Description

You will design and build core authentication and identity management components for an insurance web application.

Responsibilities

• Design the end-to-end authentication flow using SAML 2.0 and/or OIDC integrated with Ping SSO.
• Implement OIPA authentication extensions to consume SSO-authenticated identity, including mapping external identities to OIPA users.
• Establish the OIPA-authenticated session context and enforce authorization rules.
• Build necessary web-tier components (e.g., servlet filters, request wrappers) to handle Ping tokens and attributes.
• Produce comprehensive implementation documentation, including deployment guides and runbooks.

Required Skills

• 7+ years of experience in Java enterprise development (Java 8+).
• Strong experience integrating SSO/IAM solutions: SAML 2.0 and OpenID Connect / OAuth 2.0.
• Expertise in claims/attributes mapping, token verification, and certificate/key handling.
• Hands-on experience building extensions or plugins for vendor platforms (SPI frameworks, JAR packaging).
• Solid understanding of HTTP, cookies, sessions, reverse proxies, and security headers.
• Experience with application servers, preferably Oracle WebLogic, or alternatives like WebSphere/JBoss/Tomcat.
• Familiarity with secure coding practices, including OWASP ASVS concepts and CSRF protections.
• Proficiency in Java, Spring, Servlets, REST APIs, and SQL.

Key Skills

Education

Any Gradute