JAVA Developer (KeyCloak)

TechStack Global AB; Solna kommun; On-site; SEK 1,200,000 - 1,800,000; Full time

Job summary

TechStack Global AB seeks a Senior Java Developer with 12-15 years of experience in system and software development, architecture and technical troubleshooting. You will work with Java, Spring, and cloud-native microservices, delivering secure and scalable identity solutions.

Join a team focused on modern IAM platforms, Keycloak integrations, and distributed systems, using Docker, Kubernetes, and CI/CD pipelines to ship robust backend services in production.

Qualifications

• Extensive experience in Java backend development and production-grade microservices.
• Proven ability to design and implement IAM solutions with OAuth 2.0, OpenID Connect, and SAML.

Responsibilities

• Design, build, and operate IAM capabilities on Keycloak and Java microservices
• Extend Keycloak through custom SPIs, providers, user federation, and themes
• Implement and maintain authentication/authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA
• Own services in production from design to deployment, observability and incident response
• Collaborate with product/security/platform teams to deliver reliable identity solutions
• Strong Java backend development experience with microservices in production
• Proven hands-on experience with Keycloak in real deployments including SPIs/providers
• Deep understanding of OAuth 2.0, OpenID Connect, JWT, SAML

Skills

Java

Distributed systems

Microservices

OAuth 2.0

OpenID Connect

JWT

SAML

Docker

Kubernetes

CI/CD

PostgreSQL

Oracle

OpenShift

Kafka

Azure

AWS

Tools

Git

Apache Maven

Eclipse IDE

IntelliJ

Subversion

Jenkins

Gradle

Docker Compose

Kibana/ELK

Keycloak

OpenLDAP

Job description

Senior java developer with 12-15 years experience

in system and software development, architecture and technical troubleshooting.

Development tools

Git, Apache Maven, Eclipse IDE, IntelliJ, Apache Subversion

Programming Languages

Java, Bash scripting, Python, Kotlin

Technologies

MBeans, SQL, JMS, OpenID Connect, SSH, REST API, SOAP, REST, Identity and Access Management, SSO, SAMLv2, HTTPS/TLS

Products

Gradle, Atlassian JIRA, Infinispan, Spring, JBoss EAP, Hibernate, PostgreSQL, MongoDB, JBoss Application Server, Microsoft SQL Server, Oracle DB, RabbitMQ, Jenkins, Amazon S3, JBoss ESB, JBoss Enterprise SOA Platform, Smooks, HornetQ, Git, Keycloak, Docker, Docker Compose, Elasticsearch/Logstash/Kibana, AWS Route 53, AWS ECS, MySQL, AWS API Gateway, AWS DynamoDB, AWS Elastic Load Balancing (ELB), WSO2 API Manager, Azure AD, OpenLDAP, GitLab, Elasticsearch, AWS Cognito, WSO2 Identity Server, AWS EC2, AWS Lambda, AWS CloudFormation, AWS CloudWatch, AWS RDS, AWS SES, AWS Kinesis, AWS SNS, Atlassian Confluence, BankID, Grafana, Kubernetes, Apache Camel, SoapUI, AWS, AWS S3 Bucket, AWS ACM

Development

JAX-RPC, JAX-RS, JAX-WS, Spring, SAML, Anypoint Platform, GitHub, Spring Boot, FreeMarker, Javascript/jQuery, JSON, ReactJS

Testing

Integration Testing, System Testing

• Design, build, and operate IAM capabilities on Keycloak and Java microservices
• Extend Keycloak through custom SPIs, providers, user federation, and themes to meet evolving business requirements
• Implement and maintain authentication and authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA, and social or enterprise federation
• Drive security best practices, including secure token handling, session management, threat modeling, and supporting audits and compliance
• Own services in production, from design through deployment, observability, and incident response
• Collaborate with product, security, and platform teams to deliver reliable, scalable identity solutions
• Strong Java backend development experience, building and running microservices in production
• Proven, hands‑on experience with Keycloak in real‑world deployments, including customization via SPIs and providers
• Deep understanding of OAuth 2.0, OpenID Connect, JWT, and SAML

Nice To Have:

• Experience with CIAM at scale: customer identity, identity resolution, or account deduplication
• WebAuthn/FIDO2/passkeys, Zero Trust architectures, or PKI
• Event-driven architectures (e.g., Kafka)
• Observability tooling such as Prometheus, Grafana, and OpenTelemetry
• Proven experience designing and operating distributed systems and microservices in production
• Solid database skills (e.g., PostgreSQL) and familiarity with caching relevant to Keycloak deployments (e.g., Infinispan/Redis)
• Experience with Docker, Kubernetes, CI/CD pipelines, and at least one major cloud platform (AWS or Azure)
• A security‑first mindset and experience supporting audits and compliance requirements

Competence.

• Java with distributed systems and microservices
• OAuth 2.0, OpenID Connect, JWT, and SAML
• Solid database skills (e.g., PostgreSQL)
• Docker, Kubernetes, CI/CD pipelines
• Openshift
• Kafka
• Mq
• Oracle
• Kubernetes
• Azure (API, static web application, app service, sqlserver)