Software Engineer (IAM System)

Key Responsibilities

• Architect & Develop: Design and implement core IAM services using Spring Boot (Java) for enterprise-grade backend logic and Node.js/Express.js for high-concurrency gateway and edge services.
• Security Implementation: Build and maintain secure authentication flows including OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Flow Engineering: Implement advanced flows such as Authorization Code Flow (with PKCE), Client Credentials, and Device Code Flow.
• Access Control: Develop granular authorization mechanisms using RBAC (Role-Based Access Control) and ABAC (Attribute-Based Access Control).
• Integration: Seamlessly integrate IAM solutions with internal microservices, third-party IdPs (Okta, Auth0, Azure AD), and legacy systems.
• Lifecycle Management: Automate user provisioning, de-provisioning, and identity reconciliation processes.
• Performance & Audit: Optimize system performance for low-latency authentication and maintain comprehensive audit logs for compliance (GDPR, SOC2).

TECHNICAL REQUIREMENT

Backend Development

• Spring Boot (Java): Mastery of Spring Security, Spring Data JPA, and building RESTful microservices.
• Node.js / Express.js: Proficiency in building asynchronous, non-blocking APIs and middleware for security enforcement.
• Database: Experience with SQL (PostgreSQL/MySQL) for identity stores and NoSQL (Redis/MongoDB) for session management and caching.

Identity & Security (The Core)

• Protocols: Deep understanding of OAuth 2.0, OIDC, and SAML 2.0.
• Tokens: Extensive experience working with JWTs (signing, encryption, validation) and opaque tokens.
• Auth Patterns: Solid understanding of Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Social Login.
• Security Best Practices: Knowledge of OWASP Top 10, XSS/CSRF prevention, and secure credential storage (hashing/salting).

Qualifications

• Experience: 4+ years of software development experience, with at least 2+ years focused specifically on IAM or security-centric products.
• Education: Bachelor’s or Master’s degree in Computer Science, Cyber Security, or a related field.
• Cloud/DevOps: Familiarity with Docker, Kubernetes, and cloud-native IAM tools (AWS IAM, Google Cloud Identity).
• Mindset: A "security-first" mentality with a passion for building systems that are both highly secure and developer-friendly.