Senior Software Developer

About the role

The Senior Software Developer will contribute to the architecture and evolution of Xylem's enterprise Customer Identity and Access Management (IAM) platform. This role involves transitioning towards a modern Policy-as-Code authorization model, participating in an active dual-domain identity migration, and working within and evolving a hybrid RBAC/ABAC authorization model.

Responsibilities

• Drive architectural evolution and policy-as-code direction
• Contribute to the platform's evolution toward a thin-token, policy-as-code authorization model
• Participate in an active dual-domain migration for the identity platform
• Work within and evolve a hybrid RBAC/ABAC authorization model
• Enable Golden Path integration patterns for engineering teams
• Help drive an internal operations and governance UI
• Contribute to technical controls mapped to SOC2 CC6 and NIST 800-53

Requirements

• 7+ years in software engineering with experience in complex, multi-team platform environments
• Strong hands-on proficiency with Java and Spring Boot in a production microservice context
• Foundational understanding of security principles including authentication, authorization, token-based identity, and secure API design
• Experience working with or integrating against an identity provider (Keycloak, Okta, Auth0, Entra ID, or similar)
• Familiarity with OAuth 2.0 and OIDC concepts including authorization code flow, PKCE, and JWT structure

Preferred

• Hands-on experience with Keycloak or a comparable open-source identity provider
• Experience with a production authorization policy engine
• Experience designing IAM for multi-tenant SaaS
• Experience with SAML 2.0 federation and enterprise SSO integration
• Experience with TOTP enforcement and MFA patterns for privileged access
• Experience with reverse proxy configuration for multi-domain identity routing
• Frontend prototyping experience for operator tooling
• Experience writing authorization policy expressions

Nice to Have

• Experience with API gateway security and policy enforcement at the edge
• Experience with SSO integration with Microsoft Entra ID or Okta
• Experience with SOC2 Type II audit preparation and NIST 800-53 control mapping
• Experience with NIST 800-207 Zero Trust Architecture principles

Skills

• Strong communication skills to explain technical decisions to both engineering peers and non-technical stakeholders

Benefits

Join the global Xylem team to be part of innovative technology solutions transforming water usage, conservation, and re-use. Our products impact public utilities, industrial sectors, residential areas, and commercial buildings, with a commitment to providing smart metering, network technologies, and advanced analytics for water, electric, and gas utilities.

Pay

Competitive compensation package based on experience and qualifications.

Schedule

Full-time, Monday through Friday, with occasional evening and weekend work required for project deadlines.

Contact Information

To apply, please visit our careers page at [Insert Application Link Here]. For questions, contact [Contact Person] at [Email Address] or [Phone Number].