Description

You will own the core security and authentication infrastructure for backend services, designing secure REST APIs, OAuth 2.0 flows, and SSO integrations.

This role is on-site.

Responsibilities

• Build secure REST APIs using JWT validation and token-based security.
• Implement OAuth 2.0 flows for server-side and SPA applications.
• Design token introspection, revocation, and refresh mechanisms.
• Configure inbound and outbound SSO flows using OIDC and SAML.
• Validate access tokens at the API Gateway level.

Required Skills

• 5+ years of professional backend development experience.
• Proficiency with Java and Spring Boot for backend API development.
• Expertise in OAuth 2.0 (grant types, scopes, refresh tokens).
• Deep knowledge of OpenID Connect (OIDC) flows and ID token handling.
• Experience with Node.js for backend services.
• Familiarity with PKCE implementation for SPA authentication flows.
• Understanding of SAML and OIDC federation concepts.
• Knowledge of secure token management (access vs ID vs refresh tokens).

Preferred Skills

• Experience designing and implementing authentication and authorization protocols.
• Bachelor's degree in Computer Science or equivalent.

Key Skills

Education

Bachelor's degree