Lead Engineer Identity and Access Management 80-100%

Every day, we work hard to make small entrepreneurs more successful. Sounds ambitious? It is. That's why we need your help. We represent the philosophy that every company should be able to afford high-quality and efficient software solutions. That's why bexio is today the leading provider of web-based business software for small businesses. We are continuing on an expansion course and have over 100,000 customers, over 7,000 trust partners, and more than 150 employees. To continue growing, we need energetic support! Lead Engineer Identity and Access Management (m/w/d) 80-100% What awaits you with us: Technical responsibility for our IAM services with a focus on Keycloak, the User Profile Service, and the integration of connected applications. Further development and stabilization of existing authentication and authorization flows in a grown system landscape with PHP legacy components and JVM-based services. Concept and implementation of Keycloak setups, clients, realms, roles, groups, claim, and token mappings for productive SaaS application cases. Development and maintenance of Keycloak extensions, custom providers, and deeper service integrations in the JVM environment. Gradual replacement of grown authentication logics in existing applications without unnecessarily jeopardizing stability, user experience, or ongoing product development. Technical leadership of a small hands-on development team with PHP and JVM focus through code reviews, pair programming, architecture sparring, and clear technical guidelines. Ensuring stable and well-monitored operation of IAM services through monitoring, alerting, incident analysis, error correction, performance optimization, and continuous reduction of technical debt. What we expect from you: In-depth practical experience with Java/JVM and Keycloak in productive, ideally multi-tenant SaaS environments. In-depth technical understanding of OpenID Connect (OIDC), OAuth 2.0, and common web security standards (JWT, CORS, State Handling). In-depth knowledge or willingness to deeply familiarize yourself with existing PHP code to understand and gradually replace grown authentication logics. A pronounced awareness of clean code, automated deployment pipelines, scalability, and system performance. In-depth and clear communication on an equal footing with product owners, developers, and various stakeholders to justify technical decisions cleanly. High self-responsibility, strong organizational skills, and clear technical communication to effectively structure, prioritize, and lead yourself and your team across multiple topics, systems, and stakeholders. What you can expect from us: Work smart: Flexible working hours are a matter of course for us. Moreover, you choose the ideal workplace for your tasks, whenever your work allows it. Fair salary: You do good work, we provide adequate pay. You are important - The heart of our company is the employees. That's why we treat each other with respect and simplicity. We also give you the freedom to develop personally in a positive work environment. Team first: A good team does even better work. That's why we regularly organize employee events to strengthen team cohesion. Healthy employees: We're doing well if you're doing well. That's why we promote a balanced balance between work and private life with sports and relaxation offers. More than necessary: bexio takes over the larger premium share of the pension fund for you. We also offer an individual choice program tailored to you and your life. You can benefit from favorable mobile subscription conditions. What else you should know about us: We are a young dynamic company that works together as a team to make a great product even better. You're in the right place with us if you want to work with us in a lively scale-up atmosphere on this ideology and love the web and its possibilities. With us, there is room to develop personally and professionally in a positive work environment and to give your ideas the necessary freedom. Sounds good? Then apply directly online under the following link. For the sake of the environment, please refrain from applying in paper form - digitalized form is sufficient. We look forward to you! jpidac64e34jm jit0624jm jiy26jm