Staff Software Engineer - IAM

ModMed; Boca Raton (FL); On-site; USD 180,000 - 230,000; Full time

Job summary

ModMed is seeking a Staff Software Engineer - IAM to lead the technical vision and deployment of our enterprise IAM platform. You will own evolution of core identity services, with deep customization of Keycloak and zero-downtime infrastructure deployments.

You will bridge Java backend engineering, IAM protocols, cloud-native GitOps, and AI-driven practices to accelerate development and boost productivity. You’ll secure millions of users with robust access controls across the ecosystem.

Qualifications

• 8+ years of software engineering experience with leadership at Staff/Principal level in IAM, Security, or Core Infrastructure.
• Deep hands-on experience extending and operating Keycloak in production, plus mastery of Java/JVM internals.
• Expertise in OAuth 2.0, OIDC, SAML, and SCIM for identity lifecycle management.

Responsibilities

• Drive roadmap and architecture for centralized authentication/authorization platforms using Keycloak as core engine.
• Design, build, and maintain custom SPI extensions, providers, and high-performance Java services.
• Architect robust SCIM integrations for user provisioning and integrate audit logging with SIEM solutions.
• Lead infrastructure automation with Terraform, Ansible, Helm, and ArgoCD for secure, reproducible environments.
• Implement and harden OAuth 2.0, OIDC, SAML, and fine-grained access control across services.
• Leverage AI tools to accelerate development, code generation, and test automation.
• Provide hands-on development leadership on critical initiatives and see them through to completion.
• Mentor senior engineers, drive RFCs, and conduct architecture reviews across the team.

Skills

IAM

Keycloak & Java

OAuth 2.0 / OIDC / SAML

SCIM

Terraform & IaC

ArgoCD / GitOps

Java & JVM internals

AI-assisted development

Tools

Terraform

Ansible

Helm

ArgoCD

Job description

We are seeking a Staff Software Engineer - IAM to lead the technical vision, architecture, and deployment of our enterprise Identity & Access Management (IAM) platform. In this role, you will own the evolution of our core identity services, driving deep customizations in Keycloak, automating zero-downtime infrastructure deployments, and scaling our authentication and authorization footprint.

As a Staff Engineer, you will bridge the gap between core Java backend engineering, modern IAM protocols, cloud-native GitOps workflows, and modern AI-driven software engineering practices to accelerate development and boost team productivity.

In this role, you will lead the technical direction for identity systems that secure millions of users, handle high-throughput authentication, and enforce fine-grained access control across our entire ecosystem.

As a technical leader on the team, you will balance deep hands-on architectural design with cross-functional mentorship, working closely with Security, Infrastructure, and Product teams.

What You'll Do

• Core IAM Architecture: Drive the roadmap and architecture for our centralized authentication and authorization platforms, leveraging Keycloak as a core engine.
• Custom Development: Design, build, and maintain custom SPI extensions, providers, and high-performance services in Java.
• Identity Lifecycle & Provisioning: Architect robust SCIM integrations for user provisioning and streamline audit logging and security monitoring integrations with SIEM systems.
• GitOps & Infrastructure as Code: Lead the automation of our identity infrastructure using Terraform, Ansible, Helm, and ArgoCD to maintain secure, reproducible, and self-healing environments.
• Security & Protocol Leadership: Implement and harden OAuth 2.0, OIDC, SAML, and fine-grained access control across service-to-service and user-facing architectures.
• AI-Assisted Engineering: Leverage AI developer tools (e.g., GitHub Copilot, Cursor, LLM-driven coding assistants) to accelerate development workflows, automate unit test generation, optimize Keycloak extension code, and establish AI best practices across the team.
• Hands-On Development: Work on critical initiatives leading them to completion.
• Technical Ownership & Mentorship: Lead RFCs, conduct architecture reviews, and mentor senior engineers across the engineering organization.

What We’re Looking For

• Experience: 8+ years of software engineering experience, with demonstrated technical leadership at a Staff or Principal level in IAM, Security, or Core Infrastructure.
• Keycloak & Java Expertise: Deep hands-on experience extending, scaling, and operating Keycloak in production, alongside mastery of Java and JVM internals.
• AI-Driven Software Development: Proven experience incorporating AI tools and LLM workflows into daily software engineering (e.g., automated code generation, AI-assisted refactoring, test suite generation, and prompt engineering for development tasks).
• IAM Standards: Deep expertise in OAuth 2.0, OIDC, SAML, and SCIM for identity lifecycle management.
• Cloud-Native IaC & CI/CD: Strong experience building automated deployment pipelines and managing infrastructure via code.
• Security Operations: Hands-on experience integrating application logs, telemetry, and security events into SIEM solutions.

Nice-to-Haves / Strong Pluses

• Container & GitOps Tooling: Hands-on experience with ArgoCD, Helm, Ansible, and Terraform for automated Kubernetes and infrastructure management.
• Experience integrating AI capabilities or anomaly detection models into identity workflows and threat detection.
• Experience with zero-downtime Keycloak cluster upgrades and multi-region deployments.
• Familiarity with service-to-service authentication (mTLS) and fine-grained authorization frameworks.