Position Summary We are seeking a skilled and security-focused Software Engineer to design, develop, and enhance Identity and Access Management (IAM) components for our modern SaaS platform. The ideal candidate will have strong expertise in Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) , building secure microservices using Java Spring Boot .
Key Responsibilities Design and implement scalable, secure IAM systems supporting RBAC and ABAC models
Develop authentication, authorization, user provisioning, and policy evaluation microservices using Spring Boot
Define and manage access policies, roles, groups, permissions, and attributes
Collaborate with security architects to ensure compliance with OAuth2, OIDC, SAML, SCIM, etc.
Integrate with internal microservices and external identity providers (Okta, Keycloak, Azure AD)
Implement fine-grained access controls and dynamic authorization logic
Participate in architectural decisions, code reviews, and technical documentation
Ensure performance, reliability, and security of IAM services
Follow DevSecOps practices including secure coding, testing, and monitoring
Basic Qualifications Bachelor's or Master's degree in Computer Science or a related field
3+ years of hands-on experience with Java and Spring Boot
Strong knowledge of IAM concepts including RBAC , ABAC , authentication/authorization protocols, and directory services
Solid understanding of microservices architecture , API security , and distributed systems
Familiarity with OAuth2 , OIDC , SAML , JWT security models
Experience with policy engines such as OPA , Keycloak Authorization Services , or XACML
Proficiency in RESTful API development and secure coding practices
Preferred Qualifications Experience with cloud platforms (AWS, GCP, or Azure)
Familiarity with DevOps tools like Docker, Kubernetes, and CI/CD pipelines
Understanding of multi-tenant SaaS access control models
Experience with SCIM for user/group provisioning
Knowledge of auditing , logging , and monitoring access events