JAVA Developer (KeyCloak)
TechStack Global AB · Solna · Tills vidare · Deadline 2027-03-31
TechStack Global AB is seeking a **Java Developer (Keycloak)** to design, build, and operate identity and access management capabilities using Keycloak and Java microservices. The position entails extending Keycloak through custom SPIs, user federation, providers, and themes, as well as implementing authentication and authorization flows utilizing OAuth 2.0, OpenID Connect, SAML, and MFA. Responsibilities include driving security best practices—such as secure token handling and threat modeling—and maintaining **end-to-end service ownership in production**, covering deployment, observability, incident response, and cross-functional collaboration with security and platform teams. Candidates must be senior professionals with **12–15 years of experience** in system and software development, architecture, and technical troubleshooting. The role requires strong Java backend development expertise in running production microservices, proven hands-on Keycloak deployment and SPI customization experience, and deep proficiency with OAuth 2.0, OpenID Connect, JWT, and SAML. Desirable qualifications include familiarity with CIAM at scale, event-driven architectures, observability tools, databases like PostgreSQL, container platforms such as Docker and Kubernetes, and major cloud environments including AWS or Azure.
Senior java developer with 12-15 years experience in system and software development, architecture and technical troubleshooting.
Development tools - Git, Apache Maven, Eclipse IDE, IntelliJ, Apache Subversion
Programming Languages - Java, Bash scripting, Python, Kotlin
Technologies - MBeans, SQL, JMS, OpenID Connect, SSH, REST API, SOAP, REST, Identity and Access Management, SSO, SAMLv2, HTTPS/TLS
Products - Gradle, Atlassian JIRA, Infinispan, Spring, JBoss EAP, Hibernate, PostgreSQL, MongoDB, JBoss Application Server, Microsoft SQL Server, Oracle DB, RabbitMQ, Jenkins, Amazon S3, JBoss ESB, JBoss Enterprise SOA Platform, Smooks, HornetQ, Git, Keycloak, Docker, Docker Compose, Elasticsearch/Logstash/Kibana, AWS Route 53, AWS ECS, MySQL, AWS API Gateway, AWS DynamoDB, AWS Elastic Load Balancing (ELB), WSO2 API Manager, Azure AD, OpenLDAP, GitLab, Elasticsearch, AWS Cognito, WSO2 Identity Server, AWS EC2, AWS Lambda, AWS CloudFormation, AWS CloudWatch, AWS RDS, AWS SES, AWS Kinesis, AWS SNS, Atlassian Confluence, BankID, Grafana, Kubernetes, Apache Camel, SoapUI, AWS, AWS S3 Bucket, AWS ACM
Development JAX-RPC, JAX-RS, JAX-WS, Spring, SAML, Anypoint Platform, GitHub, Spring Boot, FreeMarker, Javascript/jQuery, JSON, ReactJS
Testing - Integration Testing, System Testing
• Design, build, and operate IAM capabilities on Keycloak and Java microservices
• Extend Keycloak through custom SPIs, providers, user federation, and themes to meet evolving business requirements
• Implement and maintain authentication and authorization flows using OAuth 2.0, OpenID Connect, SAML, MFA, and social or enterprise federation
• Drive security best practices, including secure token handling, session management, threat modeling, and supporting audits and compliance
• Own services in production, from design through deployment, observability, and incident response
• Collaborate with product, security, and platform teams to deliver reliable, scalable identity solutions
• Strong Java backend development experience, building and running microservices in production
• Proven, hands-on experience with Keycloak in real-world deployments, including customization via SPIs and providers
• Deep understanding of OAuth 2.0, OpenID Connect, JWT, and SAML
Nice To Have:
• Experience with CIAM at scale: customer identity, identity resolution, or account deduplication
• WebAuthn/FIDO2/passkeys, Zero Trust architectures, or PKI
• Event-driven architectures (e.g., Kafka)
• Observability tooling such as Prometheus, Grafana, and OpenTelemetry
• Proven experience designing and operating distributed systems and microservices in production
• Solid database skills (e.g., PostgreSQL) and familiarity with caching relevant to Keycloak deployments (e.g., Infinispan/Redis)
• Experience with Docker, Kubernetes, CI/CD pipelines, and at least one major cloud platform (AWS or Azure)
• A security-first mindset and experience supporting audits and compliance requirements
Competence.
• Java with distributed systems and microservices
• OAuth 2.0, OpenID Connect, JWT, and SAML
• Solid database skills (e.g., PostgreSQL)
• Docker, Kubernetes, CI/CD pipelines
• Openshift
• Kafka
• Mq
• Oracle
• Kubernetes
• Azure (API, static web application, app service, sqlserver)