Senior Developer Identity and Access Management (IAM) - 20192
Veritaz · Göteborg, Sweden
Build and operate Java-based IAM services for an unnamed client, extending Keycloak and implementing authentication and authorization flows. The role covers production microservices, security, and deployment using technologies including PostgreSQL, Docker, Kubernetes, and AWS or Azure.
Tech stack: Java, Keycloak, OAuth 2.0, OpenID Connect, SAML, JWT, PostgreSQL, Docker, Kubernetes, AWS, Azure, Redis, Infinispan, Kafka, Prometheus
About the role
Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry.
Job Overview
Assignment Description
We are looking for a Senior Java Backend Engineer with strong, hands-on experience in Identity and Access Management (IAM).
What You Will Work On
- Design, build, and operate IAM services using Java, Keycloak, and microservices.
- Extend Keycloak using custom SPIs, providers, user federation, and themes.
- Implement authentication and authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA, and identity federation.
- Apply security best practices for token handling, session management, and threat modelling.
- Support security audits and compliance requirements.
- Own production services from design and deployment to monitoring and incident response.
- Collaborate with product, security, and platform teams to deliver scalable identity solutions.
What You Bring
- Strong Java backend development experience, including production microservices.
- Hands-on experience deploying and customising Keycloak using SPIs and providers.
- Deep understanding of OAuth 2.0, OpenID Connect, JWT, and SAML.
- Experience designing and operating distributed systems in production.
- Solid database skills, such as PostgreSQL, and familiarity with caching technologies such as Infinispan or Redis.
- Experience with Docker, Kubernetes, CI/CD pipelines, and AWS or Azure.
- A security-first mindset and experience supporting audits and compliance.
Meritorious
- Experience with Customer Identity and Access Management (CIAM) at scale, identity resolution, or account deduplication.
- Knowledge of WebAuthn, FIDO2, passkeys, Zero Trust architectures, or PKI.
- Experience with event-driven architectures such as Kafka.
- Familiarity with observability tools such as Prometheus, Grafana, and OpenTelemetry.