Java Developer (IAM &AWS)
Role details
Job location
Tech stack
Job description
We are looking for a Senior Full Stack Developer with strong IAM expertise to lead the development and modernization of secure, enterprise-scale platforms. This role is unique it requires a developer who can bridge the gap between a modern React frontend and a robust Java backend, all while serving as the subject matter expert for Identity & Access Management (IAM) within a cloud-native AWS environment. You will be responsible for building secure user experiences, implementing complex authorization logic, and ensuring that our entire cloud infrastructure follows the principle of least privilege., * Full Stack Development: Build and maintain high-performance, responsive frontends using React and scalable backend services using Java (Spring Boot / Microservices).
- Identity Architecture: Design and implement end-to-end IAM workflows, including user registration, Multi-Factor Authentication (MFA), and Single Sign-On (SSO).
- Secure API Design: Develop and secure RESTful APIs, ensuring seamless integration between the React UI and Java services using modern security tokens.
- Cloud Infrastructure: Architect and manage AWS IAM policies, roles, and identity providers (e.g., Cognito) to secure AWS resources like Lambda, S3, and EKS.
- Protocol Implementation: Direct hands-on implementation of OAuth2, OpenID Connect (OIDC), and SAML 2.0 flows for both internal and external users.
- Security Integration: Integrate enterprise IAM platforms (such as ForgeRock, Okta, Ping, or Keycloak) with custom-built React/Java applications.
- CI/CD & DevSecOps: Collaborate with DevOps to automate security scanning and deployment pipelines using Terraform or AWS CDK.
Requirements
- Java Expert: Extensive experience with Java (17+) and Spring Boot, specifically Spring Security for OAuth2 resource server implementation.
- React Specialist: Strong proficiency in React (18+), including state management (Redux/Context), Hooks, and integrating with Auth libraries (Amplify, OIDC-client).
- IAM Core: Deep understanding of IAM protocols (SAML, OAuth2, OIDC, SCIM) and hands-on experience with at least one major IAM vendor (ForgeRock, Okta, or Ping).
- AWS Mastery: Proven experience managing AWS IAM (Policies, Roles, Identity Center) and cloud-native services (Lambda, EC2, S3).
- Security Mindset: Knowledge of the OWASP Top 10 and experience implementing secure coding practices in a full-stack environment.
- Testing & Debugging: Proficiency in debugging complex authentication flows across the network, browser, and server logs.