Senior Identity & Access Engineer (OAuth/OIDC)

Gravitee; Denver (CO); Hybrid; USD 150,000 - 170,000; Full time

Benefits offered by this job

Salary 160k USD per year

Medical coverage

Pension / 401(k) options

Stock options

25 days holiday + holidays

Mental health days

Birthday off

Development budget

Hybrid work culture

Team events

International collaboration

Job summary

Gravitee is seeking a Senior Software Engineer to own identity and authorization features of Gravitee Access Management and Gamma. The role emphasizes L3/L4 escalation ownership, secure design, and cross-region collaboration across an embedded European AM team and US on-hours.

You will work on OAuth 2.0, OIDC, SAML, and related standards within a fast-moving, international environment. You will contribute to feature delivery, security hardening, and platform parity while leveraging AI-assisted

Qualifications

• 5+ years building production backend software on a product team.
• Strong Java experience with Maven and a reactive stack (Vert.x/RxJava).
• Deep knowledge of identity standards: OAuth 2.0, OIDC, SAML 2.0, SCIM, FAPI/CIBA/UMA.
• Security-first mindset: secure defaults, certificate handling, audit logs, token replay risks.
• Experience with migration across MongoDB/JDBC-backed databases and backward compatibility.
• Git-based workflow, code review, and automated tests.
• Hands-on experience using LLMs or AI coding assistants in engineering workflows.

Responsibilities

• Design and deliver end-to-end features from discovery to production.
• Build and maintain identity and authorization features across AM runtime and Gamma surface.
• Implement and support OAuth 2.0, OIDC, SAML 2.0, SCIM, and related profiles.
• Work with JWT/JWKS, MFA/step-up, WebAuthn, IdP federation.
• Ensure security defaults, certificate handling, and audit logging.
• Migrate safely across MongoDB and JDBC, supporting multi-region deployments.
• Own L3/L4 escalations for AM customers as part of pager duties.
• Collaborate with cross-functional teams and review code and designs.

Skills

Java

Security

OAuth 2.0

OIDC

SAML 2.0

SCIM

JWT

Kubernetes

OpenAPI

LLMs / AI tools

Tools

Maven

Vert.x

RxJava

MongoDB

JDBC

Kubernetes

OpenAPI

Envoy

Git

Job description

Gravitee is seeking a Senior Software Engineer to own identity and authorization features of Gravitee Access Management and Gamma. The role emphasizes L3/L4 escalation ownership, secure design, and cross-region collaboration across an embedded European AM team and US on-hours.

You will work on OAuth 2.0, OIDC, SAML, and related standards within a fast-moving, international environment. You will contribute to feature delivery, security hardening, and platform parity while leveraging AI-assisted