Job Description
Senior Java Security Engineer , with expertise in SSO and Identity and Access Management systems to design and develop new enhancements in the higher education technology sector. The ideal candidate must be a self-starter that can identify and resolve issues autonomously and demonstrate best practices and expert-level knowledge in the area of J2EE security.
Responsibilities
- Responsible for the implementation, configuration, and maintenance of Keycloak-based authentication extensions and authorization systems using the Quarkus framework.
- Implement SAML and OpenIDConnect (OIDC)-based security
- Utilize knowledge of best practices in user account management and related security principles to enhance security posture and user experience
- Build efficient, testable, and reusable code
- Demonstrate expert-level knowledge in J2EE Dependency Injection
- Solve complex performance problems and architectural challenges
- Deploy code into an AWS cloud environment using Docker and Kubernetes
- Build and maintain APIs using GraphQL and REST
- Take ownership of existing build and deployment pipelines
- Coordinate and communicate with remote team members in an Agile development environment
Critical Skills and Qualifications
- Expert knowledge of OIDC and SAML
- Expert knowledge of J2EE and dependency injection
- Experience with Quarkus or Keycloak
- Thorough knowledge of User authentication and authorization flows between multiple systems, servers, and environments
- Experience building cloud-native containerized applications utilizing Docker and Kubernetes, preferably in AWS
- Experience building both REST and GraphQL APIs
- Understanding of synchronous and asynchronous operations
- Understanding of fundamental design principles for building a scalable application
- Understanding of accessibility and security compliance
- Expert-level experience with Git for version control
- Understanding of CI/CD and IaC
Preferred Skills and Qualifications
- Experience building Keycloak extensions
- Experience implementing custom authenticators, flows and internal SPIs in Keycloak.