide everything we do. With an unyielding commitment to prioritizing our “Customer First”, we strive to ensure their success. We embrace our differences and are “Better Together” as One Reltio. We are always looking to “Simplify and Share” our knowledge when we collaborate to remove obstacles for each other. We hold ourselves accountable for our actions and outcomes and strive for excellence. We “Own It”. Every day, we innovate and evolve, so that today is “Always Better Than Yesterday”. If you share and embody these values, we invite you to join our team at Reltio and contribute to our mission of excellence. Reltio has earned numerous awards and industry and analyst recognition for our technology, our culture and our people. Reltio was founded on a distributed workforce and offers flexible work arrangements to help our people manage their personal and professional lives. If you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to enable digital transformation with connected data, let’s talk! Role Overview As a Principal UI Engineer, you will define and lead the frontend architecture for Reltio's next-generation cloud platform. You'll collaborate with Product Management, UX, Backend Engineering, and Platform teams to deliver scalable, high-performance applications used by Fortune 500 customers worldwide. This role combines hands-on engineering with technical leadership. You'll mentor engineers, establish engineering best practices, influence product direction, and help shape the future of Reltio's user experience. What You'll Do Lead the architecture, design, and development of complex enterprise-scale web applications. Drive frontend technology strategy across multiple product teams. Build reusable UI frameworks, shared component libraries, and design system integrations. Champion modern frontend engineering practices including performance optimization, accessibility, testing, observability, and security. Partner closely with Product Managers and UX Designers to translate complex workflows into intuitive user experiences. Collaborate with backend teams to design scalable APIs and end-to-end solutions. Influence technical decisions through architecture reviews and design discussions. Mentor senior engineers and help establish a culture of engineering excellence. Improve developer productivity through tooling, automation, CI/CD, and frontend platform initiatives. Stay current with emerging frontend technologies and evaluate their adoption where appropriate. Lead technical initiatives spanning multiple engineering teams. What You'll Bring Required Qualifications 12+ years of software engineering experience, with at least 8+ years focused on frontend development. Deep expertise in JavaScript, TypeScript, HTML5, and CSS3. Strong experience with React and modern frontend ecosystems. Proven experience designing large-scale SPA architectures. Strong understanding of state management (Redux, Zustand, Context API, MobX, or similar). Experience with micro-frontend architectures. Expertise in frontend performance optimization and web vitals. Experience building reusable component libraries and design systems. Strong understanding of REST APIs, GraphQL, and frontend-backend integration. Experience with automated testing using Jest, React Testing Library, Cypress, or Playwright. Familiarity with modern build tools including Vite, Webpack, Rollup, or ESBuild. Experience with CI/CD pipelines and cloud-native development environments. Strong debugging and performance profiling skills. Excellent communication and stakeholder management skills. Preferred Qualifications Experience building enterprise SaaS products. Experience with cloud platforms such as AWS, Azure, or GCP. Familiarity with Kubernetes and containerized deployments. Experience with Node.js and backend development. Knowledge of security best practices, including OAuth2, JWT, SSO, and secure frontend development. Experience with accessibility (WCAG 2.1 AA) and internationalization. Exposure to AI-assisted developer tools and AI-powered user experiences. Contributions to open-source projects or technical communities. Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.

Location: New York, NY (HQ) Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE Corporate Security at Ramp owns the identity and access layer for the company: Okta, Google Workspace, the SaaS applications behind them, and the governance that decides who holds what. We are hiring a Senior Security Engineer, Identity, to turn that layer into IAM as a service — a platform the rest of Ramp can use without filing a ticket.   The role is hands-on. You will design how identity works at Ramp and write the code that implements it: identity configuration in Terraform, entitlements created and governed through an agentic workflow, and an on-call agent that answers access questions before anyone has to ask a person. As more access flows between applications and AI agents rather than people, you will own how those identities are issued, scoped, and audited.   You will report to the Corporate Security lead and work closely with IT, Security Engineering, AI DevX, and the Data team. WHAT YOU'LL DO - Own Terraform for identity services: Okta applications, authorization servers, authentication policies, groups and group rules, and SCIM provisioning - Design and operate custom authorization servers, including audiences, scopes, claims, and access policies for internal services and AI agents - Implement app-to-app and agent access through Cross App Access (XAA) and ID-JAG, so delegated access is brokered and governed by the IdP rather than granted user by user - Own our IGA platform: the entitlement catalog, ownership, access requests, time-bound grants, and certifications - Build the agentic workflow that takes a team from "I have a new group of people who need access to X" to a defined, owned, and governed entitlement, with the Terraform and IGA changes opened for review - Build identity graphs with ISPM tooling to target overprivileged and long-standing access across human and non-human identities - Build the identity data lake behind an on-call agent that can explain events like a User Not Assigned Application error in Okta before the employee opens a ticket WHAT YOU NEED - 6+ years in identity engineering or IAM, including operational ownership of Okta or an equivalent identity provider at scale - Deep understanding of OAuth 2.0, OIDC, SAML, and SCIM, including how custom authorization servers issue and enforce aud, scope, and claims - Working knowledge of how XAA and ID-JAG work under the hood, including token exchange and JWT bearer grants - Experience with ISPM or identity graph tooling, and turning its findings into automated remediation - Experience owning an IGA platform or building the equivalent in-house - Terraform experience managing identity providers, including module design, state, and CI - Programming in Python or Go, with experience building against platform APIs BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: Intellias Meet your recruiter Diana Meneses diana.meneses@intellias.com https://www.linkedin.com... Vacancy details Software Engineering Python Engineer Senior United States Remote APPLY NOW REFER A FRIEND We are looking for a Senior Interoperability Engineer to build and scale healthcare integrations for a Digital Health platform connecting providers, payers, clinical systems, and external healthcare networks. This is a hands-on engineering role focused on Python, Kafka, high-scale APIs, healthcare interoperability, and secure data exchange. What project we have for you The platform connects healthcare data from multiple clinical and administrative systems and makes it available through secure, standards-based APIs. The Interoperability domain is responsible for building and operating integrations with external healthcare systems, processing high-volume data exchange, and providing reliable APIs consumed by internal products and partners. The engineering environment is based on Python, event-driven architecture, Kafka, REST/FHIR APIs, OAuth-based security, and cloud-native services. What you will do Design and develop scalable healthcare interoperability services and APIs . Build event-driven integrations using Python and Kafka . Implement and support FHIR-based healthcare data exchange. Develop secure APIs using OAuth 2.0/OIDC and JWT . Integrate external healthcare systems, data providers, and partner APIs. Implement data validation, transformation, mapping, and error-handling logic required for interoperability workflows. Troubleshoot complex integration, authentication, and distributed-system issues. Improve API performance, scalability, reliability, and observability. Build automated tests covering API behavior and integration scenarios. Participate in architecture discussions, code reviews, and engineering standards. What you need for this Requirements: 5+ years of professional backend or integration engineering experience. Strong hands-on experience with Python in production environments. Experience designing and operating high-scale REST APIs and backend services . Strong experience with Kafka or comparable event-streaming technologies. Solid understanding of distributed and event-driven architectures . Strong experience with API authentication and authorization, including OAuth 2.0, OIDC, and JWT . Experience integrating external systems and APIs in complex enterprise environments. Hands-on experience with FHIR or healthcare interoperability APIs . Strong understanding of API reliability, error handling, retries, idempotency, and observability. Experience with SQL and/or NoSQL databases. Experience with Docker, cloud-native environments, and CI/CD. Strong troubleshooting and production problem-solving skills. Nice to Have: Experience with FHIR R4, SMART on FHIR, US Core, or USCDI . Knowledge of HL7 v2 or CDA/C-CDA . Experience integrating EHR/EMR, payer, HIE/HIN, pharmacy, or laboratory systems. Experience with Patient Access APIs, Bulk FHIR, or CMS interoperability requirements . Experience with Kubernetes and AWS. Healthcare or Digital Health domain experience. Experience using AI-assisted engineering tools in day-to-day software development. What it’s like to work at Intellias At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth. We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law. We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success. Skills Healthcare Kafka Python

Задачи: — Проводить security review AI/LLM-решений: LLM-приложений, AI-агентов, RAG, векторных БД, интеграций с внешними API и облачными LLM; — Участвовать в threat modeling AI-решений: prompt injection, jailbreak, утечки данных, небезопасные tool calls, избыточные привилегии AI-агента, RAG/data poisoning; — Проверять наличие и корректность защитных механизмов: guardrails, фильтры персональных данных, ограничения длины prompt/response, rate limiting, валидация ответов, контроль вызовов tools; — Оценивать безопасность работы с данными: персональные данные, конфиденциальная информация, источники данных для RAG, embeddings, индексы векторных БД; — Проверять, что AI-агенты работают по принципу минимально необходимых привилегий и не выполняют чувствительные операции без ручного подтверждения; — Проверять изоляцию пользовательских сессий, контекстов и памяти AI-решений; — Участвовать в проверке безопасности локального запуска LLM в Kubernetes: контейнеры, RBAC, secrets, network policies, ingress, resource limits; — Формировать требования к логированию, аудиту и трассировке AI-решений: trace ID, логи prompt/response, вызовы модели, вызовы tools, действия AI-агента; — Разрабатывать тестовые сценарии для проверки AI-решений на prompt injection, утечки данных, обход ограничений и небезопасное поведение агента; — Помогать командам разработки и эксплуатации безопасно использовать локальные и облачные LLM. Требования: — Опыт в кибербезопасности от 2–3 лет в одной или нескольких областях: Application Security, DevSecOps, Cloud Security, Kubernetes Security, API Security, Product Security; — Понимание принципов security review, threat modeling и безопасной разработки; — Понимание web/API-безопасности: аутентификация, авторизация, OAuth2/OIDC, SAML, JWT, RBAC, service-to-service-взаимодействие; — Базовое понимание AI/LLM-стека: LLM, prompt, system prompt, context window, embeddings, RAG, vector database, AI-agent, agent memory, tools/function calling; — Понимание основных рисков LLM-приложений: prompt injection, indirect prompt injection, jailbreak, утечка чувствительных данных, раскрытие system prompt, небезопасная обработка ответа модели, excessive agency; — Понимание особенностей безопасности RAG и векторных БД: например, Milvus, Qdrant, Weaviate, pgvector, Chroma, Elasticsearch/OpenSearch vector search; — Понимание рисков работы с персональными и конфиденциальными данными при использовании локальных и облачных LLM; — Базовое понимание Kubernetes и контейнерной безопасности: secrets, service account, RBAC, network policy, resource limits; — Умение формулировать понятные и проверяемые требования безопасности для продуктовых команд. Что мы ищем в кандидатах: — Опыт security review AI/LLM, RAG, чат-ботов, AI-ассистентов или агентских решений; — Знакомство с OWASP Top 10 for LLM Applications, OWASP Agentic AI Threats, MITRE ATLAS, NIST AI RMF; — Понимание безопасности agent tools/function calling: allowlist tools, схемы входных параметров, контроль прав, human-in-the-loop; — Опыт работы с SIEM/security logging: проектирование событий безопасности, аудит действий, расследование инцидентов; — Понимание подходов к безопасному исполнению кода, сгенерированного моделью: sandbox, изоляция контейнеров, запрет доступа к secrets, ограничения сети и ресурсов; — Базовые навыки Python, работы с JSON/YAML, API-тестирования или автоматизации security checks. Будет плюсом: — Опыт с OpenAI/Azure OpenAI, AWS Bedrock, Google Vertex AI, Anthropic или другими LLM-провайдерами; — Опыт с локальными open-source LLM и inference-сервисами; — Опыт настройки или проверки guardrails, фильтров персональных данных, DLP-подходов, content moderation; — Опыт участия в AI red teaming или разработке тестов на prompt injection и data leakage. Условия: — Формат: Гибридный (от 2-х дней в неделю, м. Технопарк); — Бесплатный доступ к телемедицине и очным приемам в частных клиниках (включая стоматологию и сессии с психологами); — Условия ипотечного кредитования от Сбербанка; — Индивидуальный план развития; — Английский язык с корпоративным преподавателем и скидки на курсы в Skyeng, компенсация обучения от ведущих платформ; — Официальное оформление, стабильные выплаты, оплата больничного и отпуска, современная техника; — Частичная компенсация спортивного абонемента, бесплатные занятия сквошем и футболом.

- Проводить анализ защищённости приложений, сервисов и смарт-контрактов. - Выполнять Security Code Review, Security Design Review и моделирование угроз.