Similar Jobs
Biotech
The Senior Programmer Analyst leads technical projects, analyzes complex datasets, develops predictive models, and generates business insights through advanced analytics and programming.
Top Skills:
Microsoft Power PlatformPythonRShinySnowflakeSpotfireSQLTableau
Information Technology
As a Support Specialist L1, you will assist customers with queries via Intercom, resolve issues, collaborate with teams, and create documentation and training materials.
Top Skills:
Intercom
Software • Hospitality
Design and maintain backend systems using Laravel and PHP, collaborate with teams for scalable solutions, optimize performance, and participate in code reviews.
Top Skills:
GitLaravelMySQLPHPRestful Api
We are seeking a highly skilled and experienced Senior Developer with deep expertise in authentication and authorization to join our team. The ideal candidate will have a strong background in designing, implementing, and securing authentication and authorization systems, with hands-on experience in Auth, Keycloak, JWT tokens, and modern security protocols. You will play a key role in building secure, scalable, and user-friendly authentication solutions for our applications.
Key Responsibilities:
- Design, develop, and maintain secure authentication and authorization systems
- Implement Auth 2.0 and OpenID Connect (OIDC) protocols for secure user authentication and authorization.
- Configure and manage Keycloak or similar identity and access management (IAM) solutions
- Implement and manage JSON Web Tokens (JWT) for secure token-based authentication
- Handle token generation, validation, and expiration policies; Ensure secure storage and transmission of tokens.
- Implement second-factor authentication (2FA) mechanisms, such as TOTP (Time-Based One-Time Password), SMS-based OTP, or hardware tokens; Integrate 2FA into existing authentication flows
- Design and implement challenge-response authentication mechanisms for enhanced security
- Ensure secure handling of client secrets, API keys, and other sensitive credentials
- Develop and maintain RESTful APIs using Spring Boot
- Implement secure and scalable backend services for authentication and authorization; ensure APls adhere to best practices for performance, security, and maintainability
- Build reactive and non-blocking systems using Spring WebFlux or other reactive frameworks and optimize applications for high concurrency and low latency
- Enforce security best practices for authentication and authorization, including secure password policies, encryption, and secure session management
- Conduct security audits and vulnerability assessments for authentication systems
- Collaborate with cross-functional teams, including product managers, security teams, and DevOps, to deliver secure and scalable solutions, also, mentor junior developers and provide technical leadership in authentication and authorization
- Document authentication and authorization workflows, policies, and procedures
- Ensure compliance with industry standards and regulations, such as GDPR, HIPAA, or PCI-DSS.
- Strong proficiency in Java (Java 8+) and experience with modern Java frameworks and libraries
- Strong knowledge of Auth 2.0, OpeniD Connect (OIDC), and SAML
- Hands-on experience with Keycloak or similar IAM solutions
- Proficiency in working with JWT tokens and understanding of token-based authentication fl (e.g., Authorization Code Flow, Implicit Flow, Client Credentials Flow)
- Experience with second-factor authentication (2FA) and multi-factor authentication (MF)
- Familiarity with challenge-response mechanisms and secure credential management
- Extensive experience with Spring Boot for building RESTful Apls and strong understanding of REST API design principles and best practices.
- Experience with Spring Security for implementing authentication and authorization
- Proficiency in reactive programming using Spring WebFlux, Project Reactor, or similar frameworks; Experience building non-blocking, event-driven systems
- Strong understanding of cryptographic principles, including encryption, hashing, and digital signatures; Knowledge of secure coding practices and common vulnerabilities (e.g., OWASP Top)
- Excellent problem-solving, analytical, communication and collaboration skills
- Ability to work independently and lead technical initiatives.
Preferred Qualifications:
- Experience with Auth 2.1 and emerging authentication standards
- Knowledge of FIDO2 and WebAuthn for passwordless authenticatio
- Familiarity with DevSecOps practices and tools
- Experience with cloud platforms, such as AWS, Azure, or Google Cloud, and their IAM services.
- A chance to be a part of a casual but professional environment where you will have a safe place to try, fail and learn
- Have full ownership over your code
- Coaching from our tech leads to advance your soft and technical skills and set your own development path
- Defined and organized the onboarding process for both, the company and the project
- Competitive compensation depending on experience and skills
- Private pension and medical insurance for you and your family. Also, maternity and sick leave are 100% paid
- Sport clubs – from fishing to basketball, whatever rocks your boat
- Awesome referral fees - because great people know great people
- Work-life balance – this is the company that really supports your professional, family and personal goals
- Freedom to decide how you want to work - partly or fully remote or from our offices.
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.