Lead Engineer Identity and Access Management 80-100%

Every day we work hard to make small business owners more successful. Sounds ambitious? It is. That's why we need your help. We represent the philosophy that every company should be able to afford high-quality and efficient software solutions. That is why bexio is today the leading provider of web-based business software for small businesses. We are continuing on an expansion course and count over 100'000 customers, over 7'000 fiduciary partners and more than 150 employees. To continue to grow, we need active support! Lead Engineer Identity and Access Management (m/f/d) 80-100% What awaits you with us: Technical responsibility for our IAM services with a focus on Keycloak, the user profile service and the integration of the connected applications. Further development and stabilization of existing authentication and authorization flows in an established system landscape with PHP legacy components and JVM-based services. Conception and implementation of Keycloak setups, clients, realms, role, group, claim and token mappings for productive SaaS use cases. Development and maintenance of Keycloak extensions, custom providers and deeper service integrations in the JVM environment. Step-by-step replacement of established auth logics in existing applications, without unnecessarily jeopardizing stability, user experience or ongoing product development. Technical leadership of a small hands-on developer team with PHP and JVM focus through code reviews, pair programming, architecture sparring and clear technical guardrails. Ensuring stable and well-observable operation of the IAM services through monitoring, alerting, incident analysis, troubleshooting, performance optimization and continuous reduction of technical debt. What we expect from you: Sound practical experience with Java/JVM and Keycloak in productive, ideally multi-tenant SaaS environments. In-depth technical understanding of OpenID Connect (OIDC), OAuth 2.0 and common web security standards (JWT, CORS, State Handling). Sound knowledge or the willingness to read yourself deeply into existing PHP code to understand established auth logics and replace them step-by-step. A strong awareness of clean code, automated deployment pipelines, scalability and system performance. Sound and clear communication at eye level with product owners, developers and various stakeholders to clearly justify technical decisions. High personal responsibility, strong organizational skills and clear technical communication to effectively structure, prioritize and lead yourself and your team across multiple topics, systems and stakeholders. What you can expect from us: Work smart: Flexible working hours are part of our daily routine. In addition, you choose the ideal place of work for your tasks, whenever your work allows it. Fair wage: You do good work, we provide the appropriate payment. You are important - The heart of our company is the employees. That is why we treat each other with respect and in an uncomplicated manner. In addition, we give you the freedom to develop personally in a positive working environment. Team first: A good team delivers even better work. That is why we regularly organize employee events to strengthen cohesion. Healthy employees: We are doing well when you are doing well. That is why we promote a balanced work-life balance with sports and relaxation offers. More than necessary: bexio covers the larger premium share of the pension fund for you. In addition, we offer an individual elective program suited to you and your life. You can benefit from favorable mobile subscription conditions. What else you should know about us: We are a young dynamic company, where the team works together to make a great product even better. You are in the right place with us if you want to work on this ideology with us in a lively scale-up atmosphere and love the web and its possibilities. With us, there is room to develop personally and professionally in a positive working environment and to give your ideas the necessary freedom. Sounds good? Then apply directly online via the following link. For the sake of the environment, please refrain from applications in paper form – digitized form is sufficient. We look forward to meeting you! jpidac64e34jm jit0624jm jiy26jm