Senior Java Software Engineer (IAM)

ABOUT THE OPPORTUNITY

We are looking for a Senior IAM Java Engineer to support a remote opportunity in the fintech sector, focused on secure, scalable and high-performance identity and access management solutions for enterprise environments.

WHAT YOU WILL DO

- Design, build and maintain backend services and microservices for identity and access management using Java.

- Customize, extend and optimize Keycloak deployments, including custom SPIs, authenticators and event listeners.

- Implement secure authentication and authorization flows based on OAuth 2.0, OpenID Connect and SAML 2.0.

- Define scalable access control models, session management practices and token handling mechanisms.

- Collaborate with frontend, mobile, DevOps and security teams to integrate IAM capabilities across distributed systems.

- Support engineering quality through code reviews, technical guidance and knowledge sharing on backend and security best practices.

WHAT WE ARE LOOKING FOR

- More than 10 years of professional backend software engineering experience, with strong exposure to IAM and security domains.

- Advanced experience designing distributed systems with high availability, low latency and resilient identity migration approaches.

- Strong ability to work with autonomy, ownership and a structured engineering mindset.

- Collaborative, responsible and solution-oriented profile, able to communicate clearly with multidisciplinary teams.

- Experience supporting technical standards, maintainability and secure development practices across backend solutions.

TECHNICAL SKILLS

- Java

- Keycloak

- IAM

- OAuth 2.0

- OpenID Connect

- SAML 2.0

- PKCE

- JWT

- RBAC

- ABAC

- Kubernetes

- Docker

- CI/CD

- LDAP

- PostgreSQL

- Microservices

- Distributed systems

- Zero-trust security principles

- Authentication and authorization flows

- Secure session and token management

NICE TO HAVE

- Go

- WebAuthn

- Passkeys

- Multi-factor authentication

- Experience contributing to open-source IAM or security projects

- CISSP, CCSP or cloud security certifications

WHAT WE OFFER

- A remote opportunity where you can contribute to relevant technology solutions while working with autonomy and responsibility.

- Continuous learning and certification support to strengthen your long-term professional development.

- Private health insurance from day one, with optional family extension.

- Confidential mental health support through dedicated professional services.

- Flexibility whenever the role and project context allow it, supporting balance across different life stages.

- Access to upskilling opportunities in information security and cybersecurity best practices.

EQUAL OPPORTUNITY

Hexa promotes equal opportunity and inclusive recruitment practices, aligned with the principles of the Portuguese Diversity Charter. We value people for their skills, experience, potential and contribution.

HEXA LIFE

At Hexa, every professional is a Builder. We work with honesty, mutual support and agility, creating strong professional relationships and delivering with quality, responsibility and a shared commitment to continuous improvement.