Senior Java Backend Engineer – Identity & Access Management (IAM / Keycloak)

We are looking for an experienced Senior Java Backend Engineer with strong hands-on expertise in Identity and Access Management (IAM) to join an exciting project focused on building and enhancing secure, scalable authentication and authorization services.

You will work on a modern identity platform that enables millions of users to securely access digital products and services.

The ideal candidate combines strong Java backend development skills with practical experience in Keycloak, authentication protocols, identity federation and cloud-native microservices.

Key Responsibilities

• Design, develop, maintain and operate secure IAM solutions using Keycloak and Java microservices.

• Customize and extend Keycloak using Service Provider Interfaces (SPIs), custom providers, user federation and themes.

• Develop and maintain authentication and authorization flows using OAuth 2.0, OpenID Connect (OIDC), SAML and Multi-Factor Authentication (MFA).

• Implement secure token handling, session management and identity federation.

• Design and develop scalable, reliable Java/Spring Boot microservices.

• Apply security best practices, including threat modeling, secure coding and compliance requirements.

• Take ownership of backend services throughout the development lifecycle, from design and implementation to deployment and production support.

• Monitor application performance, troubleshoot incidents and improve system reliability.

• Collaborate with security, product, platform and development teams to deliver high-quality IAM solutions.

• Contribute to CI/CD automation, technical documentation and continuous platform improvements.

Mandatory Requirements

• Strong professional experience in Java backend development, preferably using Spring Boot and microservices architecture.

• Proven hands-on experience with Keycloak in production environments.

• Experience developing custom Keycloak SPIs, authentication providers or user federation integrations.

• Strong understanding of OAuth 2.0, OpenID Connect, JWT and SAML.

• Experience implementing authentication, authorization and identity federation solutions.

• Solid knowledge of distributed systems and production microservices.

• Experience with relational databases such as PostgreSQL.

• Familiarity with caching technologies such as Infinispan or Redis.

• Hands-on experience with Docker, Kubernetes and CI/CD pipelines.

• Experience with at least one major cloud platform, preferably AWS or Azure.

• Strong understanding of application security, secure token management and session handling.

• Experience supporting production systems, incident management and operational monitoring.

• Good communication skills and the ability to collaborate with cross-functional teams.

Nice to Have

• Experience with Customer Identity and Access Management (CIAM) at scale.

• Experience with identity resolution, customer account management or account deduplication.

• Knowledge of WebAuthn, FIDO2, passkeys or passwordless authentication.

• Understanding of Zero Trust security architecture and Public Key Infrastructure (PKI).

• Experience with event-driven architecture using Apache Kafka.

• Familiarity with monitoring and observability tools such as Prometheus, Grafana and OpenTelemetry.

• Experience with security audits and regulatory compliance.