Experience: 5.00 + years
Salary: Confidential (based on experience)
Expected Notice Period: 7 Days
Shift: (GMT+05:30) Asia/Kolkata (IST)
Opportunity Type: Remote
Placement Type: Full Time Permanent position(Payroll and Compliance to be managed by: Uplers)
What do you need for this opportunity?
Must have skills required:
CI/CD, OWASP, RBAC design, SIEM, Threat Modelling, Architecture, Certificate Management, Oauth 2.0, Spring Boot, Cloud Server (Google / AWS), Java, Kafka, PostgreSQL, Python, Rest APIs
Business Intelligence Software is Looking for:
About The Role
We''re looking for a senior backend engineer to lead the integration and security backbone of the platform. You''l design how the console connects to each tool, processes events in real time, and enforces enterprise-grade security: certificates, SSO, RBAC and audit. You''ll work closely with our mainframe specialists, a second backend engineer focused on integration and AI, and a frontend engineer.
What You''ll Do
- Design and build the backend architecture, including a pluggable connector layer for each integrated tool.
- Build real-time event processing: ingestion, normalisation, deduplication, correlation and an event lifecycle (acknowledge, assign, elevate, resolve).
- Own security end to end: certificate management and mTLS, SSO integration, RBAC and fine-grained permissions, approval workflows for high-risk actions, and tamper-evident audit logging.
- Integrate with enterprise systems such as ServiceNow, event management platforms and collaboration tools.
- Deliver real-time updates to the frontend.
- Design the platform to run on a public cloud or on-premises, depending on each bank''''''''''''''''s requirements.
- Work with bank security and infrastructure teams through security reviews, penetration testing and audit requirements.
- Set engineering standards for code quality, testing, CI/CD and documentation, and mentor the wider team.
What We''re Looking For
- 7+ years of backend engineering, with strong Java/Spring Boot. Working knowledge of Python is a plus.
- Proven experience designing integrations across many third-party systems via REST APIs, with resilience patterns (retries, circuit breakers, idempotency, rate limiting).
- Hands-on Kafka and event-driven architecture.
- Certificate management: X.509, PKI, mTLS, keystores/truststores, automated rotation and expiry monitoring (e.g. HashiCorp Vault, Venafi, cert-manager).
- SSO: OAuth 2.0, OpenID Connect and SAML 2.0 with enterprise identity providers such as Entra ID, Okta or Ping JWT handling and service identities.
- Authorisation: RBAC design, mapping directory groups to roles, least privilege, approval workflows.
- Security engineering: OWASP Top 10, secrets management, encryption in transit and at rest, audit logging to a SIEM, threat modelling, secure SDLC (SAST, DAST, dependency scanning).
- PostgreSQL, plus Elasticsearch/OpenSearch and Redis.
- Cloud-native, portable design: Docker and Kubernetes or Red Hat OpenShift, able to run in public cloud or on-premises without unnecessary lock-in.
- CI/CD, infrastructure as code, and observability (OpenTelemetry, Prometheus).
Strong plus
- Experience in banking or financial services, working within controls such as SOX, PCI DSS, NIST 800-53 or SOC 2, and with FIPS-validated cryptography.
- Hands-on experience with at least one major cloud (Azure, AWS or GCP), ideally Azure: networking (VNets/VPCs, private endpoints), identity (managed identities, IAM), key and certificate management (Azure Key Vault, AWS KMS/ACM) and Terraform.
- Hybrid connectivity between cloud and on-premises environments, including secure network paths to data centres.
- Cloud security and compliance controls in regulated industries (e.g. CIS benchmarks, cloud security posture management).
- Integration with ServiceNow and event management tools (Netcool, BMC, PagerDuty or similar).
- Real-time delivery via WebSockets or server-sent events.
- High-availability and DR design.
Nice to have
- Exposure to mainframe integration: Zowe API Mediation Layer, z/OSMF REST APIs, z/OS Connect, mainframe data via Kafka, or RACF/PassTicket authentication.
- Experience building a product used by multiple clients.