DelmiSoft

Java engineering, architecture and identity, part-time.

A senior engineer with 12+ years on Java systems, for 15–20 hours a week, more by arrangement, without a full-time hire. Hire me to build, to design, or to fix your identity layer. Identity is the deepest specialism, and it shows up in all three.

Email me See the work 
{  "iss": "delmisoft.hr",  "sub": "Ante Radoš",  "roles": [    "senior-software-engineer",    "software-architect",    "iam-consultant"  ],  "stack": "java spring-boot keycloak openfga",  "availability": "15–20 h/week, more by arrangement",  "available_from": "now",  "timezone": "CET, flexible for US hours"}
Availability, written as an ID token.

Three ways to work with me

  • Senior Software Engineer

    Hands-on development in your codebase: Java and Spring Boot services, APIs, integrations and process automation, legacy code, tests and review.

    Fits when the team has more work than people and needs a senior who ships without a long ramp-up.

    Engineering in detail

  • Software Architect

    Architecture assessments, target architectures and modernisation roadmaps, documented to the standards (ISO/IEC/IEEE 42010, arc42, C4, decision records) so the reasoning survives handover.

    Fits when a large change is coming, or the architecture lives only in a few people’s heads.

    Architecture in detail

  • IAM / CIAM Consultant

    Identity security reviews, CIAM platforms on Keycloak, migrations off legacy identity providers, Okta or Auth0, custom Keycloak extensions, and authorization design on OpenFGA.

    Fits when the identity layer was bolted on and is now the bottleneck, or “who can do what” is answered differently in every service.

    Identity in detail

What it produced

Clients are anonymised. Two of the engagements in full.

Under 5 minutes
of user-facing downtime on each of three major Keycloak upgrades.Web platform operator, several hundred sites
10,000+ users
moved from in-house authentication to Keycloak with no planned downtime.SaaS company
3 services
extracted from a monolith over 6–12 months, with no planned downtime.SaaS company
15 days to 25 minutes
for one business process, after automating it.Telecom operator
Around 10–15%
less cloud spend, from rightsizing and optimising applications and data processing.SaaS company

How I work

Time and materials, or a fixed-scope project. Fifteen to twenty hours a week, more by arrangement, remote from Zagreb, with flexible overlap for North American hours.

DelmiSoft is a Croatian business and invoices in EUR. Cross-border B2B invoices use EU reverse charge. Rates on request.

Java, Spring Boot, PostgreSQL, Kafka, RabbitMQ, Camunda / BPMN, Docker, Kubernetes, AWS, GCP, Keycloak (including custom SPIs), Okta, Auth0, OIDC, OAuth 2.0, SAML 2.0, SCIM, FIDO2 / WebAuthn, token exchange, OpenFGA.

Send a short description of the problem and the timeline.

ante.rados@delmisoft.hr

Or find me on LinkedIn.