Senior Backend & Identity Engineer — Sovereign Deployment

Company Description

AFAQ AI develops institutional software solutions for private-market valuation, portfolio intelligence, and asset management. Its flagship platform, AFAQ Value, streamlines investment processes for sovereign wealth funds, private equity firms, banks, and investment teams by transitioning from fragmented manual processes to governed, audit-ready workflows.

What you will own

• OIDC/SAML SSO integration with a sovereign identity provider, with MFA enforcement

• Server-side JWT verification, RBAC, and fund-level access checks across the backend

• Core Backend Monolith architecture and oversight of module implementation in Python

• Postgres schema design and Object Storage layout for a regulated, encrypted data platform

• Workflow orchestration, report orchestration, and authentication modules

• Backup, restore, and disaster recovery procedures inside the sovereign network

Required experience

• At least one production OIDC or SAML SSO integration against an enterprise identity provider — Okta, Azure AD, Ping, ForgeRock, Keycloak, or sovereign IdP

• Server-side JWT verification and RBAC at production scale, with role and resource-level access checks

• Backend monolith or modular monolith API design in Python (FastAPI, Django) or TypeScript, with Postgres

• Deployment into a regulated environment with explicit network segmentation, allowlisted egress, or air-gapped constraints

• Append-only audit trail design, immutable storage patterns, or regulated logging work — SOC2, ISO 27001, PCI, or equivalent

Preferred experience

• Prior work with sovereign wealth funds, central banks, or tier-1 institutional clients

• Financial services backend experience — private markets, asset management, banking

• Direct experience with no-egress private network topologies