12 days ago
Denver, CO, USASenior
Base Salary
$160k - $160k/yr
Responsibilities
- Design and deliver backend features end to end from discovery and technical design through implementation, testing, release, and iteration.
- Build and maintain identity and authorization features across the Gravitee Access Management runtime and Gamma experience.
- Implement and support OAuth 2.0, OIDC, SAML 2.0, SCIM, and FAPI/CIBA/UMA profiles.
- Manage token and session semantics including JWT, JWKS, key rotation, revocation, introspection, MFA, step-up authentication, WebAuthn/FIDO2, federation, and social login.
- Maintain secure defaults, certificate and secret handling, consent, audit logging, and defenses against token replay, SSRF, and account takeover.
- Own safe migrations and backward compatibility across MongoDB and JDBC-backed stores, including multi-domain and multi-region deployments.
- Handle US-hours Level 3 and Level 4 customer escalations as part of the AM pager-duty rotation.
- Write automated tests, support reliable delivery, use AI-assisted development tools thoughtfully, and collaborate with product, design, engineering, and technical leadership.
Requirements
- At least 5 years of experience building and running production backend software on a team that ships and supports its own product, including personally resolving production incidents.
- Strong Java experience, or C# experience with equivalent object-oriented depth, plus Maven and a reactive stack such as Vert.x or RxJava.
- Deep working knowledge of OAuth 2.0 and OIDC flows, SAML 2.0, SCIM, and FAPI/CIBA/UMA profiles.
- Solid understanding of JWT, JWKS, key rotation, revocation, introspection, MFA and step-up authentication, WebAuthn/FIDO2, and identity-provider federation.
- Experience with secure defaults, certificate and secret handling, audit logging, and risks including token replay, SSRF, and account takeover.
- Experience with safe migrations and backward compatibility across MongoDB or JDBC-backed relational databases.
- Git-based workflows, code review, automated testing, clear communication, collaborative problem-solving, and the ability to take ambiguous problems through production.
- Hands-on use of LLMs or AI coding assistants with the judgment to review and improve generated output.
- Preferred experience includes API gateways, proxies, service meshes, Kubernetes operators and CRDs, OpenAPI tooling, Envoy, Docker, cloud-native delivery, MCP, A2A, tool calling, LLM proxies, RAG systems, agentic workflows, open-source software, or enterprise developer platforms.
Benefits
- $160,000 salary.
- Competitive medical coverage and pension/401(k) program options.
- Stock options, 25 days of holiday plus in-country national holidays, three mental health days, and a wellness allowance.
- Birthday leave and a professional development budget.
- Hybrid work culture with regional hubs, quarterly team events, and an annual company offsite.
- Collaborative international culture with opportunities to grow scope and career.
