Senior Java Backend Engineer – Identity & Access Management (IAM / Keycloak)

Aurora Engineering AB; Göteborgs kommun; On-site; SEK 900,000 - 1,200,000; Full time

Job summary

Aurora Engineering AB in Sweden seeks an experienced Senior Java Backend Engineer focused on Identity and Access Management (IAM) to join a project delivering secure, scalable authentication and authorization services.

You will work on a modern identity platform using Keycloak and Java microservices, implementing OAuth 2.0, OIDC, SAML, and MFA, and collaborating across security, product, and platform teams to ship reliable IAM solutions.

Qualifications

• Extensive Java backend development experience with Spring Boot.
• Proven hands-on Keycloak in production.
• Experience developing custom Keycloak SPIs, user federation, or providers.
• Strong knowledge of OAuth 2.0, OpenID Connect, JWT and SAML.
• Experience with distributed systems and production microservices.
• Experience with relational databases (PostgreSQL).
• Caching systems knowledge (Redis, Infinispan).

Responsibilities

• Design, develop, maintain and operate secure IAM solutions using Keycloak and Java microservices.
• Customize and extend Keycloak using SPIs, custom providers, user federation and themes.
• Develop and maintain authentication and authorization flows using OAuth 2.0, OIDC, SAML and MFA.
• Implement secure token handling, session management and identity federation.
• Design and develop scalable, reliable Java/Spring Boot microservices.
• Apply security best practices, including threat modeling and secure coding.
• Take ownership of backend services from design to deployment and production support.
• Monitor performance, troubleshoot incidents and improve reliability.
• Collaborate with security, product, platform and development teams to deliver IAM solutions.
• Contribute to CI/CD automation and technical documentation.

Skills

Java backend

Spring Boot

Microservices

Keycloak

OAuth 2.0

OIDC

SAML

JWT

Cloud platforms AWS/Azure

Docker

Kubernetes

CI/CD pipelines

Security best practices

Tools

PostgreSQL

Redis

OpenTelemetry

Prometheus

Grafana

Kafka

Job description

We are looking for an experienced Senior Java Backend Engineer with strong hands-on expertise in Identity and Access Management (IAM) to join an exciting project focused on building and enhancing secure, scalable authentication and authorization services.

You will work on a modern identity platform that enables millions of users to securely access digital products and services.

The ideal candidate combines strong Java backend development skills with practical experience in Keycloak, authentication protocols, identity federation and cloud-native microservices.

Key Responsibilities

• Design, develop, maintain and operate secure IAM solutions using Keycloak and Java microservices.
• Customize and extend Keycloak using Service Provider Interfaces (SPIs), custom providers, user federation and themes.
• Develop and maintain authentication and authorization flows using OAuth 2.0, OpenID Connect (OIDC), SAML and Multi-Factor Authentication (MFA).
• Implement secure token handling, session management and identity federation.
• Design and develop scalable, reliable Java/Spring Boot microservices.
• Apply security best practices, including threat modeling, secure coding and compliance requirements.
• Take ownership of backend services throughout the development lifecycle, from design and implementation to deployment and production support.
• Monitor application performance, troubleshoot incidents and improve system reliability.
• Collaborate with security, product, platform and development teams to deliver high-quality IAM solutions.
• Contribute to CI/CD automation, technical documentation and continuous platform improvements.

Mandatory Requirements

• Strong professional experience in Java backend development, preferably using Spring Boot and microservices architecture.
• Proven hands-on experience with Keycloak in production environments.
• Experience developing custom Keycloak SPIs, authentication providers or user federation integrations.
• Strong understanding of OAuth 2.0, OpenID Connect, JWT and SAML.
• Experience implementing authentication, authorization and identity federation solutions.
• Solid knowledge of distributed systems and production microservices.
• Experience with relational databases such as PostgreSQL.
• Familiarity with caching technologies such as Infinispan or Redis.
• Hands-on experience with Docker, Kubernetes and CI/CD pipelines.
• Experience with at least one major cloud platform, preferably AWS or Azure.
• Strong understanding of application security, secure token management and session handling.
• Experience supporting production systems, incident management and operational monitoring.
• Good communication skills and the ability to collaborate with cross-functional teams.

Nice to Have

• Experience with Customer Identity and Access Management (CIAM) at scale.
• Experience with identity resolution, customer account management or account deduplication.
• Knowledge of WebAuthn, FIDO2, passkeys or passwordless authentication.
• Understanding of Zero Trust security architecture and Public Key Infrastructure (PKI).
• Experience with event-driven architecture using Apache Kafka.
• Familiarity with monitoring and observability tools such as Prometheus, Grafana and OpenTelemetry.
• Experience with security audits and regulatory compliance.