Java Security Integration Engineer

Location: Loveland, Colorado

Schedule: Hybrid (3 days onsite)
Duration: 6-12 Months (with potential for extension)
Experience Level: Senior (Minimum 5+ years of relevant experience)
Target Start Date: Immediate

Role Summary

We are seeking an experienced Contract Senior Java Security Integration Engineer to join our team for a critical, high-impact engagement. In this role, you will lead the implementation and refinement of application security features, identity management systems, and monitoring integrations across our software ecosystem.

The ideal candidate is a hands-on developer with 5+ years of experience who bridges the gap between core Java development and modern web application security practices. You will be responsible for developing secure integrations, implementing robust Customer Identity & Access Management (CIAM) systems, establishing secure Single Sign-On (SSO) pathways, work on legacy system refactoring, troubleshooting application behaviors behind Web Application Firewalls (WAF), and ensuring that security logging seamlessly integrates with our enterprise SIEM platforms.

Key Responsibilities

1. Security Architecture & Feature Development

• Secure Coding: Design, develop, and maintain high-performance, secure Java-based backend services and APIs using modern frameworks (e.g., Spring Boot, Spring Security).
• AppSec Best Practices: Conduct threat modeling, perform secure code reviews, and remediate application vulnerabilities based on OWASP Top 10 standards.

2. Identity & Access Management (IAM / CIAM)

• SSO Integrations: Design and configure secure Single Sign-On (SSO) workflows utilizing industry-standard protocols including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• IdP Management: Integrate enterprise application suites with primary Identity Providers (IdPs) such as Okta, Auth0, Microsoft Entra ID (Azure AD), or Keycloak.
• CIAM Implementation: Lead the implementation of Customer Identity & Access Management (CIAM) systems
• Experience with B2C authentication architecture.

• A strong understanding of modern authentication and authorization protocols to secure client-facing portals, including multi-factor authentication (MFA) and registration workflows.

3. Perimeter Protection & Incident Monitoring

• WAF Integration: Partner with infrastructure and cloud engineering teams to Develop custom WAF rules to safeguard against OWASP vulnerabilities.

• Analyze WAF logs and fine-tune security policies to minimize false positives.

• SIEM Logging & Integration: Architect and implement structured, standardized logging patterns within our Java services to enable seamless event ingestion, correlation, and alerting in Security Information and Event Management (SIEM) systems (e.g., Splunk, Datadog, Microsoft Sentinel).

4. Secure AI & API Integration

• AI & LLM Integration: Design and implement backend integrations with Large Language Models (LLMs) and AI platform endpoints (e.g., OpenAI, Azure OpenAI, AWS Bedrock).
• RAG Architectures: Build and maintain Retrieval-Augmented Generation (RAG) pipelines, ensuring that corporate data sources are saf

  All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, and Los Angeles County Fair Chance Ordinance.