Description

You will own the core security and authentication infrastructure for our backend services.

Responsibilities

• Build secure REST APIs utilizing JWT validation and token-based security.
• Implement OAuth 2.0 flows for both server-side and SPA applications.
• Design and maintain token introspection, revocation, and refresh mechanisms.
• Configure inbound and outbound SSO flows using OIDC and SAML.
• Validate access tokens at the API Gateway level.

Required Skills

• 5+ years of professional backend development experience.
• Expertise in Oauth 2.0 (grant types, scopes, refresh tokens).
• Deep knowledge of OpenID Connect (OIDC) flows and ID token handling.
• Proficiency with Java and Spring Boot for backend API development.
• Experience designing and implementing authentication and authorization protocols.
• Familiarity with PKCE implementation for SPA authentication flows.
• Experience with Node.js for backend services.
• Understanding of SAML and OIDC federation concepts.
• Knowledge of secure token management (access vs ID vs refresh tokens).

Key Skills

Education

Bachelor's degree