Systems Design/Architecture Engineer
RocheMatch Score
Against your primary resumeLogin to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Protocol Intelligence
Data-driven signals on your job's competitivenessStrong Tier-1 employer plus mid-level generalist backend role with broad CIAM and AWS skills increases competition.
Specialized CIAM, OAuth/OIDC and Keycloak requirements create high domain-specific background sensitivity.
Multiple mandatory JVM, security (OAuth/OIDC), AWS, database, and CI/CD requirements tighten shortlisting filters.
Job Description
Structured overview of role & requirementsAbout This Role
Design, develop, and operate backend services for Customer Identity & Access Management (CIAM) platform using Java 21, Spring Boot, and Keycloak.
Lead migration of legacy identity systems to Keycloak applying strangler pattern with zero downtime.
Manage production readiness including monitoring, testing, CI/CD pipelines, and participate in code reviews and architecture decisions.
Minimum Requirements
4+ years professional JVM development experience with recent Java 17/21 and Spring Boot expertise.
Proficient in OAuth 2.0, OIDC, JWT, and SAML authorization flows without external reference.
Hands-on experience with relational databases including schema design and migrations (Liquibase or Flyway).
Practical AWS production experience (messaging, storage, secrets, IAM).
Ideal Candidate Profile
Experienced in Keycloak customization (SPIs, themes, admin APIs) or equivalent IdP systems (Auth0, Okta, ForgeRock).
Comfortable working in polyglot environments including React/TypeScript frontend and Node.js services.
Familiar with containerization (Docker), CI/CD pipelines, and observability tools in regulated sectors such as healthcare or life sciences.