IAM Java Engineer
Posted 2 days 2 hours ago by Levy Associates Ltd
Location: Netherlands (Hybrid - on-site Mondays & Thursdays)
Type: Contract (until June 2026, strong extension potential)
Relocation: Offered (for candidates who fully meet technical requirements)
We are hiring a SENIOR IAM JAVA Engineer to join a critical identity and access transformation programme for a major banking institution. This is a long-term contract role (through June 2026) with significant scope for extension.
You will join a highly experienced identity engineering team responsible for delivering secure, scalable, and modern authentication flows across a complex enterprise environment. The project spans Legacy platforms, private cloud, and public cloud infrastructure.
Key Responsibilities:Design, implement, and maintain authentication solutions using PingFederate and PingAccess
Develop secure Back End components and custom Java-based adapters/plugins for Ping products
Support integration of federation standards including OAuth 2.0, OpenID Connect, and Single Sign-On (SSO)
Collaborate with architects, developers, and external vendors to design secure, compliant IAM solutions
Troubleshoot and optimise performance within distributed systems
Contribute to the overall solution architecture for enterprise identity flows including CH-ASM, QR login, OTP, IVR
Must-Have Skills & Experience:
Proven Java development experience (Java 17+ preferred)
Hands-on with PingFederate and PingAccess
Strong experience in custom adapter/plugin development for authentication
Deep understanding of IAM concepts, including identity life cycle, provisioning, access control
Practical knowledge of OAuth 2.0, OpenID Connect, and SSO protocols
Experience with secure, scalable Back End systems in regulated environments
Strong troubleshooting skills in complex, high-load distributed environments
Nice-to-Have:
Experience with Spring Boot and/or Groovy Scripting
Prior work in banking, financial services, or other regulated sectors
Exposure to authentication flows such as QR login, IVR, and OTP
Additional Information:
Working Model: Hybrid (on-site every Monday & Thursday, remote on other days)
Contract Duration: Until June 2026, with likely extension
Relocation Support: Provided for top-tier candidates based in Europe, South Africa, or Turkey
Interview Process: 1-2 stages depending on profile depth and availability