Java Back End Developers with IAM

1. 12+ years of experience in Design, develop, and maintain secure, scalable, and high-performance backend services and microservices using Java 17/21 and the Spring Boot ecosystem.
2. Lead the implementation of enterprise Identity and Access Management (IAM) solutions, including Single Sign-On (SSO), federation, and identity lifecycle management across cloud and hybrid environments.
3. Architect and integrate authentication and authorization frameworks utilizing OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM, JWT, and other modern identity standards.
4. Design and implement fine-grained access control mechanisms, including Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and policy-driven authorization models.
5. Integrate applications and services with enterprise Identity Providers (IdPs) such as Ping Identity, ForgeRock, Okta, Auth0, AWS Cognito, and Microsoft Entra ID (Azure AD).
6. Develop and support secure integrations with directory services and identity stores, including LDAP, Active Directory, cloud directories, and user provisioning systems.
7. Build and maintain RESTful APIs and event-driven integrations while ensuring secure token management, data protection, and adherence to security best practices.
8. Collaborate with security, architecture, and product teams to perform threat modeling, security reviews, vulnerability remediation, and compliance-driven development activities.
9. Implement fraud prevention and risk-based authentication capabilities by integrating digital identity intelligence, device fingerprinting, and adaptive authentication solutions.
10. Contribute to the continuous improvement of platform security, scalability, and reliability through code reviews, performance optimization, automated testing, and DevSecOps best practices.

Preferred Skills:

• Experience with Transmit Security for identity orchestration, passwordless authentication, and customer identity journeys.
• Experience with LexisNexis ThreatMetrix or similar fraud detection and digital identity intelligence platforms.
• Strong understanding of web security concepts including TLS, CORS, secure cookies, session management, and API security.
• Familiarity with cloud-native architectures, containerization, Kubernetes, and CI/CD pipelines.