> Markdown version of [/jobs/ext/2830667-senior-java-software-engineer-iam](https://www.wearedevelopers.com/jobs/ext/2830667-senior-java-software-engineer-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Java Software Engineer (IAM)

- **Company:** HEXA CONSULTING CORP.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), User Authentication, Cloud Computing Security, Code Review, Continuous Integration, DevOps, Distributed Systems, Multi-Factor Authentication, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), PostgreSQL, OAuth, Open Source Technology, Role-Based Access Control, Openid Connect, Zero Trust Network Access, Security Assertion Markup Language (SAML), Secure Coding, Session Management, Software Engineering, Okta, System Availability, Backend, Containerization, Low Latency, Front End Software Development, Microservices
- **Published:** September 10, 2026
- **Apply:** https://arc.dev/remote-jobs/j/redirect/pj283cvhsn

## About the Role

More than 10 years of professional backend software engineering experience, with strong exposure to IAM and security domains.

 - Advanced experience designing distributed systems with high availability, low latency and resilient identity migration approaches.

 - Strong ability to work with autonomy, ownership and a structured engineering mindset.

 - Collaborative, responsible and solution-oriented profile, able to communicate clearly with multidisciplinary teams.

 - Experience supporting technical standards, maintainability and secure development practices across backend solutions.

TECHNICAL SKILLS

 - Java

 - Keycloak

 - IAM

 - OAuth 2.0

 - OpenID Connect

 - SAML 2.0

 - PKCE

 - JWT

 - RBAC

 - ABAC

 - Kubernetes

 - Docker

 - CI/CD

 - LDAP

 - PostgreSQL

 - Microservices

 - Distributed systems

 - Zero-trust security principles

 - Authentication and authorization flows

 - Secure session and token management, Multi-factor authentication

 - Experience contributing to open-source IAM or security projects

 - CISSP, CCSP or cloud security certifications

## Description

Design, build and maintain backend services and microservices for identity and access management using Java.

 - Customize, extend and optimize Keycloak deployments, including custom SPIs, authenticators and event listeners.

 - Implement secure authentication and authorization flows based on OAuth 2.0, OpenID Connect and SAML 2.0.

 - Define scalable access control models, session management practices and token handling mechanisms.

 - Collaborate with frontend, mobile, DevOps and security teams to integrate IAM capabilities across distributed systems.

 - Support engineering quality through code reviews, technical guidance and knowledge sharing on backend and security best practices.