Sr. Java Developer - Authentication and Application Security

• Lead the architecture and design of a custom authentication platform to replace existing solutions.
• Evaluate open-source authentication frameworks and recommend a secure and sustainable platform.
• Provide expertise across authentication, authorization, identity management, and application security.
• Partner with senior Java architects and developers to establish technical direction.
• Guide implementation using Java, microservices, Spring, and Spring Security.
• Define secure architectural patterns for user authentication across multiple websites and applications.
• Advise on SSO, federated identity, token-based authentication, one-time passwords, and passwordless options.
• Establish security standards, technical controls, and implementation guidelines.
• Identify architectural risks, vulnerabilities, scalability concerns, and operational challenges early.
• Provide practical guidance based on prior authentication-platform experience, including anti-patterns and lessons learned.
• Support evaluation and selection of supporting technologies.
• Collaborate with engineering, architecture, product, and senior leadership stakeholders.
• Assist with migration planning from the current environment to the new platform.
• Leverage approved AI-assisted development tools while maintaining security, quality, and oversight.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance., * Approximately 10+ years in software engineering, application security, identity engineering, or related fields.

• Deep expertise in authentication, authorization, identity management, and application security.
• Direct experience building, architecting, implementing, or leading an enterprise authentication platform.
• Strong understanding of modern authentication standards and security practices.
• Experience with Java-based applications, microservices, and Spring technologies.
• Experience evaluating or implementing open-source authentication frameworks.
• Knowledge of Spring Security, SSO, SAML, JWT, one-time password, and passwordless authentication.
• Ability to influence architect-level engineers and design decisions.
• Ability to distinguish secure, sustainable solutions from risky or hard-to-maintain approaches.
• Strong communication skills with engineering leaders, product stakeholders, and senior management.
• Ability to work independently in a fully remote environment with a distributed team.
• Preferred: prior end-to-end design of an authentication platform and migration from commercial services.
• Preferred: experience supporting multiple high-traffic consumer websites and seasonal traffic patterns.
• Preferred: background as a senior application security engineer, identity architect, or security architect.
• Preferred: leadership of authentication-platform modernization or migration initiatives.
• Preferred: familiarity with additional modern identity standards and enterprise AI-assisted engineering tools.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.

If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:

· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.

Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients’ capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve.