Full Stack Engineer

Full Stack Engineer Client is launching a large initiative to decommission a legacy authentication platform called FebSec, specifically its Authentication Server (AS) component. FebSec is a 15+ year-old internally developed system, primarily built on Java, that handles authentication and session management across multiple internal and client-facing applications. The goal is to migrate all authentication traffic off FebSec AS by the end of 2027, replacing it with modern internal security services known as ECAP, managed by Client's Digital Security team. The effort will require analyzing legacy integrations, updating authentication flows, and migrating applications to new identity and access services, including modern token-based authentication such as JWT. Client plans to engage contractors through an SOW to support this effort. The project will operate in agile workstreams, with multiple teams running in parallel and support from existing Client engineering, architecture, and infrastructure teams. The team will likely be ramped in phases rather than all resources starting on day one, with engineers and analysts prioritized early. Key Responsibilities Analyze legacy applications currently integrated with FebSec AS. Refactor or rebuild authentication flows to integrate with ECAP services. Update authentication mechanisms, session management, and token handling. Implement backend services and APIs required for new authentication integrations. Skills & Experience Strong Java development experience. Experience with Spring Boot, APIs, and backend services. Ability to understand and modify legacy codebases. Environment & Context Legacy technologies may include: Java, Spring Boot, Struts, JSP. Work includes reviewing existing code and adapting integrations to the new authentication framework.