Senior Java Backend Engineer

Assignment Description We are seeking a Senior Java Backend Engineer to develop IAM capabilities for a platform providing secure product access for millions of users. You will build, customize, and operate identity services, implement and maintain authentication and authorization flows, and drive security best practices. The role includes ownership from design through deployment, observability, and incident response, supporting audits and compliance, and collaborating with product, security, and platform teams to deliver reliable, scalable solutions. Required Qualifications: Experience with Kubernetes, Docker, CI/CD pipelines, and at least one major cloud platform, either AWS or Azure. In-depth understanding of JWT, SAML, OAuth 2.0, and OpenID Connect, alongside a security-first approach and experience supporting audits and compliance requirements. Demonstrated hands-on experience deploying Keycloak in real-world environments, including customizations using SPIs and providers, together with solid database skills, for example in PostgreSQL, and familiarity with caching used in Keycloak deployments, such as Infinispan or Redis. Strong experience in Java backend development, including developing microservices and running them in production, and demonstrated experience in the design and production operation of distributed systems and microservices. It is considered an advantage if you have experience with CIAM at scale, covering customer identity, identity resolution, or account deduplication. Experience with WebAuthn/FIDO2/passkeys, Zero Trust architectures, or PKI is also considered an advantage, as is experience with event-driven architectures, such as Kafka, and observability tools such as Prometheus, Grafana, and OpenTelemetry.