Senior Java Software Engineer (IAM)

Design, build and maintain backend services and microservices for identity and access management using Java.

• Customize, extend and optimize Keycloak deployments, including custom SPIs, authenticators and event listeners.

• Implement secure authentication and authorization flows based on OAuth 2.0, OpenID Connect and SAML 2.0.

• Define scalable access control models, session management practices and token handling mechanisms.

• Collaborate with frontend, mobile, DevOps and security teams to integrate IAM capabilities across distributed systems.

• Support engineering quality through code reviews, technical guidance and knowledge sharing on backend and security best practices.

More than 10 years of professional backend software engineering experience, with strong exposure to IAM and security domains.

• Advanced experience designing distributed systems with high availability, low latency and resilient identity migration approaches.

• Strong ability to work with autonomy, ownership and a structured engineering mindset.

• Collaborative, responsible and solution-oriented profile, able to communicate clearly with multidisciplinary teams.

• Experience supporting technical standards, maintainability and secure development practices across backend solutions.

TECHNICAL SKILLS

• Java

• Keycloak

• IAM

• OAuth 2.0

• OpenID Connect

• SAML 2.0

• PKCE

• JWT

• RBAC

• ABAC

• Kubernetes

• Docker

• CI/CD

• LDAP

• PostgreSQL

• Microservices

• Distributed systems

• Zero-trust security principles

• Authentication and authorization flows

• Secure session and token management, Multi-factor authentication

• Experience contributing to open-source IAM or security projects

• CISSP, CCSP or cloud security certifications

A remote opportunity where you can contribute to relevant technology solutions while working with autonomy and responsibility.

• Continuous learning and certification support to strengthen your long-term professional development.

• Private health insurance from day one, with optional family extension.

• Confidential mental health support through dedicated professional services.

• Flexibility whenever the role and project context allow it, supporting balance across different life stages.

• Access to upskilling opportunities in information security and cybersecurity best practices.