Senior Java Engineer - Security Evolution

Job Description We are seeking a Senior Java Developer to support enterprise identity and access management (IAM) integration across complex legacy and modern applications. The engineer will investigate how applications store identities, roles and permissions, implement reliable JDBC and service-based integrations, and deliver secure user/entitlement data feeds to SailPoint or similar IAM platforms. This role requires hands-on Java development, strong SQL and database skills, and the ability to understand unfamiliar application authorization models and support production implementations., Reverse engineer existing Java and legacy applications to document authentication, authorization, user/role tables, service accounts, entitlements, dependencies and application-to-database relationships. Design, develop, test and support Java-based integrations using JDBC, REST and SOAP interfaces for identity, account, role and access data. Implement and maintain secure extraction services and interfaces to enterprise IAM platforms, including SailPoint integrations where applicable. Analyze custom authorization logic and map application-specific roles, permissions and accounts to standardized entitlement and certification data requirements. Work with application owners, security analysts, IAM engineers and production support to validate functional behavior and close discovery gap

Java, database and security engineering Develop and maintain backend functionality using Java, Spring Framework / Spring Boot and Hibernate/JPA as appropriate to existing application architecture. Build and optimize Oracle and Microsoft SQL Server queries, views, stored procedures and data extraction logic; troubleshoot performance and connectivity issues. Configure and troubleshoot JDBC drivers, service account permissions, connection pools, API authentication and error handling. Apply least-privilege service account practices, secure credential handling, auditing, logging and appropriate access controls. Perform unit, integration and regression tests; reconcile extracted identity and entitlement records against application source data.

Delivery and support Create interface specifications, source-to-target field mappings, technical design notes, operational runbooks and deployment documentation. Collaborate on prototypes, testing, release readiness and production deployments; investigate integration defects, failed extracts and data mismatches. Participate in code reviews, defect triage, root-cause analysis and operational handover to support teams.

6-7 years of applicable enterprise software development experience preferred, proven experience with Java and backend integration. Hands-on Java development with Spring or Spring Boot and Hibernate/JPA; strong understanding of SQL, JDBC and application/database integration. Experience developing against Oracle and Microsoft SQL Server, including SQL performance tuning and troubleshooting. Practical experience designing, consuming or maintaining REST and SOAP web services. Experience investigating existing application source code, data models, custom security or authorization mechanisms. Understanding of user accounts, groups, roles, permissions, service accounts and IAM integration concepts. Strong debugging, test automation, documentation and production-support collaboration skills. Working knowledge with AI tools like Claude, Cursor or Copilot.

Desired Skills & Experience - Preferred Qualifications Hands-on SailPoint integration or exposure to identity governance and access certification feeds. Experience building user, role and entitlement extracts for access reviews or certification workflows. Familiarity with Informatica PowerCenter, scheduled ETL workflows or secure file-based delivery. Experience with Git, CI/CD, Agile delivery and enterprise security controls. Experience with mainframe data sources (DB2/z/OS), JCL batch outputs, COBOL-based systems or fixed-width flat files. Insurance or other regulated-industry systems experience; working knowledge of mainframe interfaces or DB2 is a plus.