Java Security Architect

Quick Facts

• Role: Java Security Architect (DevSecOps / Secure by Design)
• Focus: Secure architecture for Java / Spring Boot systems, DevSecOps in CI/CD, security auditing & mentoring

Description

You will design and develop secure architecture for Java / Spring Boot solutions, including authentication and authorization mechanisms, and integrate DevSecOps practices into CI/CD pipelines. The work includes architectural documentation, Proof of Concept delivery, security audits to identify vulnerabilities and technical debt, and mentoring developers to build a security-first engineering culture. The engagement starts immediately and is delivered in a project model with clear deliverables and acceptance protocols.

Responsibilities

• Design and develop secure architecture for Java / Spring Boot solutions
• Define security mechanisms (authentication/authorization) and implement DevSecOps practices in CI/CD
• Create architectural documentation and Secure by Design software standards
• Build Proof of Concept solutions and support the most complex modules
• Audit systems, identify security vulnerabilities and technology debt, and provide action recommendations
• Mentor developers and build a security culture in the software delivery process

Requirements

• 5+ years of Java backend design and development for complex systems
• 2+ years in an Architect, Tech Lead, or Senior Developer role designing solutions
• Practical expertise in Java and the Spring ecosystem (Spring Boot, Spring Security, Spring Cloud)
• Experience with distributed architectures (microservices) and integrations (REST API, gRPC, event-driven/queues such as Kafka or RabbitMQ)
• Experience implementing Secure by Design principles and knowledge of security standards (OWASP ASVS, OWASP SAMM)
• Practical experience implementing DevSecOps principles and tools in CI/CD (e.g., Jenkins)
• Experience with security testing for code and dependencies (SAST, DAST, SCA; e.g., SonarQube, Acunetix, JFrog)
• Practical knowledge of authentication and authorization (OAuth2, OpenID Connect, JWT, SAML) and secret management
• Ability to model and document architecture (UML, C4)
• Understanding of frontend technologies (Angular, HTML5, CSS) for secure presentation-layer integration
• Knowledge of container platforms and orchestration (Docker, Kubernetes, OpenShift)
• Practical knowledge of relational databases (PostgreSQL, Oracle) and NoSQL solutions
• Awareness of code quality processes and automated application-level tests
• Basic Linux knowledge
• Agile/Scrum project experience using Jira and Confluence
• Very good communication skills with developers and business stakeholders
• University degree in Computer Science or related

Benefits

• B2B project-based cooperation with stage-based billing and deliverable acceptance protocols
• Fast and remote recruitment process
• Participation in industry events and technology meetups
• Referral bonus for recommending friends
• Administrative and billing support during the collaboration