Senior Software Engineer, Identity & Access Management
HybridHelsinki, Uusimaa, Finland
Job Summary
Design, build, and evolve the authorization platform supporting RBAC/ABAC/ReBAC models to enable teams across the company to determine user permissions. Develop and maintain the authentication system covering diverse patterns while integrating with Auth0, and manage the user management platform for creating, provisioning, and handling identities and entitlements for the entire customer base. Partner with security teams to ensure secure-by-design systems aligned with SOC2 and GDPR requirements, and design highly scalable systems that grow with the user base. Contribute to the roadmap across all three identity domains and build self-service APIs via GraphQL, gRPC, and REST for product engineering teams. Collaborate daily within the Helsinki-based User Management team to champion testing, observability, and reliability practices.
Required Qualifications
- Backend: Java 2X
- Spring Boot 3.X.X
- WebFlux
- Maven
- SQL
- GraphQL
- gRPC
- REST
- AWS
- GCP
- Kubernetes
- Helm
- RBAC/ABAC/ReBAC
- OAuth 2.0
- OIDC
- JWT
- SAML 2.0
- enterprise SSO federation
- assertion validation
- signature/encryption handling
- IdP- vs. SP-initiated flows
- SCIM
- Event-driven architecture patterns
- TDD
- genuine passion for automated testing
- Experience operating within SOC2 and/or GDPR-compliant environments
- Must be available to work closely, day-to-day, with the rest of the team here in Helsinki
Desired Qualifications
- Auth0 experience
- SpiceDB / Zanzibar-style authorization system experience
- Apollo Federation
- OpenTelemetry
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.