We are looking for a Senior Full Stack Developer with strong IAM expertise to lead the development and modernization of secure, enterprise-scale platforms. This role is unique it requires a developer who can bridge the gap between a modern React frontend and a robust Java backend, all while serving as the subject matter expert for Identity & Access Management (IAM) within a cloud-native AWS environment.
You will be responsible for building secure user experiences, implementing complex authorization logic, and ensuring that our entire cloud infrastructure follows the principle of least privilege.
Key Responsibilities
Full Stack Development: Build and maintain high-performance, responsive frontends using React and scalable backend services using Java (Spring Boot / Microservices).
Identity Architecture: Design and implement end-to-end IAM workflows, including user registration, Multi-Factor Authentication (MFA), and Single Sign-On (SSO).
Secure API Design: Develop and secure RESTful APIs, ensuring seamless integration between the React UI and Java services using modern security tokens.
Cloud Infrastructure: Architect and manage AWS IAM policies, roles, and identity providers (e.g., Cognito) to secure AWS resources like Lambda, S3, and EKS.
Protocol Implementation: Direct hands-on implementation of OAuth2, OpenID Connect (OIDC), and SAML 2.0 flows for both internal and external users.
Security Integration: Integrate enterprise IAM platforms (such as ForgeRock, Okta, Ping, or Keycloak) with custom-built React/Java applications.
CI/CD & DevSecOps: Collaborate with DevOps to automate security scanning and deployment pipelines using Terraform or AWS CDK.
Required Skills
Java Expert: Extensive experience with Java (17+) and Spring Boot, specifically Spring Security for OAuth2 resource server implementation.
React Specialist: Strong proficiency in React (18+), including state management (Redux/Context), Hooks, and integrating with Auth libraries (Amplify, OIDC-client).
IAM Core: Deep understanding of IAM protocols (SAML, OAuth2, OIDC, SCIM) and hands-on experience with at least one major IAM vendor (ForgeRock, Okta, or Ping).
AWS Mastery: Proven experience managing AWS IAM (Policies, Roles, Identity Center) and cloud-native services (Lambda, EC2, S3).
Security Mindset: Knowledge of the OWASP Top 10 and experience implementing secure coding practices in a full-stack environment.
Testing & Debugging: Proficiency in debugging complex authentication flows across the network, browser, and server logs.