{"id":1858467,"url":"https://alion.io/job/gravitee-senior-software-engineer-am-auth","title":"Senior Software Engineer (AM+ Auth)","company":{"id":52288,"name":"Gravitee","domain":"gravitee.io","url":"https://alion.io/company/gravitee","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Denver, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":160000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"C#","optional":false},{"name":"Git","optional":false},{"name":"Java","optional":false},{"name":"Maven","optional":false},{"name":"PagerDuty","optional":false},{"name":"RxJava","optional":false},{"name":"Vert.x","optional":false},{"name":"A2A","optional":true},{"name":"Agentic Workflows","optional":true},{"name":"Apex","optional":true},{"name":"API Gateway","optional":true},{"name":"Docker","optional":true},{"name":"Envoy","optional":true},{"name":"Function Calling","optional":true},{"name":"Kong","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"MuleSoft","optional":true},{"name":"RAG","optional":true},{"name":"Service Mesh","optional":true},{"name":"Tool Use","optional":true},{"name":"Traefik","optional":true}],"status":"live","first_seen_at":"2026-09-10T20:30:02Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-17T00:46:20Z","board_verified":true,"closed_at":null,"days_open":36,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":36},"description":"Gravitee is a 2025 Gartner® Magic Quadrant™ Leader, on a mission to govern the world’s intelligence.\nWe deliver the industry’s most advanced platform for Any API, Any Event, and Any AI Agent, trusted by global leaders like Michelin, Roche, and Blue Yonder.\nWhy join us?\nThe Mission: We are the first to bridge traditional API Management with the new frontier of AI Agent Security\n\nThe Momentum: A high-growth Leader - combining market credibility with startup speed\n\nThe DNA: We hire people who Hold Nothing Back - passionate builders who want to redefine digital infrastructure\n\nDon’t just watch the AI revolution. Build the infrastructure that controls and secures it.\nThe Role\nWe are looking for a Senior Software Engineer to build and maintain the identity and authorization features of Gravitee Access Management (AM) - across the AM runtime and the access-management experience in Gamma, Gravitee's next generation product surface.\nThis is a new role. Today, AM engineering is based entirely in Europe. This hire establishes US-hours ownership of Level 3 and Level 4 authentication and authorization incidents, and adds delivery capacity toward AM parity in Gamma - part of building sustainable L3/L4 engineering capability in the US.\nYou will split your time roughly 80% feature delivery and 20% L3/L4 support and bug fixing (it varies week to week), working as an embedded member of the AM team, which is based in Europe.\nWhat You Will Be Doing\nIn this role, you will:\nDesign and deliver features end to end, from discovery and technical design through implementation, testing, release, and iteration.\n\nBuild and maintain identity and authorization features of Gravitee Access Management, across the AM runtime and the AM experience in Gamma.\n\nImplement and support OAuth 2.0 and OIDC flows (authorization code + PKCE, client credentials, token exchange), SAML 2.0 as both IdP and SP, SCIM, and FAPI/CIBA/UMA profiles.\n\nWork with token and session semantics - JWT, JWKS, key rotation, revocation, introspection, MFA and step-up, WebAuthn/FIDO2, and IdP federation and social login.\n\nKeep security behavior and upgrades safe: standards compliance, secure defaults, certificate and secret handling, consent, audit logs, and defenses against token replay, SSRF, and account takeover.\n\nOwn safe migrations and backward compatibility across MongoDB and JDBC, and support multi-domain, multi-region deployments and login/token endpoint performance.\n\nOwn US-hours Level 3 and Level 4 escalations for AM customers as part of the L3 pager duty rotation.\n\nUse LLMs and AI-assisted development tools thoughtfully for prototyping, implementation, testing, debugging, and exploration, applying sound engineering judgment to validate AI-generated work.\n\nWrite meaningful automated tests and contribute to reliable delivery practices.\nCollaborate with product managers, designers, engineers, and technical leaders - including the AM team based in Europe - to discover effective solutions and improve them through code and design reviews.\n\nShare what you learn and help the team make practical choices as identity standards and protocols evolve.\n\nEssential Skills\nWe are looking for evidence that you can succeed in the role, whether gained through employment, open-source work, or equivalent practical experience:\n5+ years building and running production backend software, on a team that ships and supports its own product; you have personally resolved production incidents.\n\nStrong Java experience (C# accepted if the object-oriented depth is there), with Maven and a reactive stack such as Vert.x/RxJava.\n\nDeep working knowledge of identity standards: OAuth 2.0 and OIDC flows (authorization code + PKCE, client credentials, token exchange), SAML 2.0, SCIM, and FAPI/CIBA/UMA profiles.\nSolid grasp of token and session semantics: JWT, JWKS, rotation, revocation, introspection, MFA/step-up, WebAuthn/FIDO2, and IdP federation.\n\nA security-first mindset: secure defaults, certificate and secret handling, audit logging, and awareness of token replay, SSRF, and account-takeover risks.\n\nExperience with safe migrations and backward compatibility across persistent data stores such as MongoDB or JDBCbacked relational databases.\n\nGit-based workflow, code review, and writing your own automated tests.\n\nHands-on experience using LLMs or AI coding assistants as part of an engineering workflow, combined with the judgment to review and improve their output.\n\nClear communication, collaborative problem-solving, and the ability to take an ambiguous problem through to production.\n\nDesired Skills\nYou do not need to match every item. We would be especially interested in experience with:\nExperience at an API gateway, proxy, or service-mesh vendor, or on the API platform team of a large company (e.g., Kong, Google Apigee, MuleSoft, Tyk, Solo.io, Traefik, WSO2).\nKubernetes operators and CRDs; OpenAPI tooling; service mesh or Envoy experience.\n\nDocker, Kubernetes, and cloud-native application delivery.\n\nModel Context Protocol (MCP), Agent2Agent (A2A), tool calling, LLM proxies, or other emerging AI protocols and standards. Prior production experience is not required.\n\nBuilding or operating LLM-powered applications, RAG systems, or agentic workflows - especially their security, governance, and observability needs.\n\nOpen-source software or enterprise developer platforms.Who Thrives at Gravitee\n\nOur growth is powered by people who bring passion to what they build, professionalism to how they work, and a commitment to doing things well.\nYou will thrive here if you:\nBring energy and a constructive attitude to the team.\nAdapt quickly and enjoy learning unfamiliar technologies and domains.\nTake ownership, communicate clearly, and follow through with urgency.\nBalance delivery speed with thoughtful engineering judgment.\nStart with the customer problem and care about the quality of the experience you create.\nEnjoy working in a fast-moving, collaborative, international environment.\nLife at Gravitee\nAt Gravitee, we invest in humans, not just roles.\nYou’ll get:\nSalary of $160,000\nCompetitive medical coverage.\nPension / 401(k) program options.\nStock options - you build it, you own it.\n25 days of holiday plus in-country national holidays.\nThree mental health days and a wellness allowance.\nYour birthday off.\nA professional development budget to support your growth.\nA hybrid work culture with hubs across regions.\nQuarterly team events and an annual company offsite.\nA collaborative, international company culture.\nOpportunities to grow your scope and career as Gravitee grows.\nAt Gravitee, we believe diverse perspectives make better products and stronger teams.\nNo employee or applicant will be treated less favorably on the grounds of sex, marital status, race, color, nationality, ethnic or national origin, disability, gender, sexual orientation, gender identity, age, pregnancy or maternity, marital or civil partner status, religion, or belief.\nBy applying, you consent to Gravitee storing and processing the personal information you submit as part of the recruitment process.","description_format":"text","description_chars":7085,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Professional development","Stock options"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"United Kingdom","iso":"GB","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Norway","iso":"NO","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Switzerland","iso":"CH","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Iceland","iso":"IS","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Liechtenstein","iso":"LI","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","Integration & API Management"],"lifecycle":[{"event":"open","at":"2026-10-04T20:26:51Z"}],"visa":[],"liveness":{"score":42,"band":"fade","label":"Fading","p_open":1,"p_active":0.759,"p_room":0.55,"age_days":35,"expected_fill_days":24,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":160000,"is_top_pay":false},"html_url":"https://alion.io/job/gravitee-senior-software-engineer-am-auth","json_url":"https://alion.io/job/gravitee-senior-software-engineer-am-auth.json","meta":{"generated_at":"2026-10-17T02:01:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2881,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52288},"rest":"https://alion.io/mcp/rest/get_company?id=52288"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgravitee-senior-software-engineer-am-auth"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgravitee-senior-software-engineer-am-auth"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgravitee-senior-software-engineer-am-auth"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gravitee-senior-software-engineer-am-auth\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgravitee-senior-software-engineer-am-auth"}]}