Senior Software Engineer (Java - Identity Access Management)

Overview

Join the Zero-Trust Service Identity team to define and deliver service-to-service authentication across internal APIs. Design and roll out SPIFFE/SPIRE as the identity plane, spanning architecture, implementation, automation, and operations.

What you'll do

• Design and build mission-critical IAM services, primarily in Java.
• Define and deliver the standard for service-to-service authentication across internal APIs.
• Lead the design and rollout of SPIFFE/SPIRE as the organization’s identity plane.
• Enable workload-based identity with mTLS using X.509 SVIDs and JWT-SVIDs.
• Establish high-availability, single-point-of-failure-free deployments.
• Integrate IAM services with enterprise PKI/HSM.
• Build verifier libraries for Java, Go, and .NET.
• Enable rapid adoption through self-service tooling and golden templates.
• Develop and support large-scale, global systems that adhere to security compliance.
• Work with AWS and on-premises systems to deploy services.
• Develop and maintain current- and future-state IAM documentation and standards.
• Participate in code reviews and proactively take ownership of pull requests to catch security vulnerabilities.
• Collaborate and interact with multiple teams across FactSet.
• Respond to stakeholder queries in a timely manner.
• Learn from errors and incidents in production while participating in the on-call rotation as required.

What you'll need

• Bachelor’s degree or higher in Computer Science or a related technical field.
• 5+ years of programming experience in Java or another object-oriented programming language.
• Experience with IAM authentication protocols such as OAuth2, OpenID Connect, and SAML.
• Experience building services using a relational database such as MS SQL Server, PostgreSQL, or MySQL.
• Basic knowledge of cloud technologies such as AWS or Azure.
• Willingness to participate in the on-call rotation.

Nice to have

• Implemented role-based access control systems in a large, distributed environment.
• Written RESTful HTTP APIs.
• Strong understanding of browser functionality such as cookies and CORS.

Details

• Location: Hyderabad, India.
• Participate in the on-call rotation as and when required.