About this role
Senior java developer with 12-15 years experience in system and software development, architecture and technical troubleshooting.Development tools - Git, Apache Maven, Eclipse IDE, IntelliJ, Apache SubversionProgramming Languages - Java, Bash scripting, Python, KotlinTechnologies - MBeans, SQL, JMS, OpenID Connect, SSH, REST API, SOAP, REST, Identity and Access Management, SSO, SAMLv2, HTTPS/TLSProducts - Gradle, Atlassian JIRA, Infinispan, Spring, JBoss EAP, Hibernate, PostgreSQL, MongoDB, JBoss Application Server, Microsoft SQL Server, Oracle DB, RabbitMQ, Jenkins, Amazon S3, JBoss ESB, JBoss Enterprise SOA Platform, Smooks, HornetQ, Git, Keycloak, Docker, Docker Compose, Elasticsearch/Logstash/Kibana, AWS Route 53, AWS ECS, MySQL, AWS API Gateway, AWS DynamoDB, AWS Elastic Load Balancing (ELB), WSO2 API Manager, Azure AD, OpenLDAP, GitLab, Elasticsearch, AWS Cognito, WSO2 Identity Server, AWS EC2, AWS Lambda, AWS CloudFormation, AWS CloudWatch, AWS RDS, AWS SES, AWS Kinesis, AWS SNS, Atlassian Confluence, BankID, Grafana, Kubernetes, Apache Camel, SoapUI, AWS, AWS S3 Bucket, AWS ACMDevelopment JAX-RPC, JAX-RS, JAX-WS, Spring, SAML, Anypoint Platform, GitHub, Spring Boot, FreeMarker, Javascript/jQuery, JSON, ReactJSTesting - Integration Testing, System Testing• Design, build, and operate IAM capabilities on Keycloak and Java microservices• Extend Keycloak through custom SPIs, providers, user federation, and themes to meet evolving business requirements• Implement and maintain authentication and authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA, and social or enterprise federation• Drive security best practices, including secure token handling, session management, threat modeling, and supporting audits and compliance• Own services in production, from design through deployment, observability, and incident response• Collaborate with product, security, and platform teams to deliver reliable, scalable identity solutions• Strong Java backend development experience, building and running microservices in production• Proven, hands-on experience with Keycloak in real-world deployments, including customization via SPIs and providers• Deep understanding of OAuth 2.0, OpenID Connect, JWT, and SAMLNice To Have:• Experience with CIAM at scale: customer identity, identity resolution, or account deduplication• WebAuthn/FIDO2/passkeys, Zero Trust architectures, or PKI• Event-driven architectures (e.g., Kafka)• Observability tooling such as Prometheus, Grafana, and OpenTelemetry• Proven experience designing and operating distributed systems and microservices in production• Solid database skills (e.g., PostgreSQL) and familiarity with caching relevant to Keycloak deployments (e.g., Infinispan/Redis)• Experience with Docker, Kubernetes, CI/CD pipelines, and at least one major cloud platform (AWS or Azure)• A security-first mindset and experience supporting audits and compliance requirementsCompetence.• Java with distributed systems and microservices• OAuth 2.0, OpenID Connect, JWT, and SAML• Solid database skills (e.g., PostgreSQL)• Docker, Kubernetes, CI/CD pipelines• Openshift• Kafka• Mq• Oracle• Kubernetes• Azure (API, static web application, app service, sqlserver)