Java Security Specialist

Royal Cyber Inc.; As Sudiyah; Sur place; OMR 31 000 - 43 000; Plein temps

Résumé du poste

Royal Cyber Inc. seeks an experienced Senior Java Security & Integration Engineer to design, develop, and secure enterprise applications and APIs. You will implement IAM, SSO, and RBAC across complex systems, integrating with IBM middleware and leading API security practices.

The role covers API gateway usage, secure token management, and deployment on OpenShift and Kubernetes, collaborating with IAM, middleware, and DevOps teams to deliver robust, scalable solutions.

Qualifications

• 6+ years of IT experience with hands-on Java and Spring Boot development.
• Strong understanding of IAM concepts, authentication, authorization, SSO, and RBAC.
• Experience implementing secure API design, token validation, TLS/mTLS, and secret management.
• Hands-on with enterprise middleware technologies and API integration.

Responsabilités

• Design, develop, and maintain secure enterprise applications and RESTful APIs using Java, Spring Boot, and Spring Security.
• Implement authentication, authorization, RBAC, and access-control mechanisms across applications.
• Integrate applications with enterprise IAM and SSO solutions using OAuth 2.0, OIDC, SAML 2.0, LDAP, and AD.
• Develop and implement secure API integrations using API gateways and middleware platforms.
• Work with IBM API Connect, DataPower, ACE/ACE for API management and service mediation.
• Implement API security controls including JWT validation, TLS/mTLS, and certificate handling.
• Collaborate with security architects, IAM teams, and DevOps for end-to-end secure solutions.
• Participate in security assessments, vulnerability remediation, and CI/CD processes.

Connaissances

Java

Spring Boot

IAM

API Security

OpenShift

Kubernetes

OAuth 2.0

OIDC

SAML 2.0

JWT

Outils

IBM API Connect

IBM DataPower

ACE/IIB

OpenShift tooling

Description du poste

Senior Java Security & Integration Engineer

Experience: 6+ Years

Location: Saudi Arabia / Onsite

Role Overview

We are seeking an experienced Java Security & Integration Engineer with strong hands-on expertise in Java, Spring Boot, Identity and Access Management (IAM), application security, and enterprise middleware integration. The ideal candidate will have experience designing and developing secure, scalable enterprise applications and integrating authentication, authorization, APIs, and backend services across complex enterprise environments.

The candidate should possess practical experience with security protocols, IAM solutions, API gateways, IBM middleware technologies, and containerized application platforms such as OpenShift and Kubernetes.

Key Responsibilities

• Design, develop, and maintain secure enterprise applications and RESTful APIs using Java, Spring Boot, and Spring Security.
• Implement authentication, authorization, role-based access control (RBAC), and fine-grained access policies across enterprise applications.
• Integrate applications with enterprise IAM and Single Sign-On (SSO) solutions using OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, LDAP, and Active Directory.
• Develop and implement secure API integrations using API gateways, middleware platforms, and enterprise integration services.
• Work with IBM API Connect (APIC), IBM DataPower, and IBM App Connect Enterprise / IBM Integration Bus (ACE/IIB) for API management, service mediation, message transformation, and secure system integration.
• Implement API security controls, including JWT validation, token management, TLS/mTLS, certificate-based authentication, and secure credential handling.
• Apply secure coding practices and mitigate vulnerabilities such as injection attacks, broken access control, insecure authentication, and other OWASP Top 10 risks.
• Integrate Java and Spring Boot applications with enterprise services, databases, messaging systems, and third-party platforms.
• Deploy, configure, and troubleshoot applications in Red Hat OpenShift and Kubernetes environments.
• Collaborate with security architects, IAM teams, middleware engineers, DevOps teams, and application development teams to deliver secure end-to-end solutions.
• Support application security assessments, vulnerability remediation, root-cause analysis, production troubleshooting, and performance optimization.
• Participate in technical design reviews, code reviews, security reviews, release management, and CI/CD automation.

Mandatory Technical Skills

1. Java Application Development

• Strong hands-on experience with Java, preferably Java 8 or later.
• Advanced understanding of OOP, collections, multithreading, exception handling, and enterprise application design.
• Strong development experience with Spring Boot, Spring Security, and REST APIs.
• Experience building microservices and integrating distributed enterprise applications.

2. Application Security & IAM

• Strong understanding of Identity and Access Management concepts.
• Practical experience implementing authentication, authorization, SSO, RBAC, and access-control mechanisms.
• Working knowledge of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, LDAP, and Active Directory.
• Experience with secure API design, token validation, encryption, TLS/mTLS, certificates, and secrets management.
• Understanding of OWASP Top 10, secure coding, vulnerability assessment, and application security remediation.

3. Enterprise Middleware & API Integration

• Hands-on experience with one or more enterprise middleware technologies:
  • IBM API Connect (APIC)
  • IBM DataPower Gateway
  • IBM Integration Bus (IIB) / IBM App Connect Enterprise (ACE)
• Experience with API gateway policies, API authentication, authorization, request/response transformation, routing, and service integration.
• Understanding of enterprise integration patterns, REST/SOAP services, and message-based integration.
• Experience with IBM MQ or other enterprise messaging technologies is an advantage.

4. Containerization & Platform Engineering

• Experience deploying and troubleshooting Java/Spring Boot applications on OpenShift or Kubernetes.
• Understanding of containers, deployments, services, ingress/routes, configuration, secrets, and application health checks.
• Familiarity with Docker, CI/CD pipelines, Git, and automated build/deployment processes.

Preferred Qualifications

• Experience integrating Java applications with enterprise IAM platforms such as Keycloak, ForgeRock, Ping Identity, Okta, or Microsoft Entra ID.
• Experience with API security architecture, zero-trust principles, and enterprise security standards.
• Knowledge of Kafka, IBM MQ, event-driven architecture, or distributed systems.
• Familiarity with Maven/Gradle, Jenkins, GitLab CI/CD, SonarQube, and vulnerability scanning tools.
• Experience working in banking, financial services, government, telecommunications, or other security-sensitive enterprise environments.

Candidate Profile

• Minimum 6+ years of relevant IT experience, with substantial hands-on Java and Spring Boot development experience.
• Strong practical knowledge of application security and IAM integration.
• Proven experience integrating applications through enterprise middleware and API management platforms.
• Ability to troubleshoot complex authentication, authorization, API connectivity, and integration issues.
• Strong analytical, communication, documentation, and stakeholder collaboration skills