> Markdown version of [/jobs/ext/4483757-senior-software-engineer-am-auth](https://www.wearedevelopers.com/jobs/ext/4483757-senior-software-engineer-am-auth). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Software Engineer (AM+ Auth) - **Company:** GRAVITEE LLC - **Location:** Denver, CO, United States - **Experience:** Expert - **Salary:** $160,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Audit Trail, User Authentication, Automation of Tests, Software Bug Management, C Sharp (Programming Language), Cloud Engineering, Code Review, Data Stores, Relational Databases, Software Debugging, Identity and Access Management, Java Database Connectivity, Apache Maven, MongoDB, OAuth, Object-Oriented Software Development, Open Source Technology, OpenID, Rxjava, Security Assertion Markup Language (SAML), Software Engineering, Web Services, Openapi, Istio, Retrieval-Augmented Generation, Large Language Models, Apigee, Vert.x, AI Coding Agents, Backend, Git, Kubernetes, Free and Open-Source Software, Api Gateway, Model Context Protocol, Api Management, Docker, Mulesoft, Agent2Agent Protocol - **Published:** October 26, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-software-engineer-am-auth-denver-co--472b4106-90bf-43af-9286-f4d35052cb59 ## About the Role Software Engineering, Application Programming Interface (API), Artificial Intelligence (AI), Startup, DNA, Software Engineering, Authentication, Green Construction, Embedded Systems, Technical/Engineering Design, We are looking for evidence that you can succeed in the role, whether gained through employment, open-source work, or equivalent practical experience: * 5+ years building and running production backend software, on a team that ships and supports its own product; you have personally resolved production incidents. * Strong Java experience (C# accepted if the object-oriented depth is there), with Maven and a reactive stack such as Vert.x/RxJava. * Deep working knowledge of identity standards: OAuth 2.0 and OIDC flows (authorization code + PKCE, client credentials, token exchange), SAML 2.0, SCIM, and FAPI/CIBA/UMA profiles. * Solid grasp of token and session semantics: JWT, JWKS, rotation, revocation, introspection, MFA/step-up, WebAuthn/FIDO2, and IdP federation. * A security-first mindset: secure defaults, certificate and secret handling, audit logging, and awareness of token replay, SSRF, and account-takeover risks. * Experience with safe migrations and backward compatibility across persistent data stores such as MongoDB or JDBCbacked relational databases. * Git-based workflow, code review, and writing your own automated tests. * Hands-on experience using LLMs or AI coding assistants as part of an engineering workflow, combined with the judgment to review and improve their output. * Clear communication, collaborative problem-solving, and the ability to take an ambiguous problem through to production., * Experience at an API gateway, proxy, or service-mesh vendor, or on the API platform team of a large company (e.g., Kong, Google Apigee, MuleSoft, Tyk, Solo.io, Traefik, WSO2). * Kubernetes operators and CRDs; OpenAPI tooling; service mesh or Envoy experience. * Docker, Kubernetes, and cloud-native application delivery. * Model Context Protocol (MCP), Agent2Agent (A2A), tool calling, LLM proxies, or other emerging AI protocols and standards. Prior production experience is not required. * Building or operating LLM-powered applications, RAG systems, or agentic workflows - especially their security, governance, and observability needs. * Open-source software or enterprise developer platforms.Who Thrives at Gravitee ## Description We are looking for a Senior Software Engineer to build and maintain the identity and authorization features of Gravitee Access Management (AM) - across the AM runtime and the access-management experience in Gamma, Gravitee's next generation product surface. This is a new role. Today, AM engineering is based entirely in Europe. This hire establishes US-hours ownership of Level 3 and Level 4 authentication and authorization incidents, and adds delivery capacity toward AM parity in Gamma - part of building sustainable L3/L4 engineering capability in the US. You will split your time roughly 80% feature delivery and 20% L3/L4 support and bug fixing (it varies week to week), working as an embedded member of the AM team, which is based in Europe., * Design and deliver features end to end, from discovery and technical design through implementation, testing, release, and iteration. * Build and maintain identity and authorization features of Gravitee Access Management, across the AM runtime and the AM experience in Gamma. * Implement and support OAuth 2.0 and OIDC flows (authorization code + PKCE, client credentials, token exchange), SAML 2.0 as both IdP and SP, SCIM, and FAPI/CIBA/UMA profiles. * Work with token and session semantics - JWT, JWKS, key rotation, revocation, introspection, MFA and step-up, WebAuthn/FIDO2, and IdP federation and social login. * Keep security behavior and upgrades safe: standards compliance, secure defaults, certificate and secret handling, consent, audit logs, and defenses against token replay, SSRF, and account takeover. * Own safe migrations and backward compatibility across MongoDB and JDBC, and support multi-domain, multi-region deployments and login/token endpoint performance. * Own US-hours Level 3 and Level 4 escalations for AM customers as part of the L3 pager duty rotation. * Use LLMs and AI-assisted development tools thoughtfully for prototyping, implementation, testing, debugging, and exploration, applying sound engineering judgment to validate AI-generated work. * Write meaningful automated tests and contribute to reliable delivery practices. * Collaborate with product managers, designers, engineers, and technical leaders - including the AM team based in Europe - to discover effective solutions and improve them through code and design reviews. * Share what you learn and help the team make practical choices as identity standards and protocols evolve.