W2 Only - Java Backend Engineer with Identity & Access Management (IAM)

We are seeking a Senior Java Backend Engineer with specialized expertise in Identity and Access Management (IAM) to design, build, and secure our enterprise distributed systems. In this role, you will bridge the gap between core backend software engineering and modern digital identity. You will be responsible for building secure microservices, implementing robust authentication/authorization protocols, and integrating our systems with leading enterprise identity providers (IdPs) like Ping Identity.

Lead the implementation of secure single sign-on (SSO), federation, and identity lifecycle management workflows across cloud and hybrid environments.
Deep knowledge of standards and protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, JWT, and modern web security (TLS, cookies, CORS).
Strong understanding of directory services & identity stores: LDAP, Active Directory/Azure AD, and cloud directories.
Integration skills with RESTful APIs and event-driven patterns; proficiency with JSON and secure token handling.
Fraud detection & risk-based authentication: integrating risk scoring engines into CIAM flows.
Design, develop, and maintain high-performance, scalable microservices using Java 17/21 and the Spring Boot ecosystem.
Design and implement fine-grained access controls, including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
Integrate applications with enterprise IAM/IdP solutions (e.g., ForgeRock, Ping, Okta, Auth0, or AWS Cognito).
Conduct threat modeling, code reviews, and vulnerability remediation to meet strict compliance standards.