Java Aws Developer

IDC Engineering India; Chennai District; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

IDC Engineering India is seeking an experienced Backend Developer to design and scale reactive services on AWS. You will work on two Java + Spring Boot WebFlux codebases, with PostgreSQL and AWS Lambda, SQS, and ECS Fargate.

The ideal candidate thrives in non-blocking reactive programming, owns end-to-end feature delivery, and emphasizes testing, observability, and secure-by-default design.

Qualifications

• 4+ years of hands-on backend engineering experience.
• 1+ years building cloud-native, event-driven services on AWS.

Responsibilities

• Design and build reactive REST APIs using Spring Boot WebFlux with non-blocking I/O.
• Create OpenAPI-first APIs and standardized error contracts.
• Integrate with AWS services (S3, Secrets Manager, DynamoDB) and external systems via async SDKs.
• Implement caching and performance optimizations using Redis/Caffeine.
• Instrument services with OpenTelemetry and observe via CloudWatch, X-Ray, Grafana.
• Write unit/integration tests with JUnit 5, Mockito, Reactor Test.
• Contribute to CI/CD pipelines (GitHub Actions, multi-stage Docker builds).
• Apply secure-by-default practices including OAuth2 and IAM least privilege.

Skills

Java 17+

Spring Boot WebFlux

Reactive programming

OpenAPI/REST

JUnit 5/Mockito

Tools

AWS

PostgreSQL

R2DBC

Flyway

Liquibase

Docker

OpenTelemetry

Job description

Job Description: Job Description Backend Developer (Java / Spring / AWS) Job Title: Backend Developer Java, Reactive Spring, AWS

Experience: 4+ years of hands-on backend engineering, including 1+ years building cloud-native, event-driven services on AWS.

Job Summary

We are seeking an experienced Backend Developer to build and scale the services behind our Dynamic Service Options (DSO) platform. You will work across two Java + Spring Boot (WebFlux) codebases.

Both are fully reactive, event-driven systems on R2DBC/PostgreSQL, AWS Lambda, SQS and ECS Fargate, sharing a multi-module Gradle structure, OpenAPI-first APIs, Flyway-managed schemas, OpenTelemetry tracing and CloudFormation-driven deployments.

The ideal candidate is fluent in non-blocking reactive programming with Project Reactor, comfortable owning a feature end-to-end (API async job database infrastructure dashboard), and holds a high bar for testing, observability and secure-by-default design.

Key Responsibilities

• Design, build and maintain reactive REST APIs using Spring Boot WebFlux, returning `Mono`/`Flux` end-to-end with no blocking calls anywhere in the request path.
• Design OpenAPI-first APIs: generated specs, standardized response envelopes and error models, spec linting in the pipeline, and consistent HTTP semantics
• Integrate with external systems Snowflake (REST API with JWT key-pair auth and long-running query polling), internal product/entitlement services, and AWS services (S3, Secrets Manager, DynamoDB) via async SDK clients.
• Implement caching and performance strategies (Caffeine in-memory/Redis caches with TTLs, query tuning, parallel composition with `Mono.zip`) for high-volume ingestion and reporting workloads.
• Instrument services with OpenTelemetry / AWS Distro for OpenTelemetry (ADOT): custom spans, trace-context propagation across HTTP and SQS boundaries, structured logging, and RED metrics surfaced in CloudWatch Application Signals, X-Ray and Grafana dashboards.
• Write unit and integration tests with JUnit 5, Mockito and Reactor `StepVerifier`; keep coverage and quality gates green in SonarQube.
• Contribute to CI/CD: GitHub Actions build/test/scan workflows, multi-stage Docker builds, ECR image publishing, Lambda artifact packaging, and CloudFormation deployments across dev/QA/UAT/prod.
• Apply secure-by-default practices: OAuth2 resource-server token validation, role/entitlement-based authorization filters, least-privilege IAM, secrets in AWS Secrets Manager (never in code), and input validation at every boundary.

Required Skills & Qualifications

Core Java & Frameworks

• Java 17+ (we run the latest LTS) records, sealed types, streams and modern language features.
• Spring Boot in depth, including WebFlux and Spring Security (OAuth2 Resource Server).
• Gradle multi-module builds, Lombok, Jackson.

Data

• PostgreSQL at a professional level — schema design, indexing and query plans.
• R2DBC or equivalent reactive data access, and jOOQ or comparable type-safe SQL tooling.
• Flyway or Liquibase migrations validated in CI.

Cloud & Messaging

• Hands-on AWS — Lambda, SQS (FIFO semantics, visibility timeouts, DLQs), EventBridge, S3, Secrets Manager, ECS Fargate, RDS/Aurora, CloudWatch, IAM.
• AWS SDK v2 async clients or Spring Cloud AWS.
• Infrastructure as Code — CloudFormation, or SAM/CDK/Terraform with willingness to work in CloudFormation.

APIs & Contracts

• OpenAPI 3, REST conventions, versioning, consistent error contracts and bean validation.

Quality & Delivery

• JUnit 5, Mockito, Spring Boot Test, Reactor Test — meaningful tests for both success and failure paths.
• Docker and Compose for local development.
• Git, pull-request workflow and GitHub Actions or equivalent CI/CD.
• SonarQube or similar static analysis, with coverage discipline.

Engineering Judgment

• Distributed-systems fluency — idempotency, at-least-once delivery, retries, timeouts, partial failure and eventual consistency.
• Strong analytical, debugging and communication skills; owns delivery end-to-end.

Preferred Skills

• OpenTelemetry / distributed tracing; Grafana, Tempo, Prometheus or Loki.
• Snowflake or another cloud data warehouse; large-scale ingestion pipelines.
• Spring Cloud Function on Lambda, and JVM cold-start tuning (CRaC, SnapStart, fat JARs).
• LocalStack for local AWS emulation.
• Serverless cost/performance tuning and JVM tuning for containers.
• Enterprise SSO (Azure Entra, OAuth2 introspection) and centralized entitlement/RBAC services.
• OWASP Top 10 awareness and secure code review.
• Agile/Scrum delivery and trunk-friendly branching.

What You'll Work On

• SBOM generation with parallel warehouse queries, CSV assembly and S3 delivery via presigned URLs.
• Template upload & validation flows with CSV parsing, cached external validation and transactional persistence.
• Publish/consume Lambda workflows that move datasets from the authoring system into delivery: SQS request and FIFO job queues, EventBridge-scheduled invocations, a command/handler job model with bounded concurrency, retry limits, dead-letter queues and per-run status and log tracking.
• Third-party orchestration — ServiceNow request/task lifecycle for dataset provisioning, product-information lookups, and identity/directory resolution, all with caching, timeouts and graceful degradation.