Technical Consultant/Architect - Identity Access Management (IAM), OAuth 2.0, API Gateway Support, Python/Java, L2/L3 Support

Job description

Scope: The BYX Platform provides shared identity, API management, event framework and portal capabilities for enterprise applications and implementation teams. We are seeking an astute Platform Application & Integration Support Engineer with a strong technical foundation and hands-on experience supporting identity, APIs, event-driven integrations and browser-based applications in production. Our current technical environment: Identity and Access: SSO, OAuth 2.0/OpenID Connect, M2M authentication, access and refresh tokens, API keys, service identities, RBAC, roles, entitlements and realm-based configuration. API Management: Gravitee/APIM concepts, REST APIs, JSON, API products and subscriptions, gateway routing, policies, rate limits, CORS, HTTP status codes, DNS and TLS. Event Framework: Kafka topics, partitions, producers, consumers, broker connectivity, message delivery and EFS API integrations. Portal and Diagnostics: Micro-frontend concepts, browser developer tools, HAR and console analysis, client-side routing, caching, feature flags and downstream API integration. Operations: Jira, Elastic/Kibana, Linux, SQL, Git, CI/CD diagnostics and scripting using Bash, Python or PowerShell. What you’ll do: Review and act on incidents, service requests and access requests logged by implementation teams and platform users. Own L2/L3 production issues from initial triage through diagnosis, remediation, validation, communication and closure. Troubleshoot SSO, OAuth/OIDC, token, session, M2M identity, service-account and credential-related failures. Investigate RBAC, roles, permissions, entitlements, realm configuration, application subscriptions and access-propagation issues. Diagnose API gateway routing, backend connectivity, API policies, rate limits, CORS and HTTP 401/403/404/429/5xx responses. Use request and response evidence, timestamps and correlation IDs to separate Portal, gateway, downstream service and infrastructure failures. Troubleshoot Kafka topic provisioning, partition configuration, producer/consumer delivery, Ack/Nack behavior, authentication and broker connectivity. Investigate Event Framework onboarding, EFS API synchronization, security-domain configuration and environment-specific issues. Diagnose Portal login, navigation, routing, cache, feature-flag and micro-frontend issues using browser developer tools, HAR files and console logs. Perform API testing, log searches and basic data validation using tools such as curl, Postman or equivalent clients, Kibana and SQL tools. Coordinate with development, cloud platform, security and networking teams and provide clear, reproducible evidence before escalation. Support release validation and verify application, identity and integration behavior following configuration or deployment changes. Create and maintain runbooks, known-error records, troubleshooting procedures and knowledge articles for recurring issues. Identify repetitive support work suitable for scripting, workflow automation or self-service enablement. Participate in incident reviews, root-cause analysis, change reviews and an agreed support or on-call rotation. What we are looking for: Minimum 5-10 years of relevant work experience in production application support, integration support, identity support or platform operations. Strong analytical and troubleshooting capability in business-critical production environments. Hands-on understanding of HTTP/HTTPS, REST APIs, JSON, headers, status codes and API authentication. Practical knowledge of OAuth 2.0, OpenID Connect or comparable SSO and token-based authentication patterns. Experience troubleshooting roles, permissions, RBAC, entitlements, service identities or tenant/realm-based access models. Experience supporting an API gateway or API management product; Gravitee or comparable platform experience is preferred. Working knowledge of Kafka or a comparable enterprise messaging/event-streaming platform. Ability to use browser developer tools, HAR traces, network requests and console logs for client-side diagnosis. Working knowledge of Linux, application logs and basic SQL validation. Scripting experience with Bash, Python or PowerShell for diagnostics and operational automation. Basic understanding of DNS, TLS/certificates, proxies, firewalls and application connectivity. Experience with Jira or a similar service-management tool and a practical understanding of Incident, Request, Problem, Change and RCA processes. Ability to document reproducible steps, technical findings, customer impact, corrective actions and handover details clearly. Strong collaboration and communication skills with the ability to work across users, engineering, cloud and security teams. Willingness to participate in a scheduled support or on-call rotation and planned out-of-hours changes when required. Our Values If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.