Application Guide

How to Apply for Senior Software Developer

at Xylem

🏢 About Xylem

Xylem is a global leader in water technology, dedicated to solving the world's most critical water challenges through innovation and sustainability. Working here means contributing to meaningful environmental impact while building cutting-edge identity and access management solutions that protect critical water infrastructure.

About This Role

As a Senior Software Developer on the Identity and Access Management team, you will architect and evolve Xylem's enterprise authorization platform, transitioning from legacy models to a modern Policy-as-Code system. This role is pivotal in enabling secure, seamless access for millions of users across Xylem's digital products, directly supporting the company's mission of sustainable water solutions.

💡 A Day in the Life

You'll start by reviewing pull requests for a new Policy-as-Code module, then join a design session with product teams to define OAuth2 integration patterns. After lunch, you'll debug a token validation issue in the migration pipeline and write a design doc for the internal operations console. The day ends with a sync with compliance to ensure new controls map to SOC2 requirements.

🚀 Application Tools

Generate Cover Letter

AI-powered, tailored for Xylem

Interview Prep

Practice questions for this role

🎯 Who Xylem Is Looking For

  • Has 7+ years of software engineering experience, with deep expertise in Java and Spring Boot for building production microservices in complex, multi-team environments.
  • Possesses a strong foundation in security principles: authentication, authorization, token-based identity (OAuth2/OIDC), and secure API design, with hands-on experience using identity providers like Keycloak, Okta, or Auth0.
  • Thrives in platform engineering roles, focusing on developer experience (defining Golden Paths, building internal tools) and driving migration projects from prototype to production.
  • Understands compliance frameworks (SOC2, NIST 800-53) and Zero Trust principles, and can implement technical controls to meet these standards.

📝 Tips for Applying to Xylem

1

Highlight specific experience with Policy-as-Code (e.g., OPA, Cedar) and hybrid RBAC/ABAC models in your resume and cover letter.

2

Emphasize any work on identity provider migrations or multi-domain identity systems, especially in a global, customer-facing context.

3

Showcase your ability to improve developer experience by mentioning any Golden Path templates, internal tools, or developer portals you've built.

4

Quantify the impact of your work—e.g., 'Reduced authorization latency by 30%' or 'Migrated 500K users to a new OIDC provider with zero downtime.'

5

Tailor your application to demonstrate alignment with Xylem's mission: connect your technical work to sustainability or water conservation where possible.

✉️ What to Emphasize in Your Cover Letter

["Your passion for building secure, scalable identity systems that protect critical infrastructure, aligned with Xylem's mission.", 'Specific experience with OAuth2/OIDC, Keycloak/Okta, and implementing RBAC/ABAC in a production environment.', 'Your track record of leading migrations or platform transitions, especially in a dual-domain or multi-tenant setting.', "How you've improved developer experience through tooling, documentation, or standard integration patterns."]

Generate Cover Letter →

🔍 Research Before Applying

To stand out, make sure you've researched:

  • → Understand Xylem's water solutions portfolio and how their digital products (e.g., AquaCue, YSI) serve customers globally.
  • → Read about Xylem's sustainability goals and recent innovations in water conservation to connect your work to the bigger picture.
  • → Familiarize yourself with Xylem's engineering blog or any public talks on their tech stack, especially around identity and security.
  • → Review Xylem's approach to Zero Trust and compliance (SOC2, NIST) by checking their trust center or security documentation.

💬 Prepare for These Interview Topics

Based on this role, you may be asked about:

1 Walk through how you would design a Policy-as-Code authorization system for a global customer-facing product, considering RBAC/ABAC hybrid.
2 Describe a complex identity migration you led, including challenges with token handling, session continuity, and user communication.
3 How do you implement Zero Trust principles in a microservice architecture? Give examples of technical controls aligned with NIST 800-53.
4 Explain OAuth2 authorization code flow with PKCE and how you'd secure it in a single-page application.
5 How would you define Golden Path integration patterns for OAuth2/OIDC to ensure consistency across multiple product teams?
Practice Interview Questions →

⚠️ Common Mistakes to Avoid

  • Submitting a generic resume that doesn't explicitly mention Java, Spring Boot, OAuth2/OIDC, or identity providers like Keycloak.
  • Failing to demonstrate hands-on experience with microservices and platform engineering—this is not a senior IC role for monoliths.
  • Overlooking the company's mission: avoid sounding indifferent to water sustainability; Xylem values candidates who care about their impact.

📅 Application Timeline

This position is open until filled. However, we recommend applying as soon as possible as roles at mission-driven organizations tend to fill quickly.

Typical hiring timeline:

1

Application Review

1-2 weeks

2

Initial Screening

Phone call or written assessment

3

Interviews

1-2 rounds, usually virtual

✓

Offer

Congratulations!

Ready to Apply?

Good luck with your application to Xylem!

← Back to Job Listing Apply Now →