Senior Java Developer -IAM & Keycloak

Description:Design, build, and operate IAM capabilities on Keycloak and Java microservicesExtend Keycloak through custom SPIs, providers, user federation, and themes to meet evolving business requirementsImplement and maintain authentication and authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA, and social or enterprise federationDrive security best practices, including secure token handling, session management, threat modeling, and supporting audits and complianceOwn services in production, from design through deployment, observability, and incident responseCollaborate with product, security, and platform teams to deliver reliable, scalable identity solutionsStrong Java backend development experience, building and running microservices in productionProven, hands-on experience with Keycloak in real-world deployments, including customization via SPIs and providersDeep understanding of OAuth 2.0, OpenID Connect, JWT, and SAML Nice To Have:Experience with CIAM at scale: customer identity, identity resolution, or account deduplicationWebAuthn/FIDO2/passkeys, Zero Trust architectures, or PKIEvent-driven architectures (e.g., Kafka)Observability tooling such as Prometheus, Grafana, and OpenTelemetryProven experience designing and operating distributed systems and microservices in productionSolid database skills (e.g., PostgreSQL) and familiarity with caching relevant to Keycloak deployments (e.g., Infinispan/Redis)Experience with Docker, Kubernetes, CI/CD pipelines, and at least one major cloud platform (AWS or Azure)A security-first mindset and experience supporting audits and compliance requirements Must-have skills -Design, build, and operate IAM capabilities on Keycloak and Java microservicesExtend Keycloak through custom SPIs, providers, user federation, and themes to meet evolving business requirementsImplement and maintain authentication and authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA, and social or enterprise federationDrive security best practices, including secure token handling, session management, threat modeling, and supporting audits and complianceOwn services in production, from design through deployment, observability, and incident responseCollaborate with product, security, and platform teams to deliver reliable, scalable identity solutionsStrong Java backend development experience, building and running microservices in productionProven, hands-on experience with Keycloak in real-world deployments, including customization via SPIs and providersDeep understanding of OAuth 2.0, OpenID Connect, JWT, and SAML