Senior Software Engineer (AM + Auth)

About the role

Gravitee is looking for a Senior Software Engineer to build and maintain the identity and authorization features of Gravitee Access Management (AM), across the AM runtime and the access-management experience in Gamma. This is a new role: AM engineering is currently based entirely in Europe, and this hire gives US-hours ownership of Level 3 and Level 4 authentication and authorization incidents and adds delivery capacity toward AM parity in Gamma. You will spend roughly 80% of your time on feature delivery and 20% on L3/L4 support and bug fixing, working as an embedded member of the AM team.

Key responsibilities

• Design and deliver features end to end, from technical design through implementation, testing, release and iteration.
• Implement and support OAuth 2.0 and OIDC flows, SAML 2.0, SCIM, and FAPI/CIBA/UMA profiles.
• Work with token and session semantics (JWT, JWKS, key rotation, revocation, introspection, MFA, WebAuthn/FIDO2, IdP federation).
• Keep security behavior safe: secure defaults, certificate and secret handling, audit logs, and defenses against token replay, SSRF and account takeover.
• Own safe migrations and backward compatibility across MongoDB and JDBC, and support multi-domain, multi-region deployments.
• Own US-hours Level 3 and Level 4 escalations for AM customers as part of the L3 pager duty rotation.
• Use LLMs and AI-assisted tools thoughtfully, write automated tests, and collaborate with product managers, designers and engineers, including the AM team in Europe.

Required profile

• 5+ years building and running production backend software on a team that ships and supports its own product, with personally resolved production incidents.
• Strong Java experience (C# accepted if the object-oriented depth is there), with Maven and a reactive stack such as Vert.x/RxJava.
• Deep knowledge of identity standards (OAuth 2.0, OIDC, SAML 2.0, SCIM, FAPI/CIBA/UMA) and token/session semantics.
• A security-first mindset and hands-on experience with migrations across MongoDB or JDBC-backed databases.
• Git workflow, code review, automated tests, and clear communication in a fast-moving, international environment.

Required skills

• Java, Maven, Vert.x/RxJava
• OAuth 2.0, OIDC, SAML 2.0, SCIM, FAPI/CIBA/UMA
• JWT, JWKS, WebAuthn/FIDO2
• Git, code review, automated testing
• Desired: API gateway or service-mesh experience, Kubernetes, Docker, cloud-native delivery, MCP or agent-to-agent protocols, LLM-powered apps or RAG systems, open-source developer platforms

What we offer

• Salary of $160,000
• Medical coverage, pension / 401(k) options and stock options
• 25 days of holiday plus national holidays, three mental health days and a wellness allowance
• Birthday off, professional development budget and hybrid work culture