Java Backend Engineer Identity & Access Management (IAM)

Java Backend Engineer Identity & Access Management (IAM)

Dallas,TX/ Phoenix,AZ onsite

W2 only

Job Summary We are seeking a Senior Java Backend Engineer with specialized expertise in Identity and Access Management (IAM) to design, build, and secure our enterprise distributed systems. In this role, you will bridge the gap between core backend software engineering and modern digital identity. You will be responsible for building secure microservices, implementing robust authentication/authorization protocols, and integrating our systems with leading enterprise identity providers (IdPs) like Ping Identity.

Core Responsibilities

Lead the implementation of secure single sign-on (SSO), federation, and identity lifecycle management workflows across cloud and hybrid environments.
Deep knowledge of standards and protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, JWT, and modern web security (TLS, cookies, CORS).
Strong understanding of directory services & identity stores: LDAP, Active Directory/Azure AD, and cloud directories.
Integration skills with RESTful APIs and event-driven patterns; proficiency with JSON and secure token handling.
Fraud detection & risk-based authentication: integrating risk scoring engines into CIAM flows.
Design, develop, and maintain high-performance, scalable microservices using Java 17/21 and the Spring Boot ecosystem.
Design and implement fine-grained access controls, including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
Integrate applications with enterprise IAM/IdP solutions (e.g., ForgeRock, Ping, Okta, Auth0, or AWS Cognito).
Conduct threat modeling, code reviews, and vulnerability remediation to meet strict compliance standards.

Preferred Qualifications (Pluses)

• Experience with Transmit Security for identity orchestration, passwordless authentication, or advanced cross-channel journey management.
• Experience with LexisNexis ThreatMetrix (or similar digital identity intelligence tools) for device fingerprinting, fraud detection, and risk-based step-up authentication.