Senior Identity Platform Engineer (Remote)

RXinsider LTD.; United States; Sur place; USD 135 000 - 150 000; Plein temps

Avantages offerts par ce poste

Medical, dental, and vision

Remote-first with home-office support

401(k) retirement plan with company 0%

Professional development

Résumé du poste

DrFirst in the United States is seeking a senior software engineer to own a production IAM platform built on Keycloak. You will design and maintain custom SPI extensions, migrate to modern OAuth 2.0 and OIDC patterns, and oversee a major version upgrade while ensuring security and reliability across the authentication stack.

This remote-first, senior role demands deep knowledge of JVM tuning, Infinispan, PostgreSQL sessions, and cross-team collaboration to drive platform hygiene and incident

Qualifications

• 6+ years of professional software engineering with strong Java in IAM
• Expert Keycloak experience with SPI/extension development in production
• Deep OAuth 2.0 and OIDC knowledge including PKCE, Token Exchange, JWT Bearer
• Knowledge of SAML 2.0 and session/token architecture depth
• Experience with distributed caching/state (Infinispan) and clustering
• Production operations skills: JVM performance analysis and SQL investigations

Responsabilités

• Design, build, and refactor Keycloak SPIs including authenticators and mappers
• Lead migration to OAuth 2.0/OIDC patterns and BFF architectures
• Drive major Keycloak version upgrade and persistent session strategy
• Own session lifecycle model across SSO, client, and offline sessions
• Own incident response and root-cause analysis for live authentication traffic
• Integrate with external identity systems (OIDC, SAML) and ensure least-privilege configs
• Mentor teams on OAuth/OIDC and secure coding practices

Connaissances

Keycloak SPI development

OAuth 2.0 & OIDC fluency

JVM tuning

PostgreSQL sessions

Security fundamentals

Formation

Master's degree in Computer Science or related field

Outils

Keycloak (Quarkus)

Kubernetes

Infinispan

Prometheus/Grafana

Description du poste

DrFirst in the United States is seeking a senior software engineer to own a production IAM platform built on Keycloak. You will design and maintain custom SPI extensions, migrate to modern OAuth 2.0 and OIDC patterns, and oversee a major version upgrade while ensuring security and reliability across the authentication stack.

This remote-first, senior role demands deep knowledge of JVM tuning, Infinispan, PostgreSQL sessions, and cross-team collaboration to drive platform hygiene and incident