LDAP 软件工程师

All roles at JumpCloud® are Remote unless otherwise specified in the Job Description.
About JumpCloud®
JumpCloud® is the AI-powered unified IT management platform designed to secure the modern workforce. By consolidating identity, device, and access management, JumpCloud provides intelligent, secure IT that scales from human users to autonomous AI agents. We help organizations around the globe eliminate complexity and turn AI risk into an optimized advantage, ensuring the right people and agents have secure access to the right resources at all times.
 
JumpCloud is Intelligent, Secure IT.

About the Role
As a Software Engineer II on the Cloud LDAP team, you will build, scale, and operate JumpCloud’s LDAP-as-a-Service: the systems that let customers authenticate and look up users and groups over LDAP against the JumpCloud directory.
You will work with a globally distributed engineering team on high-availability LDAP infrastructure—protocol handling, directory sync, replication, and edge serving—primarily on our Go, Python, and/or Node.js backend stacks. This role is LDAP development. You will implement and maintain LDAP protocol behavior, directory data pipelines, and the services in front of our OpenLDAP clusters, and you will use AI-assisted development tools ( Cursor, Gemini, Claude etc) to ship high-quality code faster.

What You Will Do:
What You Will Do

LDAP platform development: Design, implement, test, and deploy scalable, secure services that power Cloud LDAP, including protocol proxies, sync workers, and supporting APIs.

Protocol & directory behavior: Own backend work for LDAP operations customers rely on—bind (including MFA-aware bind flows), search, compare, and related directory semantics (DNs, filters, attributes, schemas, ACLs).

Sync, replication, and availability: Contribute to how directory changes flow into LDAP (async create/update/delete), how data is replicated to regional read replicas, and how the service stays available under load and during failover.

Edge & proxy services: Work on the LDAP request path (load balancing, connection limits, TLS/STARTTLS, eventing/observability, password handling, and related edge protections).

AI-driven efficiency: Use AI coding assistants to generate code, write solid automated tests, and speed up debugging—without skipping review or operational rigor.

Cloud infrastructure: Run containerized services with Docker and Kubernetes and operate cloud-native components on AWS (EC2, S3, Lambda, DynamoDB, and related services).

Quality & automation: Add automated tests for new LDAP features and legacy paths, and use CI/CD to keep quality gates in place.

Collaborative engineering: Partner with product and senior engineers across time zones on requirements, feasibility, and thorough code reviews. Participate in on-call for production LDAP alerts.

What We’re Looking For:
What We’re Looking For

Experience: 3–5 years of professional software development, with a strong emphasis on backend systems, networked services, and APIs.

Core technical stack: Proficiency in Go, C++, Node.js, and/or Python.

LDAP & directory foundations: Solid understanding of LDAP (or a closely related directory protocol). Comfort with bind/search, DNs, filters, schemas, TLS/STARTTLS, and how applications (Linux, NAS, custom clients, Samba, and similar) consume LDAP. OpenLDAP, 389 Directory Server, Active Directory LDAP, or similar experience is a strong plus.

Distributed systems: Practical experience with high-availability services, messaging/queues, replication, or proxy/load-balancer request paths.

Cloud & DevOps basics: Experience deploying on AWS and a working understanding of Kubernetes and/or Infrastructure as Code (e.g. Terraform).

AI tool fluent: Demonstrated use of AI coding assistants to increase velocity, find bugs, and improve code quality.

Education: Bachelor’s degree in Computer Science, Software Engineering, or a related field.

Nice to Have

Experience with OpenLDAP overlays, replication (provider/consumer), or LDAP proxy/middleware.

Familiarity with directory sync from an identity source of truth, service meshes, or HAProxy/Consul-style service discovery.

Comfort debugging protocol-level issues with tools such as ldapsearch, packet captures, or server logs.

Where you’ll be working/Location:
JumpCloud is committed to being Remote First, meaning that you are able to work remotely within the country noted in the Job Description.
 
You must be located in and authorized to work in the country noted in the job description to be considered for this role. 
 
Please note: There is an expectation that our engineers participate in on-call shifts. You will be expected commit to being ready and able to respond during your assigned shift, so that alerts don't go unaddressed.
 
Language:
JumpCloud has teams in 15+ countries around the world and conducts our internal business in English. The interview and any additional screening process will take place primarily in English. To be considered for a role at JumpCloud, you will be required to speak and write in English fluently.  Any additional language requirements will be included in the details of the job description.
 
Why JumpCloud?  
If you thrive working in a fast, SaaS-based environment and you are passionate about solving challenging technical problems, we look forward to hearing from you! JumpCloud is an incredible place to share and grow your expertise! You’ll work with amazing talent across each department who are passionate about our mission. We’re out of the box thinkers, so your unique ideas and approaches for conceiving a product and/or feature will be welcome. You’ll have a voice in the organization as you work with a seasoned executive team, a supportive board and in a proven market that our customers are excited about.  
 
One of JumpCloud's three core values is to “Build Connections.” To us that means creating " human connection with each other regardless of our backgrounds, orientations, geographies, religions, languages, gender, race, etc. We care deeply about the people that we work with and want to see everyone succeed." - Rajat Bhargava, CEO
 
Please submit your résumé and brief explanation about yourself and why you would be a good fit for JumpCloud.  Please note JumpCloud is not accepting third party resumes at this time.   
 
JumpCloud is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
 
Scam Notice:
Please be aware that there are individuals and organizations that may attempt to scam job seekers by offering fraudulent employment opportunities in the name of JumpCloud. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers. Please note that JumpCloud will never ask for any personal account information, such as credit card details or bank account numbers, during the recruitment process. Additionally, JumpCloud will never send you a check for any equipment prior to employment.
 
All communication related to interviews and offers from our recruiters and hiring managers will come from official company email addresses (@jumpcloud.com) and will never ask for any payment, fee to be paid or purchases to be made by the job seeker. If you are contacted by anyone claiming to represent JumpCloud and you are unsure of their authenticity, please do not provide any personal/financial information and contact us immediately at recruiting@jumpcloud.com with the subject line "Scam Notice" 
 
#LI-Remote #BI-Remote