Java Developer with Identity & Security Focus (REF5700T)

Job Description About the Position We are looking for a highly skilled Java Developer with a strong security mindset to join a team building Germany’s next-generation Identity Provider platform for the national healthcare Telematics Infrastructure (TI). This platform enables millions of healthcare users to securely access digital health services and operates in one of the most security-sensitive and compliance-driven environments in Europe. As a Senior Java Developer, you will be responsible for designing and building highly secure backend services, authentication and authorization components, and security-critical platform capabilities. You will play a key role in ensuring that security is embedded into every stage of the software development lifecycle, from architecture and implementation to deployment and operations. This role is ideal for an experienced Java engineer who enjoys solving complex security challenges and building resilient, enterprise-grade software. Key Responsibilities Design, develop, and operate security-critical backend services using Java and Spring Boot. Build and maintain authentication and authorization services based on OAuth 2.0, OpenID Connect, and modern identity standards. Apply secure software engineering principles throughout the development lifecycle. Identify, assess, and mitigate security risks during system design and implementation. Drive security-by-design practices across the platform. Develop secure APIs, token services, and identity-related microservices. Implement secure communication mechanisms including mTLS and certificate-based authentication. Contribute to cryptographic solutions including key management, encryption, digital signatures, and secure credential handling. Perform security-focused code reviews and proactively detect vulnerabilities. Collaborate with architects, security engineers, DevOps teams, and QA specialists to ensure secure and compliant solutions. Support threat modeling, security assessments, penetration testing remediation, and audit activities. Translate regulatory, compliance, and security requirements into robust technical implementations. Improve platform resilience, observability, and incident response capabilities.