Job Description
We are a Global Recruitment specialist that provides support to the clients across EMEA, APAC, US and Canada. We have an excellent job opportunity for you.
Job Title: Identity & Gateway Engineer
Location: Northampton
Work mode: Hybrid - 2-3 days per week onsite
Duration: 6 months contract initially
Rate: £402 per day PAYE through Umbrella
Summary:
We are seeking an experienced Identity & Gateway Engineer to design, implement, and support secure authentication, identity integration, and API gateway capabilities that protect critical digital services. The ideal candidate will combine deep expertise in Customer Identity & Access Management (CIAM), OAuth/OIDC, API Gateway technologies, and secure service communication to deliver robust authorization and policy enforcement solutions within a modern cloud-native architecture.
Key Responsibilities
- Integrate Ping Identity components or equivalent enterprise CIAM platforms with digital applications, APIs, and authorization services.
- Design and implement OAuth 2.0 and OpenID Connect (OIDC) authentication and authorization flows, including token exchange, session management, token validation, and secure token propagation.
- Develop and manage LDAP/LDIF configurations, schemas, directory searches, user provisioning, bulk imports, and modification activities.
- Configure and manage Envoy Proxy, Spring Cloud Gateway, or equivalent API gateway technologies, including route management, header transformations, timeout controls, and traffic policies.
- Implement External Authorization ( ext_authz ) integrations using HTTP and gRPC to enforce centralized policy decisions.
- Design and implement Policy Enforcement Point (PEP) controls with fail-closed security models and controlled degradation mechanisms.
- Engineer and support mutual TLS ( mTLS ) configurations, certificate life cycle management, and secure service-to-service communication.
- Develop and test rapid token and entitlement revocation capabilities to meet security and compliance requirements.
- Build and maintain Spring Boot adapters, APIs, and integration services supporting identity and authorization ecosystems.
- Create automated integration, security, and performance tests for identity, gateway, and authorization of workflows.
- Collaborate closely with security, engineering, platform, and product teams to deliver secure and scalable access management solutions.
Required Skills & Experience
- Strong hands-on experience with Ping Identity (IG, AM, DS) or comparable enterprise CIAM solutions.
- Deep expertise in OAuth 2.0, OpenID Connect (OIDC), JWT, token exchange, JWKS, authorization code flows, and session management.
- Practical experience with LDAP, LDIF, directory services, schema design, filters, searches, and bulk directory operations.
- Experience configuring and managing Envoy Proxy, Spring Cloud Gateway, Kong, Apigee, or similar API Gateway technologies
- Strong knowledge of API security, authorization patterns, policy enforcement, and identity federation Hands -on experience with mTLS, PKI, certificate life cycle management, and secure service communication
- Proficiency in Java and Spring Boot application development and integration.
- Experience with Docker, Kafka, GitLab CI/CD, and distributed system architectures.
- Strong troubleshooting and operational support skills across identity, API, and authorization platforms.
- Experience working with automated testing frameworks, TDD principles, and secure software development practices.
- Hands-on experience using AI-assisted engineering tools such as Claude Code, GitHub Copilot, or equivalent technologies with appropriate governance and validation.
Preferred Skills
- Experience with Client or enterprise token management platforms.
- Knowledge of Service Mesh technologies and Zero Trust security architectures.
- Strong understanding of entitlement management, authorization policies, and access revocation mechanisms.
- Experience implementing OpenTelemetry, distributed tracing, structured logging, and observability frameworks.
- Familiarity with W3C Trace Context, API monitoring, and operational diagnostics.
- Experience working within highly regulated environments such as Banking, Financial Services.
If you are interested in this position and would like to learn more, please send through your CV and we will get in touch with you as soon as possible. Please note, candidates are often Shortlisted within 48 hours.
Identity & Gateway Engineer in Northampton employer: eTeam Workforce Limited
As a leading Global Recruitment specialist, we pride ourselves on fostering a dynamic and inclusive work culture that prioritises employee growth and development. Located in Telford, our team enjoys the flexibility of a hybrid work model, allowing for a balanced approach to professional and personal life while engaging with cutting-edge data technologies. We offer competitive benefits and a collaborative environment where innovative ideas are encouraged, making us an excellent employer for those seeking meaningful and rewarding careers in IT Data Architecture.
