Identity & Gateway Engineer

We are a Global Recruitment specialist that provides support to the clients across EMEA, APAC, US and Canada. We have an excellent job opportunity for you.

Job Title: Identity & Gateway Engineer

Location: Northampton

Work mode: Hybrid - 2-3 days per week onsite

Duration: 6 months contract initially

Rate: £402 per day PAYE through Umbrella

Summary:

We are seeking an experienced Identity & Gateway Engineer to design, implement, and support secure authentication, identity integration, and API gateway capabilities that protect critical digital services. The ideal candidate will combine deep expertise in Customer Identity & Access Management (CIAM), OAuth/OIDC, API Gateway technologies, and secure service communication to deliver robust authorization and policy enforcement solutions within a modern cloud-native architecture.

Key Responsibilities

• Integrate Ping Identity components or equivalent enterprise CIAM platforms with digital applications, APIs, and authorization services.

• Design and implement OAuth 2.0 and OpenID Connect (OIDC) authentication and authorization flows, including token exchange, session management, token validation, and secure token propagation.

• Develop and manage LDAP/LDIF configurations, schemas, directory searches, user provisioning, bulk imports, and modification activities.

• Configure and manage Envoy Proxy, Spring Cloud Gateway, or equivalent API gateway technologies, including route management, header transformations, timeout controls, and traffic policies.

• Implement External Authorization ( ext_authz ) integrations using HTTP and gRPC to enforce centralized policy decisions.

• Design and implement Policy Enforcement Point (PEP) controls with fail-closed security models and controlled degradation mechanisms.

• Engineer and support mutual TLS ( mTLS ) configurations, certificate life cycle management, and secure service-to-service communication.

• Develop and test rapid token and entitlement revocation capabilities to meet security and compliance requirements.

• Build and maintain Spring Boot adapters, APIs, and integration services supporting identity and authorization ecosystems.

• Create automated integration, security, and performance tests for identity, gateway, and authorization of workflows.

• Collaborate closely with security, engineering, platform, and product teams to deliver secure and scalable access management solutions.

Required Skills & Experience

• Strong hands-on experience with Ping Identity (IG, AM, DS) or comparable enterprise CIAM solutions.

• Deep expertise in OAuth 2.0, OpenID Connect (OIDC), JWT, token exchange, JWKS, authorization code flows, and session management.

• Practical experience with LDAP, LDIF, directory services, schema design, filters, searches, and bulk directory operations.

• Experience configuring and managing Envoy Proxy, Spring Cloud Gateway, Kong, Apigee, or similar API Gateway technologies

• Strong knowledge of API security, authorization patterns, policy enforcement, and identity federation Hands -on experience with mTLS, PKI, certificate life cycle management, and secure service communication

• Proficiency in Java and Spring Boot application development and integration.

• Experience with Docker, Kafka, GitLab CI/CD, and distributed system architectures.

• Strong troubleshooting and operational support skills across identity, API, and authorization platforms.

• Experience working with automated testing frameworks, TDD principles, and secure software development practices.

• Hands-on experience using AI-assisted engineering tools such as Claude Code, GitHub Copilot, or equivalent technologies with appropriate governance and validation.

Preferred Skills

• Experience with Client or enterprise token management platforms.

• Knowledge of Service Mesh technologies and Zero Trust security architectures.

• Strong understanding of entitlement management, authorization policies, and access revocation mechanisms.

• Experience implementing OpenTelemetry, distributed tracing, structured logging, and observability frameworks.

• Familiarity with W3C Trace Context, API monitoring, and operational diagnostics.

• Experience working within highly regulated environments such as Banking, Financial Services.

If you are interested in this position and would like to learn more, please send through your CV and we will get in touch with you as soon as possible. Please note, candidates are often Shortlisted within 48 hours.