We are seeking an experienced Java Identity Engineer to design, develop, and support secure authentication and authorisation solutions across enterprise applications and APIs. The ideal candidate will have strong Java backend engineering experience combined with deep knowledge of Identity and Access Management (IAM), OAuth2, OpenID Connect (OIDC), SSO, and API security.
You will work closely with architects, security teams, DevOps engineers, and application developers to implement scalable identity solutions and modern authentication frameworks.
The successful applicant will need to be onsite in Paddington 3 days a week.
Key Responsibilities
- Design and develop secure identity and access management solutions using Java technologies.
- Implement and support OAuth2, OpenID Connect (OIDC), SAML, JWT, and Single Sign-On (SSO) integrations.
- Develop and maintain authentication and authorization services for enterprise applications and APIs.
- Integrate IAM platforms such as Keycloak, Okta, ForgeRock, Ping Identity, Auth0, or Azure AD.
- Build secure RESTful APIs using Java/Spring Boot.
- Configure and maintain API security policies and token management.
- Collaborate with security and infrastructure teams to ensure compliance with security standards and best practices.
- Troubleshoot authentication, authorization, and federation issues across distributed systems.
- Support CI/CD pipelines and cloud-native deployments.
- Produce technical documentation, implementation guides, and operational procedures.
- Participate in code reviews, security reviews, and architectural discussions.
Requirements
Technical Skills
- Strong experience with Java and Spring Boot.
- Hands-on experience with OAuth2 and OpenID Connect (OIDC).
- Knowledge of SAML 2.0, JWT, MFA, RBAC, and identity federation.
- Experience with Spring Security and API security frameworks.
- Familiarity with IAM/SSO platforms such as:
- Keycloak
- Okta
- ForgeRock
- Ping Identity
- Auth0
- Azure Active Directory
- Experience developing REST APIs and microservices.
- Understanding of secure coding principles and cybersecurity best practices.
- Experience with relational and/or NoSQL databases.
- Familiarity with Docker, Kubernetes, and cloud platforms (AWS, Azure, or GCP).
- Experience with Git, Jenkins, Maven/Gradle, and CI/CD pipelines.
- Strong analytical and problem-solving abilities.
- Excellent communication and stakeholder management skills.
- Ability to work independently and within Agile teams.
- Strong documentation and troubleshooting capabilities.
Benefits
- Competitive rates
- Inclusive team