Senior Identity & Access Engineer – AM Platform

Gravitee; Denver (NC); Hybrid; USD 136,000 - 184,000; Full time

Benefits offered by this job

Competitive medical coverage

Stock options

Hybrid work culture

25 days holiday

Mental health days

Wellness budget

Job summary

Gravitee in the United States is seeking a Senior Software Engineer to build and maintain the identity and authorization features of Gravitee Access Management (AM) across the AM runtime and the AM experience in Gamma. This is a new role.

Today, AM engineering is based entirely in Europe. This hire establishes US-hours ownership of Level 3 and Level 4 authentication and authorization incidents, and adds delivery capacity toward AM parity in Gamma — part of building sustainable L3/L4 engineering

Qualifications

• 5+ years building production backend software on a team that ships and supports its own product.
• Strong Java experience with Maven and a reactive stack (Vert.x/RxJava).
• Deep working knowledge of identity standards: OAuth 2.0 and OIDC, SAML 2.0, SCIM, and FAPI/CIBA/UMA profiles.

Responsibilities

• Design and deliver features end to end, from discovery and technical design through implementation, testing, release, and iteration.
• Build and maintain identity and authorization features of Gravitee Access Management across the AM runtime and Gamma.
• Implement and support OAuth 2.0 and OIDC flows and SAML 2.0 as IdP and SP, SCIM, and FAPI/CIBA/UMA profiles.
• Work with token and session semantics (JWT, JWKS, MFA/step-up, WebAuthn) and IdP federation.
• Ensure security defaults, audit logs, and defenses against token replay and account takeover.
• Migrate safely across MongoDB and JDBC-backed stores; support multi-domain, multi-region deployments.

Skills

Java

Maven

Reactive stack

OAuth 2.0 / OIDC

SAML 2.0

SCIM

JWT / JWKS

WebAuthn / FIDO2

Git workflows

LLM-assisted development

Tools

Vert.x

RxJava

MongoDB

JDBC

Job description

Gravitee in the United States is seeking a Senior Software Engineer to build and maintain the identity and authorization features of Gravitee Access Management (AM) across the AM runtime and the AM experience in Gamma. This is a new role.

Today, AM engineering is based entirely in Europe. This hire establishes US-hours ownership of Level 3 and Level 4 authentication and authorization incidents, and adds delivery capacity toward AM parity in Gamma — part of building sustainable L3/L4 engineering