Lead Software Engineer - Java/SpringBoot, Optum Tech Chief Digital Office - Remote

About the role

The Lead Software Engineer on the Aikyam Cloud Identity Platform team at Optum Tech Chief Digital Office is responsible for designing and building secure, multi-tenant backend services that power identity and access management for millions of Optum and UnitedHealth Group members. The role involves architecting OAuth 2.0 / OIDC flows, developing Java Spring Boot microservices, and collaborating with product managers, security architects, and peer engineers.

Responsibilities

• Backend Service Development
• Design, develop, and maintain Java 25 / Spring Boot 4.x microservices that implement OAuth 2.0, OIDC, and SAML 2.0 protocols for the Aikyam identity platform on AWS
• Build and evolve our OIDC implementation including authorization code, client credentials, and token exchange flows
• Implement and maintain shared libraries consumed across all platform services
• Design multi-tenant data models and tenant-scoped configuration patterns; manage tenant lifecycle via the tenants table and Redis cache layer
• Develop and maintain REST APIs following clean-code and domain-driven design principles; enforce consistent exception handling
• Write clean, testable code with comprehensive unit and integration test coverage using JUnit 5, Mockito, and Spring Boot Test
• Work with Quality Engineers to update or create new automated test
• Participate in and lead code reviews, engineering best practices
• Implement and harden JOSE (JWT, JWE, JWS) token issuance and validation pipelines using aikyam-jose-security
• Apply OAuth 2.0 / OIDC security best practices including PKCE, token binding, scope enforcement, and session management
• Collaborate with the security team to implement and maintain Optum's cryptographic and key-management standards via aikyam-miser
• Manage database schema migrations using Liquibase (aikyam-idp-liquibase) and maintain backward-compatible SQL changes
• Drive test strategy including unit, integration, and contract tests to support confident, rapid releases
• Technical Leadership & Collaboration
• Lead architectural design sessions and produce clear ADRs and technical designs for new platform capabilities
• Actively participate in Agile/Scrum ceremonies: sprint planning, backlog refinement, reviews, and retrospectives
• Collaborate cross-functionally with product managers, security architects, QE, SRE, and business stakeholders to align on requirements and priorities
• Communicate technical decisions, risks, and trade-offs clearly to both technical and non-technical audiences

Requirements

• 5+ years of experience in backend software engineering with Java and Spring Boot (Spring MVC, Spring Security, Spring Data)
• 3+ years of experience with OAuth 2.0 / OIDC / SAML 2.0 protocols and identity platform development
• 3+ years of experience designing and operating microservices on AWS (EKS, ALB, SES/SNS, Secrets Manager, ECR)
• 3+ years of experience with Redis (caching, session management, key-pattern design)
• 3+ years of experience with CI/CD pipelines -- Jenkins and/or GitHub Actions -- including Docker image builds and Kubernetes/Helm deployments
• 3+ years of experience with relational databases (PostgreSQL / MySQL) and schema migration tooling (Liquibase or Flyway)
• 3+ years of experience working in an Agile/Scrum environment
• 2+ years of experience with JWT / JOSE standards (JWS, JWE, JWK)
• Proven experience leading technical design and mentoring engineers on a team

Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field
• Experience with Spring Authorization Server or Keycloak as an OIDC provider
• Hands-on experience with Spring Cloud Config Server and multi-environment configuration management
• Experience in the healthcare or financial services industry with exposure to regulatory compliance (HIPAA, SOC 2)
• Experience with Harness or similar GitOps-based deployment orchestration platforms
• Knowledge or exposure to AI, GenAI, or LLMs applied to identity and access management use cases
• Familiarity with FAPI (Financial-grade API) or SCIM 2.0 standards
• Proven contributions to open-source identity or security projects

Benefits

Our comprehensive benefits package includes:

• Life Resources and support to focus on what matters most to you, in every facet of your life.
• Emotional Education, tools and resources to help you reduce and manage stress, build resilience and more.
• Physical Health plans and other coverage to support wellness for you and your loved ones.
• Financial Benefits for today and to help you plan for the future, including your retirement.