Description

You will design and build core authentication and identity management components for an insurance web application.

This role is hybrid.

Responsibilities

• Design end-to-end authentication flows using SAML 2.0 and/or OIDC integrated with Ping SSO.
• Implement OIPA authentication extensions to consume SSO-identity and map external identities to OIPA users.
• Establish OIPA-authenticated session contexts and enforce authorization rules.
• Build web-tier components, including servlet filters and request wrappers, to handle Ping tokens and attributes.
• Produce implementation documentation, deployment guides, and runbooks.

Required Skills

• 7+ years in Java enterprise development (Java 8+).
• Strong experience integrating SSO/IAM solutions: SAML 2.0, OpenID Connect, and OAuth 2.0.
• Expertise in claims/attributes mapping, token verification, and certificate/key handling.
• Hands-on experience building extensions or plugins for vendor platforms (SPI frameworks, JAR packaging).
• Solid understanding of HTTP, cookies, sessions, reverse proxies, and security headers.
• Experience with application servers, preferably Oracle WebLogic, WebSphere, JBoss, or Tomcat.
• Familiarity with secure coding practices, including OWASP ASVS concepts and CSRF protections.
• Proficiency in Java, Spring, Servlets, REST APIs, and SQL.

Key Skills

Education

Any Gradute