IAM Software Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and integrate RESTful APIs that facilitate identity workflows and partner application authentication.

• Implement OAuth 2.0, OpenID Connect (OIDC), PKCE, and secure token management practices.

• Construct secure API authentication and authorization services utilizing JWT, access tokens, and refresh tokens.

• Integrate backend services with the Okta Identity Engine (OIE), Okta Embedded SDK, and Department of Defense (DoD) enterprise IAM solutions.

• Execute identity service integrations with authoritative identity repositories and enterprise data sources.

• Create secure backend web services using Java, Spring Boot, .NET, or comparable technologies.

• Support API gateway configurations, microservices architecture, and service orchestration practices.

• Implement JSON/XML data exchange models and API contracts for partner application usage.

• Apply enterprise integration patterns and asynchronous messaging through queues, events, and service buses.

• Design authentication workflow orchestration and session management services.

• Develop backend services that support mobile authentication for native iOS and Android applications.

• Employ advanced API security practices, including OWASP API Security Top 10, mTLS, and certificate-based authentication.

• Implement secure database integration and data access methodologies.

• Create reusable identity services that support multiple partner applications.

• Implement API Gateway integrations.

• Establish enterprise audit logging and operational telemetry.

• Contribute to CI/CD pipelines, automated builds, and DevSecOps processes.

• Conduct unit, integration, and API testing.

• Engage in Agile development, Git-based version control, and secure configuration management.

• Integrate enterprise ICAM/CIAM platforms within cloud or hybrid environments.

• Ensure identity solutions adhere to NIST SP 800-63 Digital Identity Guidelines and Zero Trust Architecture principles.

• Support DoD cybersecurity requirements, including RMF and STIG compliance.

⛳️ Requirements

• 5 years of experience with a BS/BA; 3 years with an MS/MA; 0 years with a PhD; 9 years with a high school diploma.

• Must be able to obtain and maintain a Public Trust clearance.

• U.S. Citizenship is required.

• Proven experience in designing, developing, and integrating RESTful APIs.

• Strong understanding of OAuth 2.0, OpenID Connect (OIDC), PKCE, and token management.

• Experience in implementing secure API authentication and authorization using JWT, access tokens, and refresh tokens.

• Familiarity with integrating the Okta Identity Engine (OIE) and enterprise IAM services.

• Experience in integrating identity services with authoritative identity repositories.

• Background in secure backend development utilizing Java, Spring Boot, .NET, or similar frameworks.

• Exposure to API gateways, microservices, and backend orchestration.

• Proficiency in JSON/XML and API contract development.

• Experience with enterprise integration patterns and asynchronous messaging.

• Understanding of authentication workflow orchestration and session management.

• Experience in building backend services that support native mobile authentication.

• Knowledge of API security best practices, including OWASP API Security Top 10, mTLS, and certificate authentication.

• Experience with databases and secure data access methodologies.

• Familiarity with CI/CD pipelines and DevSecOps environments.

• Hands-on experience with unit, integration, and API testing tools such as Postman and Swagger/OpenAPI.

• Experience in supporting enterprise ICAM/CIAM solutions in cloud or hybrid architectures.

• Knowledge of NIST SP 800-63 and Zero Trust Architecture.

• Experience in supporting RMF and STIG cybersecurity compliance.

• Preferred: Experience integrating backend services with Okta Identity Engine Embedded SDK.

• Preferred: Experience supporting large-scale Federal ICAM/CIAM programs.

• Preferred: Knowledge of DoD identity services, CAC/PIV, derived credentials, or enterprise credentialing.

• Preferred: Experience with event-driven architectures or high-security distributed systems.

• Preferred: Familiarity with DoD Zero Trust initiatives and identity modernization.

🏝️ Benefits

• Potential eligibility for overtime.

• Potential eligibility for shift differential.

• Potential eligibility for discretionary bonus.