Senior Java Developer / Authentication Expert

We are seeking a highly skilled and experienced Senior Developer with deep expertise in authentication and authorization to join our team. The ideal candidate will have a strong background in designing, implementing, and securing authentication and authorization systems, with hands-on experience in Auth, Keycloak, JWT tokens, and modern security protocols. You will play a key role in building secure, scalable, and user-friendly authentication solutions for our applications.

Key Responsibilities :

• Design, develop, and maintain secure authentication and authorization systems
• Implement Auth 2.0 and OpenID Connect (OIDC) protocols for secure user authentication and authorization.
• Configure and manage Keycloak or similar identity and access management (IAM) solutions
• Implement and manage JSON Web Tokens (JWT) for secure token-based authentication
• Handle token generation, validation, and expiration policies; Ensure secure storage and transmission of tokens.
• Implement second-factor authentication (2FA) mechanisms, such as TOTP (Time-Based One-Time Password), SMS-based OTP, or hardware tokens; Integrate 2FA into existing authentication flows
• Design and implement challenge-response authentication mechanisms for enhanced security
• Ensure secure handling of client secrets, API keys, and other sensitive credentials
• Develop and maintain RESTful APIs using Spring Boot
• Implement secure and scalable backend services for authentication and authorization; ensure APls adhere to best practices for performance, security, and maintainability
• Build reactive and non-blocking systems using Spring WebFlux or other reactive frameworks and optimize applications for high concurrency and low latency
• Enforce security best practices for authentication and authorization, including secure password policies, encryption, and secure session management
• Conduct security audits and vulnerability assessments for authentication systems
• Collaborate with cross-functional teams, including product managers, security teams, and DevOps, to deliver secure and scalable solutions, also, mentor junior developers and provide technical leadership in authentication and authorization
• Document authentication and authorization workflows, policies, and procedures
• Ensure compliance with industry standards and regulations, such as GDPR, HIPAA, or PCI-DSS.

Requirements

Preferred Qualifications :

Benefits