Technical Consultant/Architect - Identity Access Management (IAM), OAuth 2.0, API Gateway Support, Python/Java, L2/L3 Support

Scope:

• The BYX Platform provides shared identity, API management, event framework and portal capabilities for enterprise applications and implementation teams.
• We are seeking an astute Platform Application & Integration Support Engineer with a strong technical foundation and hands-on experience supporting identity, APIs, event-driven integrations and browser-based applications in production.

Our current technical environment:

• Identity and Access: SSO, OAuth 2.0/OpenID Connect, M2M authentication, access and refresh tokens, API keys, service identities, RBAC, roles, entitlements and realm-based configuration.
• API Management: Gravitee/APIM concepts, REST APIs, JSON, API products and subscriptions, gateway routing, policies, rate limits, CORS, HTTP status codes, DNS and TLS.
• Event Framework: Kafka topics, partitions, producers, consumers, broker connectivity, message delivery and EFS API integrations.
• Portal and Diagnostics: Micro-frontend concepts, browser developer tools, HAR and console analysis, client-side routing, caching, feature flags and downstream API integration.
• Operations: Jira, Elastic/Kibana, Linux, SQL, Git, CI/CD diagnostics and scripting using Bash, Python or PowerShell.

What you’ll do:

• Review and act on incidents, service requests and access requests logged by implementation teams and platform users.
• Own L2/L3 production issues from initial triage through diagnosis, remediation, validation, communication and closure.
• Troubleshoot SSO, OAuth/OIDC, token, session, M2M identity, service-account and credential-related failures.
• Investigate RBAC, roles, permissions, entitlements, realm configuration, application subscriptions and access-propagation issues.
• Diagnose API gateway routing, backend connectivity, API policies, rate limits, CORS and HTTP 401/403/404/429/5xx responses.
• Use request and response evidence, timestamps and correlation IDs to separate Portal, gateway, downstream service and infrastructure failures.
• Troubleshoot Kafka topic provisioning, partition configuration, producer/consumer delivery, Ack/Nack behavior, authentication and broker connectivity.
• Investigate Event Framework onboarding, EFS API synchronization, security-domain configuration and environment-specific issues.
• Diagnose Portal login, navigation, routing, cache, feature-flag and micro-frontend issues using browser developer tools, HAR files and console logs.
• Perform API testing, log searches and basic data validation using tools such as curl, Postman or equivalent clients, Kibana and SQL tools.
• Coordinate with development, cloud platform, security and networking teams and provide clear, reproducible evidence before escalation.
• Support release validation and verify application, identity and integration behavior following configuration or deployment changes.
• Create and maintain runbooks, known-error records, troubleshooting procedures and knowledge articles for recurring issues.
• Identify repetitive support work suitable for scripting, workflow automation or self-service enablement.
• Participate in incident reviews, root-cause analysis, change reviews and an agreed support or on-call rotation.

What we are looking for:

• Minimum 5-10 years of relevant work experience in production application support, integration support, identity support or platform operations.
• Strong analytical and troubleshooting capability in business-critical production environments.
• Hands-on understanding of HTTP/HTTPS, REST APIs, JSON, headers, status codes and API authentication.
• Practical knowledge of OAuth 2.0, OpenID Connect or comparable SSO and token-based authentication patterns.
• Experience troubleshooting roles, permissions, RBAC, entitlements, service identities or tenant/realm-based access models.
• Experience supporting an API gateway or API management product; Gravitee or comparable platform experience is preferred.
• Working knowledge of Kafka or a comparable enterprise messaging/event-streaming platform.
• Ability to use browser developer tools, HAR traces, network requests and console logs for client-side diagnosis.
• Working knowledge of Linux, application logs and basic SQL validation.
• Scripting experience with Bash, Python or PowerShell for diagnostics and operational automation.
• Basic understanding of DNS, TLS/certificates, proxies, firewalls and application connectivity.
• Experience with Jira or a similar service-management tool and a practical understanding of Incident, Request, Problem, Change and RCA processes.
• Ability to document reproducible steps, technical findings, customer impact, corrective actions and handover details clearly.
• Strong collaboration and communication skills with the ability to work across users, engineering, cloud and security teams.
• Willingness to participate in a scheduled support or on-call rotation and planned out-of-hours changes when required.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here:Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.