أخصائي أمن جافا

Role Overview

We are seeking an experienced Java Security & Integration Engineer with strong hands-on expertise in Java, Spring Boot, Identity and Access Management (IAM), application security, and enterprise middleware integration. The ideal candidate will have experience designing and developing secure, scalable enterprise applications and integrating authentication, authorization, APIs, and backend services across complex enterprise environments.

The candidate should possess practical experience with security protocols, IAM solutions, API gateways, IBM middleware technologies, and containerized application platforms such as OpenShift and Kubernetes.

Key Responsibilities

• Design, develop, and maintain secure enterprise applications and RESTful APIs using Java, Spring Boot, and Spring Security.
• Implement authentication, authorization, role-based access control (RBAC), and fine-grained access policies across enterprise applications.
• Integrate applications with enterprise IAM and Single Sign-On (SSO) solutions using OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, LDAP, and Active Directory.
• Develop and implement secure API integrations using API gateways, middleware platforms, and enterprise integration services.
• Work with IBM API Connect (APIC), IBM DataPower, and IBM App Connect Enterprise / IBM Integration Bus (ACE/IIB) for API management, service mediation, message transformation, and secure system integration.
• Implement API security controls, including JWT validation, token management, TLS/mTLS, certificate-based authentication, and secure credential handling.
• Apply secure coding practices and mitigate vulnerabilities such as injection attacks, broken access control, insecure authentication, and other OWASP Top 10 risks.
• Integrate Java and Spring Boot applications with enterprise services, databases, messaging systems, and third-party platforms.
• Deploy, configure, and troubleshoot applications in Red Hat OpenShift and Kubernetes environments.
• Collaborate with security architects, IAM teams, middleware engineers, DevOps teams, and application development teams to deliver secure end-to-end solutions.
• Support application security assessments, vulnerability remediation, root-cause analysis, production troubleshooting, and performance optimization.
• Participate in technical design reviews, code reviews, security reviews, release management, and CI/CD automation.

Mandatory Technical Skills

1. Java Application Development

• Strong hands-on experience with Java, preferably Java 8 or later.
• Advanced understanding of OOP, collections, multithreading, exception handling, and enterprise application design.
• Strong development experience with Spring Boot, Spring Security, and REST APIs.
• Experience building microservices and integrating distributed enterprise applications.

2. Application Security & IAM

• Strong understanding of Identity and Access Management concepts.
• Practical experience implementing authentication, authorization, SSO, RBAC, and access-control mechanisms.
• Working knowledge of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, LDAP, and Active Directory.
• Experience with secure API design, token validation, encryption, TLS/mTLS, certificates, and secrets management.
• Understanding of OWASP Top 10, secure coding, vulnerability assessment, and application security remediation.

3. Enterprise Middleware & API Integration

• Hands-on experience with one or more enterprise middleware technologies:
  
• IBM API Connect (APIC)
• IBM DataPower Gateway
• IBM Integration Bus (IIB) / IBM App Connect Enterprise (ACE)
• Experience with API gateway policies, API authentication, authorization, request/response transformation, routing, and service integration.
• Understanding of enterprise integration patterns, REST/SOAP services, and message-based integration.
• Experience with IBM MQ or other enterprise messaging technologies is an advantage.

4. Containerization & Platform Engineering

• Experience deploying and troubleshooting Java/Spring Boot applications on OpenShift or Kubernetes.
• Understanding of containers, deployments, services, ingress/routes, configuration, secrets, and application health checks.
• Familiarity with Docker, CI/CD pipelines, Git, and automated build/deployment processes.

Preferred Qualifications

• Experience integrating Java applications with enterprise IAM platforms such as Keycloak, ForgeRock, Ping Identity, Okta, or Microsoft Entra ID.
• Experience with API security architecture, zero-trust principles, and enterprise security standards.
• Knowledge of Kafka, IBM MQ, event-driven architecture, or distributed systems.
• Familiarity with Maven/Gradle, Jenkins, GitLab CI/CD, SonarQube, and vulnerability scanning tools.
• Experience working in banking, financial services, government, telecommunications, or other security-sensitive enterprise environments.

Desired Candidate Profile

• Minimum 6+ years of relevant IT experience, with substantial hands-on Java and Spring Boot development experience.
• Strong practical knowledge of application security and IAM integration.
• Proven experience integrating applications through enterprise middleware and API management platforms.
• Ability to troubleshoot complex authentication, authorization, API connectivity, and integration issues.
• Strong analytical, communication, documentation, and stakeholder collaboration skills