Java Staff Engineer (Platform / IAM & Administration)

Nextiva; Vancouver; Remote; CAD 90,000 - 120,000; Full time

Job summary

A leading technology company in Vancouver is seeking a Staff Engineer focused on Identity and Access Management. The ideal candidate will have 8-10 years of experience in building secure SaaS platforms and will design scalable IAM solutions. This role emphasizes improving security, leading initiatives, and mentoring team members. Join a forward-thinking culture that values innovation and customer experiences.

Benefits

Health insurance

Flexible time off

401(k) with company match

Ongoing learning and development opportunities

Qualifications

• 8-10+ years of experience building large-scale, secure SaaS platforms.
• Deep proficiency in Java and Spring Boot.
• Experience implementing authentication protocols like OAuth 2.0.
• Hands-on experience with Kafka for distributed messaging.
• Solid understanding of data privacy and compliance standards.

Responsibilities

• Lead design and development of secure, scalable IAM.
• Improve centralized authentication and authorization services.
• Ensure secure-by-design principles across platform services.
• Contribute to operational systems for auditing and governance.
• Mentor and provide guidance to engineers.

Skills

Java

Spring Boot

IAM systems

OAuth2

Kafka

Job description

Overview

Redefine the future of customer experiences. One conversation at a time.

At Nextiva, we're reimagining how businesses connect, bringing together customer experience and team collaboration on a single, conversation centric platform. Powered by AI, driven by human innovation.

Our culture is forward thinking, customer obsessed and built on the belief that meaningful connections drive better business outcomes. Whether it's through our signature Amazing Service, the technology we create, or the experiences we cultivate, connection is at the core of who we are.

If you're ready to collaborate with incredible people, make an impact, and help businesses everywhere deliver truly amazing experiences, this is where you belong.

Build Amazing. Deliver Amazing. Live Amazing. Be Amazing.

Role summary

As a Staff Engineer within the Nextiva Platform organization, focusing on Identity and Access Management (IAM) and platform data access, you will lead initiatives that ensure secure, compliant, and seamless access to critical systems and data across our SaaS offerings. You will design and evolve scalable IAM solutions and enforce data governance best practices that are integral to customer trust, platform integrity, and internal operations.

The ideal candidate will be a technical leader with strong experience in IAM systems, authentication / authorization patterns, data access governance, and distributed platform architecture. Your role will include shaping the strategy and implementation of robust user access models, service identity, permissioning infrastructure, and compliance-driven controls at scale.

Responsibilities

• Lead the design and development of secure, scalable IAM and access control mechanisms, including role-based access control (RBAC), attribute-based access control (ABAC), and fine-grained permissions systems
• Improve and maintain centralized authentication and authorization services (e.g., OAuth2, OIDC, SAML, SCIM integrations)
• Ensure secure-by-design principles are embedded across platform services and APIs with a focus on access patterns, identity federation, token lifecycle management, and user provisioning
• Drive architecture and code-level decisions to mitigate identity risks, reduce complexity, and improve the developer experience around secure access patterns
• Contribute to operational systems that support auditing, anomaly detection, access reviews, and governance reporting
• Be involved in every stage of the project - from ideation and system design to delivering products and features in a timely manner
• Build robust, scalable, and maintainable software
• Improve code quality through writing unit tests, automation, and code reviews
• Apply and advocate for team coding, documenting and testing standards
• Lead code reviews and communicate application changes
• Provide technical leadership, mentorship and guidance to engineers on the team
• Collaborate closely with internal teams as well as stakeholders
• Implement and influence business and operational systems that support billing and usage monitoring needs

Basic Qualifications

• 8-10+ years of experience building large-scale, secure SaaS platforms, with a strong focus on IAM, access management, and distributed systems.
• Deep proficiency in Java, Spring Boot, and designing stateless backend services that integrate with identity providers (IdPs) and security frameworks
• Experience implementing authentication protocols (OAuth 2.0, OIDC, SAML), and designing systems that support single sign-on (SSO), multi-factor authentication (MFA), and Just-In-Time (JIT) provisioning
• Familiarity with access governance tools, secrets management, and key management systems
• Hands-on experience with Kafka for distributed messaging and event-driven pipelines (e.g., audit logs, user session lifecycle, policy updates)
• Expertise with cloud infrastructure platforms (AWS / GCP) and IAM-related services such as IAM roles / policies, STS tokens, and cross-account identity
• Solid understanding of data privacy and regulatory compliance standards (e.g., SOC 2, GDPR, HIPAA) as they relate to access and identity

Preferred Skills

• Experience building or integrating with IAM platforms (e.g., Okta, Auth0, ForgeRock, Keycloak)
• Knowledge of fine-grained data access control, masking policies, and dynamic authorization patterns at the data layer
• Experience developing or integrating policy-as-code solutions (e.g., OPA, Cedar, Rego)
• Familiarity with front-end identity contexts and modern frameworks like React and TypeScript for secure session and role propagation
• Deep understanding of zero trust architecture principles and secure service-to-service authentication

Additional Qualities to Have

• Demonstrated ownership of complex, cross-functional IAM and security initiatives.
• Ability to abstract technical complexity into platform capabilities for use by product teams.
• Strategic mindset with the ability to anticipate and assess risks before they emerge.
• Effective communicator, mentor, and partner to engineers and stakeholders across security, compliance, and product.
• Passion for driving a culture of security and least-privilege access within a high-scale engineering organization
• Self-motivation, dedication, and a commitment to meeting deadlines
• Willingness to contribute as both a team player and an individual contributor
• Eagerness to drive new projects, troubleshoot issues, and contribute to continuous improvement

Nextiva DNA (Core Competencies)

Nextiva's most successful team members share common traits and behaviors :

• Drives Results : Action-oriented with a passion for solving problems. They bring clarity and simplicity to ambiguous situations, challenge the status quo, and ask what can be done differently. They lead and drive change, celebrating success to build more success.
• Critical Thinker : Understands the "why" and identifies key drivers, learning from the past. They are fact-based and data-driven, forward-thinking, and see problems a few steps ahead. They provide options, recommendations, and actions, understanding risks and dependencies.
• Right Attitude : They are team-oriented, collaborative, competitive, and hate losing. They are resilient, able to bounce back from setbacks, zoom in and out, and get in the trenches to help solve important problems. They cultivate a culture of service, learning, support, and respect, caring for customers and teams.

Total Rewards

Our Total Rewards offerings are designed to allow Nexties to take care of themselves and their families so they can be their best, in and out of the office.

Our compensation packages are tailored to each role and candidate's qualifications. We consider a wide range of factors, including skills, experience, training, and certifications, when determining compensation. We aim to offer competitive salaries or wages that reflect the value you bring to our team. Depending on the position, compensation may include base salary and / or hourly wages, incentives, or bonuses.

• Health - Multiple health plan options to suit your needs, including medical, dental, vision, and telemedicine coverage
• Insurance - Life, disability, and supplemental indemnity plans
• Work-Life Balance ️ - Flexible Time Off (FTO) for salaried employees, PTO for hourly employees, Paid Sick Time (PST), paid parental bonding leave, and paid holidays
• Financial Security - 401(k) with company match, Health Savings Accounts with company contributions, Dependent Care FSA
• Wellness ️ - Employee Assistance Program and comprehensive wellness initiatives
• Growth - Access to ongoing learning and development opportunities and career advancement

At Nextiva, we're committed to supporting our employees' health, well-being, and professional growth. Join us and build a rewarding career!

Nextiva is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Nextiva participates in the E-Verify Program where and as required by law. For additional information about E-Verify visit USCIS .

#LI-JG1 #LI-Remote

Founded in 2008, Nextiva has grown into a global leader trusted by over 100,000 businesses and 1M+ users worldwide. Headquartered in Scottsdale, Arizona, and with teams across the globe, we're the future of customer experience and team collaboration through our AI-powered, conversation-centric platform.

Want to see what life at Nextiva is all about? Connect with us on Instagram, Instagram MX, YouTube, LinkedIn, and the Nextiva Blog.