Staff Software Developer Engineer- Java

Position Summary

We are seeking a skilled and security-focused Software Engineer to design, develop, and enhance Identity and Access Management (IAM) components for our modern SaaS platform. The ideal candidate will have strong expertise in Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC), building secure microservices using Java Spring Boot.

Key Responsibilities

• Design and implement scalable, secure IAM systems supporting RBAC and ABAC models
• Develop authentication, authorization, user provisioning, and policy evaluation microservices using Spring Boot
• Define and manage access policies, roles, groups, permissions, and attributes
• Collaborate with security architects to ensure compliance with OAuth2, OIDC, SAML, SCIM, etc.
• Integrate with internal microservices and external identity providers (Okta, Keycloak, Azure AD)
• Implement fine-grained access controls and dynamic authorization logic
• Participate in architectural decisions, code reviews, and technical documentation
• Ensure performance, reliability, and security of IAM services
• Follow DevSecOps practices including secure coding, testing, and monitoring

Basic Qualifications

• Bachelor's or Master's degree in Computer Science or a related field
• 3+ years of hands-on experience with Java and Spring Boot
• Strong knowledge of IAM concepts including RBAC, ABAC, authentication/authorization protocols, and directory services
• Solid understanding of microservices architecture, API security, and distributed systems
• Familiarity with OAuth2, OIDC, SAML, JWT security models
• Experience with policy engines such as OPA, Keycloak Authorization Services, or XACML
• Proficiency in RESTful API development and secure coding practices

Preferred Qualifications

• Experience with cloud platforms (AWS, GCP, or Azure)
• Familiarity with DevOps tools like Docker, Kubernetes, and CI/CD pipelines
• Understanding of multi-tenant SaaS access control models
• Experience with SCIM for user/group provisioning
• Knowledge of auditing, logging, and monitoring access events