Lead Software Engineer

Lead Software Engineer,986 (Java / Spring Boot / Node.js / API / IAM) Locations: Trivandrum, Kochi, Bangalore, Chennai, Hyderabad, Pune, Gurgaon Experience: 5 – 10 YearsJob Type: Full-time | Hybrid (3 days office)Shift Timing: 12:00 PM – 9:00 PMNotice Period: 0 – 15 days only (Immediate to short joiners preferred)Job Stability: Mandatory Job Summary We are looking for a Lead Software Engineer with strong experience in Java/Spring Boot or Node.js , specializing in API development and Identity & Access Management (IAM) . The role involves building secure, scalable APIs and implementing modern authentication and authorization mechanisms across enterprise applications. Key Responsibilities Design and build secure APIs with JWT token validation Implement OAuth 2.0 flows for server-side and SPA applications Handle token introspection, revocation, and lifecycle management Implement PKCE for secure SPA authentication Manage session-based vs token-based authentication Support Single Sign-On (SSO) integrations across multiple applications Configure inbound and outbound SSO using federation standards Implement universal logout (single sign-out) across applications Validate tokens at API Gateway level Ensure adherence to security best practices (CSRF, XSS prevention, secure token storage) Mandatory Skills – Core IAM Concepts Authentication & Authorization OpenID Connect (OIDC): flows, ID token handling OAuth 2.0: grant types, scopes, refresh tokens PKCE: purpose and implementation Session & Token Management Session creation, renewal, and termination Token types: Access, ID, Refresh tokens Token validation, expiry, and renewal strategies Login & SSO Standard login/logout flows Universal logout (single sign-out) Inbound & outbound SSO Federation concepts (OIDC / SAML) Must-Have Technical Skills Java + Spring Boot + API + OAuth 2.0OR Node.js + API + OAuth 2.0 Preferred (Nice To Have) Experience with enterprise IAM platforms (widgets, SDKs, APIs) Exposure to IAM migration projects from legacy systems Knowledge of identity federation and SSO ecosystems Interview Process 2 Technical Rounds 1 Client/Stakeholder Round Skills: api,java,authentication,oauth 2.0,iam,oauth,boot