We are seeking a Java Software Architect to design and drive the implementation of our User Management Ecosystem, including OpenID, SSO (Single Sign-On), User Management and Identity Provider solutions, and Orbit Invention Architecture. The ideal candidate will have extensive experience in designing scalable and secure authentication and authorization frameworks, ensuring seamless user experiences across various platforms. 

Join the “Architecture & Project” team 

United by a passion for technology, our team is at the forefront of exploring and mastering a myriad of evolving web solutions. Comprising technologists from diverse backgrounds and regions, our collaborative efforts aim to facilitate and guide the ongoing technological evolution at Questel.  

Our extensive scope of work involves developing user-centric UIs, APIs, implementing Single Sign-On and user identification strategies, ensuring adherence to ISO 27001 standards, creating adaptable testing frameworks, and integrating customized data solutions. Each initiative is a valuable opportunity for us to expand our technical expertise and innovate. 

With a commitment to excellence and industry best practices, we play a pivotal role in shaping Questel’s technological landscape as we are on a continuous journey to explore new possibilities, support various teams worldwide, establish industry standards, and drive forward innovation.  

⭐ Your next adventure awaits here ⭐

Lead the technical strategy for User Management and Identity Provider, including RBAC (Role-Based Access Control), MFA (Multi-Factor Authentication), and user provisioning.  Architect and design scalable, secure, and high-performance user authentication and authorization solutions using Java and relevant security protocols.  Oversee the development and integration of OpenID, OAuth 2.0, SAML, and other authentication frameworks to support SSO.  Design and implement API Gateway solutions for secure authentication and authorization of microservices.  Ensure compliance with security best practices, GDPR, and other regulatory requirements related to user data protection.  Collaborate with cross-functional teams, including product managers, DevOps, and security teams, to align UM solutions with business needs.  Lead the design and implementation of Orbit Invention Architecture, ensuring seamless integration, security, and scalability.  Drive the adoption of best practices in coding, testing, deployment, and monitoring for authentication services.  Provide technical leadership and mentorship to development teams, reviewing code and ensuring architectural integrity.  Stay updated with emerging trends in identity management, authentication mechanisms, and Java-based security frameworks.  Stay ahead of emerging technologies and trends, continuously improving the platform’s technical foundation.  

 
The perfect match…

5+ years of experience in Java software development   Strong expertise in Java (JavaEE, Maven, Spring, Spring Security) for building enterprise applications.  Hands-on experience with SSO protocols (OpenID Connect, OAuth 2.0, SAML, JWT, etc.).  Database clusterization (Galera, XtraDb, ProxySQL)   Proficiency in RESTful API security, JWT, token-based authentication, and API Gateway integration.  Strong knowledge of API Gateway solutions (Kong, Apigee, AWS API Gateway, or similar).  Strong knowledge of LDAP, Active Directory, and other identity providers.  Familiarity with DevSecOps practices, CI/CD pipelines, and cloud platforms (AWS, Azure, GCP).  Experience with containerized deployments (Docker & DockerCompose, Kubernetes) and microservices architecture.  Solid understanding of encryption standards, PKI, TLS, and security vulnerabilities (OWASP Top 10).  Excellent problem-solving skills and ability to communicate complex security concepts to non-technical stakeholders.  Familiarity with JavaScript, Node.js, and modern frontend frameworks for enhanced integration capabilities. 

Nice-to-Have 

Experience with zero-trust architectures and modern identity verification techniques.  Knowledge of federated authentication models and decentralized identity (DID, verifiable credentials).  Contributions to open-source identity management projects.
 

Join Questel, a growing international group, and live a great human adventure!