Senior Developer Identity and Access Management (IAM) - 20192

Om tjänsten

Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry.

Job Overview

Assignment Description

We are looking for a Senior Java Backend Engineer with strong, hands-on experience in Identity and Access Management (IAM).

What You Will Work On

• Design, build, and operate IAM services using Java, Keycloak, and microservices.
• Extend Keycloak using custom SPIs, providers, user federation, and themes.
• Implement authentication and authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA, and identity federation.
• Apply security best practices for token handling, session management, and threat modelling.
• Support security audits and compliance requirements.
• Own production services from design and deployment to monitoring and incident response.
• Collaborate with product, security, and platform teams to deliver scalable identity solutions.

What You Bring

• Strong Java backend development experience, including production microservices.
• Hands-on experience deploying and customising Keycloak using SPIs and providers.
• Deep understanding of OAuth 2.0, OpenID Connect, JWT, and SAML.
• Experience designing and operating distributed systems in production.
• Solid database skills, such as PostgreSQL, and familiarity with caching technologies such as Infinispan or Redis.
• Experience with Docker, Kubernetes, CI/CD pipelines, and AWS or Azure.
• A security-first mindset and experience supporting audits and compliance.

Meritorious

• Experience with Customer Identity and Access Management (CIAM) at scale, identity resolution, or account deduplication.
• Knowledge of WebAuthn, FIDO2, passkeys, Zero Trust architectures, or PKI.
• Experience with event-driven architectures such as Kafka.
• Familiarity with observability tools such as Prometheus, Grafana, and OpenTelemetry.