We are looking for a Senior Backend Engineer to join the IAM (Identity and Access Management) team in Platform Services Tech.
Your mission will be to secure and scale the authentication capabilities that millions of Doctolib users rely on every day. You will drive the most impactful phases of a critical, multi-year migration to a self-hosted, Keycloak-based identity provider — a project at the intersection of platform engineering, security, and cross-team impact. Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients.
WHAT YOU'LL DO
Your responsibilities include but are not limited to:
Lead the next phases of the multi-year authentication migration to a self-hosted, Keycloak-based identity provider — completing token-based sign-in for Doctolib Pro apps and making the identity provider the single source of truth for user data
Own the reliability of high-traffic authentication systems end-to-end: monitoring, alerting, SLOs, incident resolution, post-mortems, and safe rollout practices (feature flags, canary releases, zero-downtime migrations)
Drive cross-team delivery independently: produce design documents and decision memos, build alignment across dependent teams, and make trade-offs explicit
Collaborate closely with the Product Security team on security-sensitive architecture decisions and changes
Contribute to frontend development in React and TypeScript on the custom interfaces tied to the IAM platform
Use AI tools daily to accelerate your own work and help establish repeatable AI-augmented workflows across the team
WHO YOU ARE
Before you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply.
You'll be a great fit if you:
Have 7–10+ years of backend engineering experience with hands-on, daily Java or Kotlin development and a solid understanding of JVM internals (garbage collection, memory management, multi-threading, and profiling)
Have proven experience building and operating high-traffic production systems at scale — load testing, capacity planning, horizontal scaling, caching, and performance bottleneck identification
Own reliability end-to-end: you define monitoring, alerting, and SLOs, lead incident resolution, write post-mortems, and have shipped changes safely via feature flags, canary releases, and zero-downtime migrations on live systems
Have led complex, multi-week cross-team delivery independently — producing design docs, driving alignment across dependent teams, and making trade-offs explicit without waiting for consensus
Use AI tools daily in your engineering workflow, critically validate their outputs, and are excited to help establish shared AI practices for your team
Are fluent in English (written and spoken)
It would be fantastic if you:
Have prior experience with identity providers (e.g. Keycloak), OAuth2, and/or OIDC
Have hands-on experience with security practices for exposed, high-traffic endpoints
Have contributed to frontend codebases in React and TypeScript
Have exposure to Kafka/CDC
Have exposure to mobile authentication
LIFE AT DOCTOLIB TECH
Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.
Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.
We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision here https://careers.doctolib.com/ai-careers/.
Want to learn more about our tech culture and environment? Visit the Doctolib Tech site https://careers.doctolib.com/tech-doctolib/.
WHAT WE OFFER
A Deutschlandticket (Germany-wide public transport pass) fully paid for by Doctolib
28 vacation days + 1 additional day for each full calendar year of employment (up to a maximum of 30 days)
Work from abroad for up to 10 days per year thanks to our flexibility days policy
Company health insurance with great supplementary benefits through our partner Allianz
Company pension scheme (bAV) through Allianz with an employer subsidy of 40% (15% within the probationary period)
The Doctolib Parent Care program, which includes one month additional parental leave and much more
Enrollment in Doctolib's long-term employee value sharing plan called DoctoGrowth
Free mental health and coaching services through our partner Moka.care http://Moka.care
Subsidized sports membership through our partner Urban Sports Club
A flexible workplace policy offering both hybrid and office-based mode
Alongside healthy snacks and our regular breakfast buffet, we provide a subsidized meal benefit
For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support
Access to the best AI tools for coding, development and dedicated training
OUR INTERVIEW PROCESS
TA Screen
Coding interview
System Design Interview
Behavioural Peer Interview
We want your experience to be clear, respectful, and transparent. Learn more about our hiring process on our candidate experience page https://careers.doctolib.com/tech-doctolib/getting-hired/.
JOB DETAILS
Permanent position
Full-time
Berlin, Germany
Hybrid work setup (up to 2 remote days per week)
Start date: as soon as possible
WE WELCOME EVERYONE
At Doctolib, we are committed to improving access to healthcare for everyone. This translates into our recruitment process. We evaluate candidates based solely on qualifications and motivation, without any form of discrimination.
The more diverse ideas are heard, the more our product will truly improve healthcare for all. You are welcome to apply to Doctolib, regardless of your gender, religion, age, sexual orientation, ethnicity, or disability.
To ensure equal opportunities, we invite you to exclude personal information (e.g., pictures, age) from your applications. If you require any accommodation, please let us know for support during the hiring process.
Join us in building the healthcare we all dream of!
YOUR DATA PRIVACY
All information provided is processed by Doctolib for application management. For data processing details, click here: France https://doctolib.legal/B2C-Privacy-Policy-Career-FR. Please contact hr.dataprivacy(at)doctolib.com http://doctolib.com for inquiries or to exercise your rights.
We show an excerpt and a link, and the full text when the source allows it. Brands and logos shown belong to their owners.
