Lead Software Engineer,986
(Java / Spring Boot / Node.js / API / IAM)
Locations: Trivandrum, Kochi, Bangalore, Chennai, Hyderabad, Pune, Gurgaon
Experience: 4 10 Years
Job Type: Full-time | Hybrid (3 days office)
Shift Timing: 12:00 PM 9:00 PM
Notice Period: 0 15 days only (Immediate to short joiners preferred)
Job Stability: Mandatory
Job Summary
We are looking for a Lead Software Engineer with strong experience in
Java/Spring Boot or Node.js, specializing in
API development and Identity & Access Management (IAM). The role involves building secure, scalable APIs and implementing modern authentication and authorization mechanisms across enterprise applications.
Key Responsibilities
- Design and build secure APIs with JWT token validation
- Implement OAuth 2.0 flows for server-side and SPA applications
- Handle token introspection, revocation, and lifecycle management
- Implement PKCE for secure SPA authentication
- Manage session-based vs token-based authentication
- Support Single Sign-On (SSO) integrations across multiple applications
- Configure inbound and outbound SSO using federation standards
- Implement universal logout (single sign-out) across applications
- Validate tokens at API Gateway level
- Ensure adherence to security best practices (CSRF, XSS prevention, secure token storage)
Mandatory Skills Core IAM Concepts
Authentication & Authorization
- OpenID Connect (OIDC): flows, ID token handling
- OAuth 2.0: grant types, scopes, refresh tokens
- PKCE: purpose and implementation
Session & Token Management
- Session creation, renewal, and termination
- Token types: Access, ID, Refresh tokens
- Token validation, expiry, and renewal strategies
Login & SSO
- Standard login/logout flows
- Universal logout (single sign-out)
- Inbound & outbound SSO
- Federation concepts (OIDC / SAML)
Must-Have Technical Skills
- Java + Spring Boot + API + OAuth 2.0 OR
- Node.js + API + OAuth 2.0
Preferred (Nice To Have)
- Experience with enterprise IAM platforms (widgets, SDKs, APIs)
- Exposure to IAM migration projects from legacy systems
- Knowledge of identity federation and SSO ecosystems
Interview Process
- 2 Technical Rounds
- 1 Client/Stakeholder Round
Skills: api,java,authentication,oauth 2.0,iam,oauth,boot
