Digital S/W Eng Sr Analyst - C12 - CHENNAI

Citi; Pune District; On-site; INR 3,800,000 - 6,000,000; Full time

Job summary

Citi is hiring a Senior Platform Security Engineer in Pune to lead the design, development, and deployment of mission‑critical platform security microservices using Java 17/21, Spring Boot and Spring Security. You will own authentication modernization, API routing, and zero‑trust capabilities, working across OpenShift containers and gateway layers.

Responsibilities include enforcing IAM standards, enabling secure token workflows, and driving performance optimizations in a high‑availability

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field.
• 10+ years of professional experience in software engineering, platform security, infrastructure architecture, or technical product delivery.
• Experience delivering enterprise infrastructure and security gateway programs (IAM, reverse proxy/gateway layers, microservices).

Responsibilities

• Develop, configure, and maintain high-throughput Security Gateway services and reverse-proxy infrastructure.
• Implement and support enterprise authentication protocols (SecureSSO, OIDC, COIN, etc.).
• Configure API routing rules downstream from APIG/Apigee and manage service discovery and fault tolerance.
• Enforce IAM standards, zero-trust principles, mutual TLS, and pass security scans.
• Lead Java-based security microservices design, development, and deployment using Java 17/21, Spring Boot, Spring Security, WebFlux.
• Optimize JVM performance, concurrency, and scalable architecture across distributed systems.

Skills

Security Gateway

Java

Spring Boot

Authentication

API Management

Zero Trust

Education

Bachelor's degree in CS/IT/Engineering

Tools

PingAccess

OpenShift

Apigee

Kubernetes

Job description

• Job Title / Profile: Senior Platform Security Engineer
• Job Family / Function: Platform Engineering & Information Security
• Management Level: Individual Contributor
• Band / Corporate Title: C12 (AVP level)

Responsibilities:** Ky Responsibilities:

1. Core Platform Security Gateway & Java Architecture (Team-Specific)

• Security Gateway Engineering: Develop, configure, and maintain high-throughput Security Gateway services and reverse-proxy infrastructure (such as PingAccess Security Gateway and containerized OpenShift/ECS microservices).

• Authentication Modernization & Federation: Implement and support enterprise authentication protocols, including SecureSSO, OIDC, COIN tokens, and legacy-to-modern auth migrations (e.g., SiteMinder to COIN/OIDC).

• API Routing & Resiliency: Configure API routing rules downstream from Apigee/APIM, integrate service discovery and manage fault-tolerance mechanisms (circuit breakers, rate limiting) across Green Network environments.

• Security & Regulatory Compliance: Enforce enterprise IAM standards, zero-trust architecture principles, mutual TLS (mTLS), header validation, and ensure all gateway endpoints pass vulnerability and static/dynamic scans.

• Serve as the Lead Java Engineer driving end-to-end design, implementation, and deployment of mission-critical platform security microservices using Java (Java 17/21, Spring Boot, Spring Security, Reactive/WebFlux). Accountable for executing and driving mid-to-large scale feature application design and development efforts to completion.

• Operate with considerable autonomy and discretion, significantly influencing application design, concurrency models, thread management, memory optimization, and enterprise design patterns by providing deep subject matter expertise in core Java application programming principles.

• Act as the primary technical authority sought after for analyzing and troubleshooting complex coding, JVM performance/garbage collection tuning, latency, multithreading, and distributed system design challenges; perform deep root-cause analysis (RCA) and remediate critical defects.

• Possess a deep, nuanced understanding of technical and architectural requirements, ensuring high reliability, maintainability, scalability, and operational excellence through all phases of the software development lifecycle (SDLC).

• Apply advanced expertise in information modeling, data structures, concurrent algorithms, and API schema design to engineer resilient, low-latency microservices and high-throughput security filters.

• Maintain an in-depth understanding of runtime properties, JVM tuning, hardware/OS sizing, container limits, platform dependencies, and contingencies with upstream and downstream integrations (e.g., token stores, identity providers, and back-end domain services).

• Demonstrate an advanced understanding of core system flows and how infrastructure components collectively integrate to support business objectives; drive enterprise coding, testing, debugging, and quality standards aligned with Citi's architectural blueprints.

• Participate in technical design forums as a Development Lead and key decision maker, leveraging deep codebase familiarity, Java best practices, and cross-team architectural insight to guide technical direction.

• Work with minimal guidance to define delivery strategies and translate complex architectural designs into clean, modular, and maintainable Java source code.

• Partner with industry vendors and third-party technology providers supporting digital architectures, reviewing technical roadmaps and implementation plans to accelerate development velocity and foster technical innovation.

• Drive the full SDLC within Agile/Scrum and hybrid frameworks, managing dependencies, defining automated test plans (unit, integration, load, and security testing via JUnit/Mockito/Gatling), and enforcing software quality gates.

• Directly impact business and technology outcomes by providing expert advice and counsel, effectively persuading and influencing engineering peers and senior leadership through strong technical communication and diplomacy.

• Proactively identify, assess, track, and mitigate technical risks, anticipate delivery bottlenecks, and lead structured escalation and issue management across multiple project streams.

• Recognize divergent architectural views, facilitate constructive technical dialog, and drive consensus to achieve alignment on strategic goals.

• Partner across engineering, platform infrastructure, and DevOps teams to streamline CI/CD pipelines, optimize delivery workflows, and enhance concurrent project execution.

• Regularly review system health and delivery metrics, establish enhanced visibility mechanisms, and eliminate redundant processes across architecture, build, and production operations environments.

• Lead engineering brown-bag sessions, mentor junior/mid-level engineers, contribute to internal developer communities, and demonstrate continuous learning through relevant industry certifications.

• Appropriately assess risk when technical and business decisions are made, safeguarding Citigroup's reputation, client data, and assets by enforcing strict adherence to information security policies, secure coding standards, regulatory mandates, and transparent control issue escalation.

Recommended Qualifications :

• 10+ years of professional experience in software engineering, platform security, infrastructure architecture, or technical product delivery environments.
• Proven track record leading and delivering complex, large-scale enterprise infrastructure and security gateway programs (e.g., IAM, reverse proxy/gateway layers, microservices, API management).
• Extensive experience delivering robust solutions using Agile / Scrum / Kanban methodologies in high-availability, mission-critical environments.
• Demonstrated experience driving technical leadership, influencing cross-functional teams, and affecting large-scale architectural and organizational culture change.
• Strong analytical, quantitative, and problem-solving skills; data-driven, strategic thinker with a results-oriented approach to platform reliability and security posture.
• Proven expertise managing partnerships and technical integrations with third-party vendors, enterprise service providers, and cross-enterprise engineering teams.
• Excellent written, verbal, and executive-level communication skills, with the ability to articulate complex security and architectural concepts to diverse technical and non-technical stakeholders.

Education:

• Bachelor's/University degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field (or equivalent professional experience).

Job Family Group:

Technology

Job Family:

Digital Software Engineering

Time Type:

Full time

Most Relevant Skills

Please see the requirements listed above.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi's EEO Policy Statement and the Know Your Rights poster.