Job Title: Senior Java Spring Boot Developer (SAML & OAuth)
Location: Remote
Engagement Type: Contract
(Initial part-time, hourly; potential to convert to full-time)
About the Role
We are seeking a highly experienced Senior Java Spring Boot Developer with deep expertise in OAuth 2.0 and SAML 2.0 to design and build secure, production-grade microservices. This role requires a hands-on engineer who can develop authentication and authorization mechanisms from the ground up and integrate with enterprise identity providers.
Key Responsibilities-
Develop and maintain production-grade microservices using Java 17+ and Spring Boot
-
Implement and manage OAuth 2.0 flows, including:
- Authorization Code
-
Client Credentials
-
PKCE
-
Token Introspection
-
Refresh Token Rotation
-
Integrate SAML 2.0 Single Sign-On (SSO) with enterprise identity providers such as Okta, Azure AD, and Ping Identity
-
Build and manage distributed job scheduling systems using:
- Quartz Scheduler (clustered)
-
Spring Batch
-
Spring Scheduler
-
Define and enforce API security policies, including:
- Token validation
-
Scope enforcement
-
Rate limiting
-
Audit logging
-
Ensure secure and scalable system architecture aligned with modern best practices
Required Experience & Skills-
7+ years of professional experience in Java development with Spring Boot in production environments
-
Strong expertise in Spring Authorization Server or Spring Security OAuth2
-
Deep understanding of OAuth 2.0 and OpenID Connect, with ability to implement flows without relying solely on frameworks
-
Hands-on experience with SAML 2.0, including:
- SP-initiated and IdP-initiated SSO
-
Metadata exchange
-
Attribute mapping
-
Assertion encryption and signing
-
Experience with job scheduling frameworks:
- Quartz (clustered environments)
-
Spring Batch pipelines
-
Distributed scheduling with Spring
-
Strong knowledge of:
- Spring Security
-
Spring Cloud Gateway
-
JWT handling (signing, rotation, blacklisting)
-
Solid understanding of:
- REST API design
-
HTTP security headers
-
HTTPS/TLS protocols
-
Experience with relational databases such as PostgreSQL or MySQL, and ORMs like Hibernate/JPA
-
Familiarity with event-driven architectures using Kafka or RabbitMQ
-
Proficiency in Git, Maven/Gradle, Docker, and Kubernetes fundamentals
Nice to Have-
Experience working with identity/authorization platforms such as Keycloak, Auth0, or Okta (as an Authorization Server).
JPpsBdEeSo
