ABOUT THE OPPORTUNITY

We are looking for a Senior IAM Java Engineer to support a remote opportunity in the fintech sector, focused on secure, scalable and high-performance identity and access management solutions for enterprise environments.

WHAT YOU WILL DO

Design, build and maintain backend services and microservices for identity and access management using Java.
Customize, extend and optimize Keycloak deployments, including custom SPIs, authenticators and event listeners.
Implement secure authentication and authorization flows based on OAuth 2.0, OpenID Connect and SAML 2.0.
Define scalable access control models, session management practices and token handling mechanisms.
Collaborate with frontend, mobile, DevOps and security teams to integrate IAM capabilities across distributed systems.
Support engineering quality through code reviews, technical guidance and knowledge sharing on backend and security best practices.

WHAT WE ARE LOOKING FOR

More than 10 years of professional backend software engineering experience, with strong exposure to IAM and security domains.
Advanced experience designing distributed systems with high availability, low latency and resilient identity migration approaches.
Strong ability to work with autonomy, ownership and a structured engineering mindset.
Collaborative, responsible and solution-oriented profile, able to communicate clearly with multidisciplinary teams.
Experience supporting technical standards, maintainability and secure development practices across backend solutions.

TECHNICAL SKILLS

Java
Keycloak
IAM
OAuth 2.0
OpenID Connect
SAML 2.0
PKCE
JWT
RBAC
ABAC
Kubernetes
Docker
CI/CD
LDAP
PostgreSQL
Microservices
Distributed systems
Zero-trust security principles
Authentication and authorization flows
Secure session and token management

NICE TO HAVE

Go
WebAuthn
Passkeys
Multi-factor authentication
Experience contributing to open-source IAM or security projects
CISSP, CCSP or cloud security certifications

WHAT WE OFFER

A remote opportunity where you can contribute to relevant technology solutions while working with autonomy and responsibility.
Continuous learning and certification support to strengthen your long-term professional development.
Private health insurance from day one, with optional family extension.
Confidential mental health support through dedicated professional services.
Flexibility whenever the role and project context allow it, supporting balance across different life stages.
Access to upskilling opportunities in information security and cybersecurity best practices.

EQUAL OPPORTUNITY

Hexa promotes equal opportunity and inclusive recruitment practices, aligned with the principles of the Portuguese Diversity Charter. We value people for their skills, experience, potential and contribution.

HEXA LIFE

At Hexa, every professional is a Builder. We work with honesty, mutual support and agility, creating strong professional relationships and delivering with quality, responsibility and a shared commitment to continuous improvement.

Java Engineer: Legacy Modernization & Cloud (Remote) - Remote

Comece com seu e-mail