At CI&T, we excel in technological transformation, merging human expertise with AI to deliver scalable tech solutions. With over 8,000 CI&Ters worldwide, we have partnered with more than 1,000 clients throughout our 30-year history. Artificial Intelligence is our reality.
Important: If you reside in the Metropolitan Region of Campinas, attending our office in the city will be mandatory, in accordance with our current attendance policy.
Greetings from Juliana Noberto at CI&T!
If you are a developer with a strong security DNA and mastery in Java, this position is perfect for you!
We are focused on the evolution of critical security platforms, with a total emphasis on Identity, Authentication, and Authorization.
Your Mission
Design and Implementation: Lead the evolution of Identity and Access Management (IAM) and Customer Identity (CIAM) solutions.
Modern Policies: Define and maintain authorization policies using Open Policy Agent (OPA) and OpenFGA.
Technical Integration: Develop robust Java integrations to connect security ecosystems (Auth0, Ping Identity) with microservices.
Architecture and Governance: Ensure scalability and security in distributed environments by participating in inception meetings and technical refinements.
Mentorship: Support the team in technical decisions, code reviews, and the dissemination of security best practices (Secure Coding).
Required Knowledge
IAM Ecosystem: Auth0, Ping Identity, and solid IAM/CIAM concepts.
Java Language: Proficiency in Java (17+) and the Spring ecosystem (Spring Boot, Spring Security).
Security Protocols: Deep understanding of OAuth 2.0, OpenID Connect (OIDC), JWT, and SAML.
Advanced Authorization: Concepts of RBAC, ABAC, ReBAC, and tools such as OPA or OpenFGA.
Secure APIs: Development of RESTful APIs adhering to OWASP Top 10 standards.
Practical Experience Needed
Java Integration: Implementation of security SDKs and interceptors for token and claim validation in Java.
Policy Modeling: Creation of granular access rules and integration with external authorization engines.
Cloud & Microservices: Experience with distributed architectures, preferably in AWS, Azure, or GCP environments.
Communication: Ability to translate business requirements into secure and scalable technical architectures.
Preferred Qualifications
Experience with Spring Security Crypto and secret management (Vault, AWS Secrets Manager).
Experience with Zero Trust Architectures.
Knowledge in Observability applied to security (Logging, Tracing).