Software Engineer II - Identity Security Posture Management (ISPM)

Why this role exists

To address rapidly escalating customer demand, the BIS organization is growing its team dedicated to Identity Security Posture Management (ISPM). ISPM provides ongoing tracking of an enterprise's identity setups—including Okta, Google Workspace, and Microsoft Entra—revealing hidden vulnerabilities that build up across these networks. It packages these insights into an intuitive, actionable format, empowering security teams to understand their current defense status and prioritize critical remediation efforts.

With identity now serving as the main attack vector for modern enterprises, having complete visibility to understand every identity in your environment and proactively eliminate risk before it's exploited is more essential than ever. As one of Abnormal's fastest-growing divisions, ISPM is seeking a Software Engineer to help build the next generation of identity security defenses.

About the role

This is a hands-on engineering role at the intersection of identity security and distributed systems engineering. You'll write code, build and scale backend services, and contribute to technical designs — while partnering closely with senior engineers and Product Management to deliver what we build next.

You'll work across the backend: services that continuously evaluate millions of identity configurations, and the data infrastructure that powers posture scoring and proactive risk remediation.

What you'll do

Technical Contribution & Design

• Take well-defined problems from product requirements and deliver backend solutions end-to-end — from data modeling through APIs and evaluation logic.
• Contribute to the design of core identity security posture systems, and author and review technical design documents.
• Participate in architectural discussions and design reviews, raising trade-offs and edge cases.
• Uphold engineering best practices across testing, code quality, API design, and observability.

Software Engineering & Architecture

• Construct and scale high-performance backend services using Go — including event-driven systems, REST/gRPC APIs, cron jobs, and integration layers.
• Design, model, and optimize database schemas capable of handling large-scale multi-tenant identity workloads.
• Implement event-driven workflows using Kafka as a message queue to manage asynchronous processing and ensure continuous evaluation of identity postures.
• Maintain operational reliability and service health through standard runbooks, feature flags, and robust monitoring setups.

Team Collaboration & Delivery

• Collaborate closely with TL, the EM, and fellow engineers to align on feature scope, prioritize work, and deliver quarterly key results and milestones.
• Participate in on-call rotation, incident response, and SLO management.
• Work autonomously and asynchronously within a distributed team located across India and Singapore.

Must have qualifications

• 4+ years of software development experience, with ~2 years building production-grade backend services.
• Extensive backend production experience with Go — writing idiomatic services with clean design patterns, thorough testing, and robust error handling.
• Good system design