Description

Key Responsibilities

• Lead the implementation of secure Single Sign-On (SSO), federation, and identity lifecycle management workflows across cloud and hybrid environments.
• Design and develop secure, scalable microservices using Java 17/21 and Spring Boot.
• Implement and integrate authentication and authorization protocols including:
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • SAML 2.0
  • SCIM
  • JWT
• Apply modern web security practices including TLS, cookies, CORS, and secure token management.
• Work with enterprise identity stores and directory services:
  • LDAP
  • Active Directory / Azure AD
  • Cloud identity platforms
• Build integrations using REST APIs, JSON, and event-driven architectures.
• Implement fine-grained authorization models including:
  • Role-Based Access Control (RBAC)
  • Attribute-Based Access Control (ABAC)
• Integrate applications with IAM/Identity Provider platforms such as:
  • ForgeRock
  • Ping Identity
  • Okta
  • Auth0
  • AWS Cognito
• Support fraud detection and risk-based authentication by integrating risk scoring engines into CIAM workflows.
• Perform threat modeling, secure code reviews, and vulnerability remediation to meet enterprise compliance standards.

Required Skills

• Strong Java backend development experience (Java 17/21).
• Extensive experience with Spring Boot microservices.
• Strong IAM/security engineering background.
• Hands-on experience with authentication and authorization frameworks.
• Experience integrating enterprise Identity Providers and access management solutions.
• Strong understanding of distributed systems and cloud environments

Key Skills

Education

Bachelor's degree