Controls Tech - EIM - Java Full Stack Tech Lead

Citibank (Switzerland) AG; Pune District; Hybrid; Confidential; Full time

Job summary

Citibank (Switzerland) AG in Pune invites an experienced Java Full Stack Tech Lead to architect and deliver enterprise-scale financial applications. You will guide engineering squads, drive cloud-native transformations, and ensure robust, scalable solutions across backend and frontend tech stacks.

The role demands 12+ years in software engineering with 3+ years in leadership, strong Java/Jakarta tech, React/TypeScript skills, and a proven track record in delivering high-throughput systems within

Qualifications

• 12+ years of software engineering experience, with at least 3+ years in a Technical Lead role.
• Experience in financial services, fintech, or large-scale enterprise environments.
• Strong knowledge of Java ecosystems and modern UI frameworks.

Responsibilities

• Own end-to-end technical solution architecture.
• Lead Java backend and modern UI development.
• Drive cloud-native migration and containerization.
• Design and govern RESTful APIs, GraphQL, and gRPC.
• Model data across relational and NoSQL databases.
• Champion CI/CD and automated testing.
• Implement observability and SRE practices.
• Ensure regulatory compliance and security controls.
• Mentor engineers and drive technical hiring.
• Collaborate with product and stakeholders.

Skills

Java 17/21

Spring Boot

Spring Data

Spring Security

Microservices

React/Angular

TypeScript

HTML/CSS

Redux

OpenShift

Kubernetes

Docker

Tekton

Jenkins

Terraform

OAuth 2.0

mTLS

Snyk

SonarQube

JUnit

Mockito

Cypress

OpenTelemetry

Grafana

Education

Bachelor’s or Master’s degree in CS/CE/IT

Tools

OpenShift

Kubernetes

Terraform

Jenkins

Job description

## Controls Tech - EIM - Java Full Stack Tech LeadApply: Hybrid: Pune Maharashtra India: Full time: Posted Today: 26994715**Position Overview**We are seeking an experienced and visionary Java Fullstack Tech Lead (C13 - Vice President) to lead the design, development, and delivery of mission-critical, enterprise-scale applications within Citi. In this role, you will lead high-performing engineering squads, architect robust microservices and modern UI solutions, drive adoption of cloud-native and DevOps best practices, and collaborate closely with product management, business stakeholders, and enterprise architecture teams to deliver resilient, high-throughput financial systems.**Responsibilities & Core Expectations** **1. Architectural Design & Technical Leadership** Own end-to-end technical solution architecture, translating complex business and regulatory requirements into scalable, fault-tolerant, and maintainable software designs. Champion modern software paradigms including event-driven architectures (EDA), domain-driven design (DDD), asynchronous messaging, and reactive systems. Ensure all technical designs strictly align with Citi’s enterprise architecture standards, cybersecurity principles, and non-functional requirements (NFRs). **2. Fullstack Engineering Excellence (Java & Modern UI)** Architect and lead the implementation of resilient backend services using Java 17/21, Spring Boot 3.x, Spring Cloud, Hibernate/JPA, and microservices patterns. Drive modern, modular, accessible, and responsive frontend applications using React, Angular, or TypeScript, enforcing component reusability and high UI performance. Set rigorous engineering standards across the tech stack, ensuring clean code, SOLID principles, optimal algorithm design, and minimal technical debt. **3. Cloud-Native Architecture & Containerization** Drive migration and modernization of services toward cloud platforms (OpenShift / AWS / GCP / Private Cloud / Hybrid). Oversee containerization strategies using Docker and orchestration via Kubernetes / OpenShift (ECS), ensuring auto-scaling, high availability, and disaster recovery readiness. Architect multi-region, active-active, or active-passive deployment patterns to guarantee business continuity (COB/DR). **4. API & Integration Engineering** Design and govern enterprise-grade RESTful APIs, GraphQL endpoints, and gRPC interfaces following OpenAPI/Swagger specifications. Architect asynchronous, event-driven data streaming pipelines leveraging Apache Kafka, Solace, or IBM MQ. Implement secure API gateway controls, rate-limiting, mutual TLS (mTLS), token-based authentication (OAuth2/OIDC), and circuit-breaking patterns. **5. Data Architecture & Persistence Engineering** Lead database design, query optimization, indexing, and data modeling across relational engines (Oracle, PostgreSQL) and NoSQL/Document databases (MongoDB, Cassandra). Implement distributed caching mechanisms using Redis or Hazelcast to optimize response latencies and system throughput. Ensure strict adherence to data governance, lineage, retention, and masking policies for sensitive financial data. **6. DevSecOps, CI/CD, & Quality Engineering Automation** Champion automated continuous integration and continuous delivery (CI/CD) pipelines using platforms like Tekton, Jenkins, GitLab/GitHub Actions, and Harness. Enforce automated test-driven development (TDD), behavior-driven development (BDD), and integration testing using JUnit 5, Mockito, Cypress, Playwright, or Jest. Mandate static and dynamic security scanning (Snyk, SonarQube, Checkmarx, Black Duck) with zero-tolerance policies for high-severity vulnerabilities. **7. Observability, Resiliency, & Site Reliability** Implement comprehensive telemetry, metrics, distributed tracing, and centralized logging utilizing OpenTelemetry, Prometheus, Grafana, Splunk, or ELK/Loki. Drive site reliability engineering (SRE) practices, setting and monitoring Service Level Objectives (SLOs), Service Level Indicators (SLIs), and error budgets. Lead root-cause analysis (RCA) for production incidents, conducting blameless post-mortems and implementing preventative corrective actions. **8. Engineering Governance, Risk, & Regulatory Compliance** Ensure all software deliverables comply with Citi's internal development lifecycle standards, Citi Information Security Policies (CISP), and regulatory compliance guidelines (e.g., SOX, Basel, GDPR). Prepare applications for internal and external audits, architecture review boards (ARB), and threat modeling assessments. Manage risk identification, remediation tracking, and technical mitigation across all owned repositories and systems. **9. Team Leadership, Mentorship, & Talent Development** Function as technical mentor and coach for engineers (C09–C12), conducting rigorous code reviews, pair programming, and technical workshops. Foster a culture of innovation, psychological safety, continuous learning, and engineering excellence across geographically distributed squads. Partner with Engineering Managers on technical hiring, skill assessments, performance reviews, and career development roadmaps. **10. Agile Execution & Stakeholder Collaboration** Collaborate actively with Product Managers, Business Analysts, Scrum Masters, and Operations teams in PI planning, backlog grooming, and sprint executions. Translate business roadmaps into granular technical user stories, estimation models, and phased release strategies. Communicate technical concepts, project risks, and architectural trade-offs clearly to senior management and non-technical stakeholders. **Qualifications & Required Experience** **Education & Experience Education**: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Information Technology, or a related field. **Experience**: 12+ years of professional software engineering experience, with at least 3+ years in a Technical Lead or Principal Engineering capacity within financial services, fintech, or large-scale enterprise environments. **Technical Skill Matrix** Domain Primary Technologies & Competencies Backend Java 17/21, Spring Boot, Spring Data, Spring Security, Microservices, Hibernate Frontend React.js / Angular, TypeScript, HTML5, CSS3, Modern State Management (Redux/Zustand) Messaging & Events Apache Kafka, Solace, RabbitMQ, Event-Driven Architecture Database & Cache Oracle, PostgreSQL, MongoDB, Redis, Distributed Caching Cloud & DevOps Kubernetes, OpenShift, Docker, Tekton / Jenkins, Helm, Terraform Security & Quality OAuth 2.0, mTLS, Snyk, SonarQube, JUnit, Mockito, Cypress Observability Prometheus, Grafana, Splunk, OpenTelemetry, AppDynamics