Sr. Java Developer - Authentication and Application Security

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance., * Experience evaluating or implementing open-source authentication frameworks. \n

• Knowledge of Spring Security, SSO, SAML, JWT, one-time password, and passwordless authentication. \n

• Ability to influence architect-level engineers and design decisions. \n

• Ability to distinguish secure, sustainable solutions from risky or hard-to-maintain approaches. \n

• Strong communication skills with engineering leaders, product stakeholders, and senior management. \n

• Ability to work independently in a fully remote environment with a distributed team. \n

• Preferred: prior end-to-end design of an authentication platform and migration from commercial services. \n

• Preferred: experience supporting multiple high-traffic consumer websites and seasonal traffic patterns. \n

• Preferred: background as a senior application security engineer, identity architect, or security architect. \n

• Preferred: leadership of authentication-platform modernization or migration initiatives. \n

• Preferred: familiarity with additional modern identity standards and enterprise AI-assisted engineering tools. \n

n \n

• Lead the architecture and design of a custom authentication platform to replace existing solutions. \n

• Evaluate open-source authentication frameworks and recommend a secure and sustainable platform. \n

• Provide expertise across authentication, authorization, identity management, and application security. \n

• Partner with senior Java architects and developers to establish technical direction. \n

• Guide implementation using Java, microservices, Spring, and Spring Security. \n

• Define secure architectural patterns for user authentication across multiple websites and applications. \n

• Advise on SSO, federated identity, token-based authentication, one-time passwords, and passwordless options. \n

• Establish security standards, technical controls, and implementation guidelines. \n

• Identify architectural risks, vulnerabilities, scalability concerns, and operational challenges early. \n

• Provide practical guidance based on prior authentication-platform experience, including anti-patterns and lessons learned. \n

• Support evaluation and selection of supporting technologies. \n

• Collaborate with engineering, architecture, product, and senior leadership stakeholders. \n

• Assist with migration planning from the current environment to the new platform. \n

• Leverage approved AI-assisted development tools while maintaining security, quality, and oversight. \n

\n

Experience Requirements

\n \n

• Approximately 10+ years in software engineering, application security, identity engineering, or related fields. \n

• Deep expertise in authentication, authorization, identity management, and application security. \n

• Direct experience building, architecting, implementing, or leading an enterprise authentication platform. \n

• Strong understanding of modern authentication standards and security practices. \n