Senior Java Developer (AIM)
SolveMD
⚲ Łowicz
30 000 - 35 000 PLN (B2B)
Wymagania
- Java
- IAM
- Keycloak
- OpenID Connect
- OAuth
- SAML
- MFA
- JWt
- OOP
- REST API
- OWASP
- PostgreSQL
- DB
- LDAP
- Active Directory
- SQL
- AWS (nice to have)
- Azure (nice to have)
- IaaS (nice to have)
- PaaS (nice to have)
- SaaS (nice to have)
- Kubernetes (nice to have)
- ELK Stack (nice to have)
- Grafana (nice to have)
- Prometheus (nice to have)
Opis stanowiska
O projekcie: Senior Java Developer (IAM Focus) We are seeking a Senior Java Developer with a specialization in Identity and Access Management (IAM) to join our US customer team. We are looking for a developer who excels in hands-on implementation and thrives in a close-knit, collaborative environment. You will be the technical lead for our authentication and authorization stack, ensuring our applications utilize modern security standards. Wymagania: - Professional Experience: 6+ years of versatile experience in the software industry, with a significant focus on Identity Access Management (IAM) and Java development. - IAM Stack Expertise: Expert knowledge of Keycloak, OpenID Connect (OIDC), OAuth 2.0 and SAML 2.0. - Modern Security Standards: Proven experience implementing Zero Trust principles, Passwordless authentication, and Adaptive MFA. Solid understanding of both stateless and stateful security approaches, including JWT-based stateless authentication flows and server-side session management strategies, with the ability to make informed architectural decisions between the two - Java Proficiency: Strong, production-grade Java development skills, including deep familiarity with OOP, RESTful API design, and secure coding practices aligned with OWASP guidelines. - Database knowledge is required, with a focus on experience with PostgreSQL. - Technical Fundamentals: Deep understanding of LDAP/Active Directory and general application security within the Java ecosystem. - Team Skills: Strong interpersonal skills and a "team-first" mentality; we value clear communication and mutual support within the development squad. - Language Proficiency: Cambridge C1 level of English mastery. - Timezone Alignment: Ability to dedicate up to 50% of your time to US office hours (2 pm – 10 pm CET) to facilitate collaboration between our two primary timezones. Nice to have - Education: Master’s Degree in Computer Science, Engineering, or a related field. - Cloud Security: Certifications such as AWS Certified Security Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer. - Cloud Awareness: Familiarity with Cloud methodologies (IaaS, PaaS, SaaS) and automation trends. Hands-on experience with AWS services is a strong advantage, particularly Amazon EKS for container orchestration, as well as familiarity with IAM roles, service accounts, and workload identity patterns within Kubernetes-based environments. - Observability & Security Monitoring: Exposure to logging, tracing, and monitoring tools (e.g., ELK Stack, Grafana, Prometheus) with an understanding of how to correlate security events and detect anomalous authentication behavior. - Distributed Systems & Transactional Integrity: Experience working in highly distributed environments where transactional consistency is essential, with a solid understanding of the challenges and trade-offs that come with managing state, data integrity, and reliable communication across distributed system boundaries. Codzienne zadania: - Java & Security Development: Develop and maintain secure Java-based services, moving beyond basic login flows to implement Adaptive MFA and context-aware authentication. - IAM Implementation: Take full ownership of our Keycloak ecosystem, treating configurations as Security as Code to ensure version control and repeatable deployments. - Team Collaboration: Work closely within your immediate development team to solve complex access management challenges and implement fine-grained, attribute-based access controls within our Java applications. - Technical Mentorship: Act as a "lantern" for your fellow developers by sharing IAM best practices and helping the team grow its security expertise. - Reliable Delivery: Manage your own tasks and estimates to ensure that security features and IAM updates are delivered on schedule.