Fullstack Architect

**Join the “Architecture & Project” team**

United by a passion for technology, our team is at the forefront of exploring and mastering a myriad of evolving web solutions. Comprising technologists from diverse backgrounds and regions, our collaborative efforts aim to facilitate and guide the ongoing technological evolution at Questel.

Our extensive scope of work involves developing user-centric UIs, APIs, implementing Single Sign-On and user identification strategies, ensuring adherence to ISO 27001 standards, creating adaptable testing frameworks, and integrating customized data solutions. Each initiative is a valuable opportunity for us to expand our technical expertise and innovate.

With a commitment to excellence and industry best practices, we play a pivotal role in shaping Questel’s technological landscape as we are on a continuous journey to explore new possibilities, support various teams worldwide, establish industry standards, and drive forward innovation.

**Your next adventure awaits here**
- Lead the technical strategy for User Management and Identity Provider, including RBAC (Role-Based Access Control), MFA (Multi-Factor Authentication), and user provisioning.
- Architect and design scalable, secure, and high-performance user authentication and authorization solutions using Java and relevant security protocols.
- Oversee the development and integration of OpenID, OAuth 2.0, SAML, and other authentication frameworks to support SSO.
- Design and implement API Gateway solutions for secure authentication and authorization of microservices.
- Ensure compliance with security best practices, GDPR, and other regulatory requirements related to user data protection.
- Collaborate with cross-functional teams, including product managers, DevOps, and security teams, to align UM solutions with business needs.
- Lead the design and implementation of Orbit Invention Architecture, ensuring seamless integration, security, and scalability.
- Drive the adoption of best practices in coding, testing, deployment, and monitoring for authentication services.
- Provide technical leadership and mentorship to development teams, reviewing code and ensuring architectural integrity.
- Stay updated with emerging trends in identity management, authentication mechanisms, and Java-based security frameworks.
- Stay ahead of emerging technologies and trends, continuously improving the platform’s technical foundation.

**The perfect match**
- 5+ years of experience in Java software development
- Hands-on experience with SSO protocols (OpenID Connect, OAuth 2.0, SAML, JWT, etc.).
- Database clusterization (Galera, XtraDb, ProxySQL)
- Proficiency in RESTful API security, JWT, token-based authentication, and API Gateway integration.
- Strong knowledge of API Gateway solutions (Kong, Apigee, AWS API Gateway, or similar).
- Strong knowledge of LDAP, Active Directory, and other identity providers.
- Familiarity with DevSecOps practices, CI/CD pipelines, and cloud platforms (AWS, Azure, GCP).
- Experience with containerized deployments (Docker & DockerCompose, Kubernetes) and microservices architecture.
- Solid understanding of encryption standards, PKI, TLS, and security vulnerabilities (OWASP Top 10).
- Excellent problem-solving skills and ability to communicate complex security concepts to non-technical stakeholders.
- Familiarity with JavaScript, Node.js, and modern frontend frameworks for enhanced integration capabilities.

**Nice-to-Have**
- Experience with zero-trust architectures and modern identity verification techniques.
- Knowledge of federated authentication models and decentralized identity (DID, verifiable credentials).
- Contributions to open-source identity management projects.

**_ Join Questel, a growing international group, and live a great human adventure_**

**_ What we offer _**
- Full-time, permanent contract
- Be the **key architect shaping** the future of our Orbit Intelligence Software, a leader in Patent analytics
- Work with a global team on cutting-edge technologies and complex data challenges.
- Best of both worlds: dive into agility and growth in a dynamic setting, supported by structured onboarding and continuous learning for your success
- Thrive in a flat hierarchy that champions **courtesy**, **honesty**, and **courage**.
- Unlock **exciting career development paths** in a supportive and ambitious company
- Innovate in the IP space, designing solutions that impact thousands of users worldwide.

**Job location** : Sophia-Antipolis or Montpellier - Hybrid with up to 60% of remote work
- Driven by values of entrepreneurship, respect, and integrity, Questel is committed to growth and social responsibility. We foster an inclusive, equitable workplace where all feel respected and empowered, regardless of background. Questel is an Equal Opportunity Employer, considering all qualified applicants without discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin