[Hiring] Senior Security Developer @1-800-Flowers.com

Role Description

Seeking a hands-on Security Developer with deep authentication and application security expertise to design, build, and implement a secure, scalable authentication platform supporting approximately 30 million users.

• Partner with senior architects and developers to design and build a custom authentication platform.
• Evaluate authentication frameworks, security standards, and architectural approaches.
• Provide expertise across JWT, SSO, SAML, API security, passkeys, OTP, and related authentication technologies.
• Independently write, review, test, and deploy production-quality code.
• Identify security vulnerabilities, scalability concerns, and architectural risks.
• Leverage AI-assisted development tools while validating code quality, security, and testing.
• Recommend secure, sustainable solutions and provide guidance on architectural decisions.
• Develop a functional MVP and demonstrate measurable progress within the first 30–60 days.
• Support future integrations and migration from an existing third-party authentication provider.

Qualifications

• 5+ years of relevant experience, ideally 7–10 years, in software development, authentication, identity engineering, or application security.
• Deep, hands-on expertise in authentication systems and application security.
• Experience designing, building, implementing, or modernizing authentication/identity platforms.
• Strong understanding of authentication protocols such as JWT, SSO, SAML, passkeys, OTP, or similar technologies.
• Strong software development background with the ability to independently write, review, test, and deploy code.
• Proficiency in Java or another development language, such as Python, paired with exceptional security expertise.
• Ability to evaluate architecture, identify security vulnerabilities, and recommend scalable solutions.
• Builder's mindset with demonstrated ability to take projects from concept to functional implementation.
• Strong communication skills and ability to collaborate with senior technical stakeholders.
• Ability to work independently in a remote, small-team environment.

Requirements

• Java, Spring Framework, or Spring Security experience.
• Experience building an authentication platform from scratch.
• Experience migrating away from third-party authentication providers.
• Experience supporting large-scale, high-traffic consumer applications.
• Google Cloud Platform (GCP) experience.
• Familiarity with microservices and open-source authentication frameworks.
• Experience with AI-assisted coding tools such as Codex.
• Security certifications or relevant credentials.

Benefits

• Eligible for Health, Dental, Vision, 401K.
• Must be authorized to work in the U.S. This position is not eligible for sponsorship.