Job
Description
As a skilled and security-focused Software Engineer, your role will involve designing, developing, and enhancing Identity and Access Management (IAM) components for a modern SaaS platform. Your expertise in Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) will be essential for building secure microservices using Java Spring Boot. Key Responsibilities: - Design and implement scalable, secure IAM systems supporting RBAC and ABAC models - Develop authentication, authorization, user provisioning, and policy evaluation microservices using Spring Boot - Define and manage access policies, roles, groups, permissions, and attributes - Collaborate with security architects to ensure compliance with OAuth2, OIDC, SAML, SCIM, etc. - Integrate with internal microservices and external identity providers (Okta, Keycloak, Azure AD) - Implement fine-grained access controls and dynamic authorization logic - Participate in architectural decisions, code reviews, and technical documentation - Ensure performance, reliability, and security of IAM services - Follow DevSecOps practices including secure coding, testing, and monitoring Qualifications Required: - Bachelor's or Master's degree in Computer Science or a related field - 3+ years of hands-on experience with Java and Spring Boot - Strong knowledge of IAM concepts including RBAC, ABAC, authentication/authorization protocols, and directory services - Solid understanding of microservices architecture, API security, and distributed systems - Familiarity with OAuth2, OIDC, SAML, JWT security models - Experience with policy engines such as OPA, Keycloak Authorization Services, or XACML - Proficiency in RESTful API development and secure coding practices Additional Company Details: - Experience with cloud platforms (AWS, GCP, or Azure) - Familiarity with DevOps tools like Docker, Kubernetes, and CI/CD pipelines - Understanding of multi-tenant SaaS access control models - Experience with SCIM for user/group provisioning - Knowledge of auditing, logging, and monitoring access events As a skilled and security-focused Software Engineer, your role will involve designing, developing, and enhancing Identity and Access Management (IAM) components for a modern SaaS platform. Your expertise in Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) will be essential for building secure microservices using Java Spring Boot. Key Responsibilities: - Design and implement scalable, secure IAM systems supporting RBAC and ABAC models - Develop authentication, authorization, user provisioning, and policy evaluation microservices using Spring Boot - Define and manage access policies, roles, groups, permissions, and attributes - Collaborate with security architects to ensure compliance with OAuth2, OIDC, SAML, SCIM, etc. - Integrate with internal microservices and external identity providers (Okta, Keycloak, Azure AD) - Implement fine-grained access controls and dynamic authorization logic - Participate in architectural decisions, code reviews, and technical documentation - Ensure performance, reliability, and security of IAM services - Follow DevSecOps practices including secure coding, testing, and monitoring Qualifications Required: - Bachelor's or Master's degree in Computer Science or a related field - 3+ years of hands-on experience with Java and Spring Boot - Strong knowledge of IAM concepts including RBAC, ABAC, authentication/authorization protocols, and directory services - Solid understanding of microservices architecture, API security, and distributed systems - Familiarity with OAuth2, OIDC, SAML, JWT security models - Experience with policy engines such as OPA, Keycloak Authorization Services, or XACML - Proficiency in RESTful API development and secure coding practices Additional Company Details: - Experience with cloud platforms (AWS, GCP, or Azure) - Familiarity with DevOps tools like Docker, Kubernetes, and CI/CD pipelines - Understanding of multi-tenant SaaS access control models - Experience with SCIM for user/group provisioning - Knowledge of auditing, logging, and monitoring access events
