Java Security Specialist

Royal Cyber Inc.; Medina; On-site; SAR 180,000 - 260,000; Full time

Job summary

Royal Cyber Inc. is seeking an experienced Java Security & Integration Engineer to design and deliver secure, scalable enterprise applications. The role focuses on Java Spring Boot, IAM integration with SSO, and enterprise middleware across complex environments.

You will implement authentication, authorization, RBAC and API security controls, while deploying on OpenShift or Kubernetes. Collaboration with security architects, middleware and DevOps teams is essential for end-to-end secure

Qualifications

• Strong hands-on Java development experience (Java 8+).
• Extensive knowledge of Spring Boot, Spring Security and REST APIs.
• Experience implementing authentication/authorization, OAuth 2.0, OpenID Connect, SAML 2.0, LDAP/AD.
• Proven ability to design secure, scalable enterprise applications with RBAC and policy enforcement.
• Experience with API gateways, middleware platforms and enterprise integrations.
• Hands-on with container platforms OpenShift and Kubernetes; CI/CD pipelines.

Responsibilities

• Design, develop and maintain secure enterprise apps and RESTful APIs using Java Spring Boot and Spring Security.
• Implement authentication, authorization, RBAC and fine-grained access controls across apps.
• Integrate apps with IAM and SSO solutions using OAuth 2.0, OIDC, SAML 2.0 and LDAP/AD.
• Develop secure API integrations using gateways, middleware and enterprise integration services.
• Work with IBM API Connect, DataPower, ACE IIB for API management and service mediation.
• Apply secure coding practices and mitigate OWASP Top 10 risks; support security assessments and remediation.
• Collaborate with IAM, middleware, DevOps and app teams to deliver end-to-end secure solutions.
• Participate in design reviews, code reviews and CI/CD automation.

Skills

Java

Spring Boot

OAuth 2.0

OpenID Connect

SAML 2.0

RBAC

REST APIs

OpenShift

Kubernetes

API Integration

Tools

IBM API Connect

IBM DataPower

IBM App Connect Enterprise

ACE IIB

IBM MQ

Job description

Role Overview

We are seeking an experienced strong Java Security amp Integration Engineer strong with strong hands-on expertise in Java Spring Boot Identity and Access Management IAM application security and enterprise middleware integration. The ideal candidate will have experience designing and developing secure scalable enterprise applications and integrating authentication authorization APIs and backend services across complex enterprise environments. The candidate should possess practical experience with security protocols IAM solutions API gateways IBM middleware technologies and containerized application platforms such as OpenShift and Kubernetes

Key Responsibilities

• Design, develop and maintain secure enterprise applications and RESTful APIs using strong Java Spring Boot and Spring Security
• Implement authentication, authorization, role-based access control RBAC and fine-grained access policies across enterprise applications
• Integrate applications with enterprise IAM and Single Sign-On SSO solutions using strong OAuth 2.0 OpenID Connect OIDC SAML 2.0 LDAP and Active Directory
• Develop and implement secure API integrations using API gateways middleware platforms and enterprise integration services
• Work with strong IBM API Connect APIC IBM DataPower and IBM App Connect Enterprise IBM Integration Bus ACE IIB for API management service mediation message transformation and secure system integration
• Implement API security controls including JWT validation token management TLS mTLS certificate-based authentication and secure credential handling
• Apply secure coding practices and mitigate vulnerabilities such as injection attacks broken access control insecure authentication and other OWASP Top 10 risks
• Integrate Java and Spring Boot applications with enterprise services databases messaging systems and third-party platforms
• Deploy, configure and troubleshoot applications in strong Red Hat OpenShift and Kubernetes environments
• Collaborate with security architects IAM teams middleware engineers DevOps teams and application development teams to deliver secure end-to-end solutions
• Support application security assessments vulnerability remediation root-cause analysis production troubleshooting and performance optimization
• Participate in technical design reviews code reviews security reviews release management and CI CD automation

Mandatory Technical Skills

1. 1 Java Application Development
   Strong hands-on experience with Java preferably Java 8 or later Advanced understanding of OOP collections multithreading exception handling and enterprise application design Strong development experience with Spring Boot Spring Security and REST APIs Experience building microservices and integrating distributed enterprise applications
2. 2 Application Security amp IAM
   Strong understanding of Identity and Access Management concepts Practical experience implementing authentication authorization SSO RBAC and access-control mechanisms Working knowledge of OAuth 2.0 OpenID Connect SAML 2.0 JWT LDAP and Active Directory Experience with secure API design token validation encryption TLS mTLS certificates and secrets management Understanding of OWASP Top 10 secure coding vulnerability assessment and application security remediation
3. 3 Enterprise Middleware amp API Integration
   Hands-on experience with one or more enterprise middleware technologies IBM API Connect APIC IBM DataPower Gateway IBM Integration Bus IIB IBM App Connect Enterprise ACE Experience with API gateway policies API authentication authorization request response transformation routing and service integration Understanding of enterprise integration patterns REST SOAP services and message-based integration Experience with IBM MQ or other enterprise messaging technologies is an advantage
4. 4 Containerization amp Platform Engineering
   Experience deploying and troubleshooting Java Spring Boot applications on OpenShift or Kubernetes Understanding of containers deployments services ingress routes configuration secrets and application health checks Familiarity with Docker CI CD pipelines Git and automated build deployment processes

Preferred Qualifications

• Experience integrating Java applications with enterprise IAM platforms such as Keycloak ForgeRock Ping Identity Okta or Microsoft Entra ID
• Experience with API security architecture zero-trust principles and enterprise security standards
• Knowledge of Kafka IBM MQ event-driven architecture or distributed systems
• Familiarity with Maven Gradle Jenkins GitLab CI CD SonarQube and vulnerability scanning tools
• Experience working in banking financial services government telecommunications or other security-sensitive enterprise environments

Minimum 6+ years of relevant IT experience, with substantial hands-on Java and Spring Boot development experience. Strong practical knowledge of application security and IAM integration. Proven experience integrating applications through enterprise middleware and API management platforms. Ability to troubleshoot complex authentication, authorization, API connectivity, and integration issues. Strong analytical, communication, documentation, and stakeholder collaboration skills