Senior Developer Identity and Access Management (IAM) - 20192
Veritaz AB
Göteborg, SwedenPosted Discovered via the company's careers siteMatch locked
Full-timeMjukvaru- och systemutvecklare m.fl.
About the role
Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry.
Assignment Description
We are looking for a Senior Java Backend Engineer with strong, hands-on experience in Identity and Access Management (IAM).
What You Will Work On
- Design, build, and operate IAM services using Java, Keycloak, and microservices.
- Extend Keycloak using custom SPIs, providers, user federation, and themes.
- Implement authentication and authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA, and identity federation.
- Apply security best practices for token handling, session management, and threat modelling.
- Support security audits and compliance requirements.
- Own production services from design and deployment to monitoring and incident response.
- Collaborate with product, security, and platform teams to deliver scalable identity solutions.
What You Bring
- Strong Java backend development experience, including production microservices.
- Hands-on experience deploying and customising Keycloak using SPIs and providers.
- Deep understanding of OAuth 2.0, OpenID Connect, JWT, and SAML.
- Experience designing and operating distributed systems in production.
- Solid database skills, such as PostgreSQL, and familiarity with caching technologies such as Infinispan or Redis.
- Experience with Docker, Kubernetes, CI/CD pipelines, and AWS or Azure.
- A security-first mindset and experience supporting audits and compliance.
Meritorious
- Experience with Customer Identity and Access Management (CIAM) at scale, identity resolution, or account deduplication.
- Knowledge of WebAuthn, FIDO2, passkeys, Zero Trust architectures, or PKI.
- Experience with event-driven architectures such as Kafka.
- Familiarity with observability tools such as Prometheus, Grafana, and OpenTelemetry.
Not included in the source posting: about the role, qualifications, benefits.
Skills
iamjavaawsazureci-cddockergrafanakafkakubernetespostgresqlprometheusredis
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.