Senior Software Engineer - Security / Governance

Align Knowledge Centre; Pune District; Hybrid; INR 2,000,000 - 3,400,000; Full time

Job summary

Align Knowledge Centre in Pune is seeking a hands-on Senior Software Engineer with strong Java backend development and security expertise to lead secure API design and access control.

You will work on enterprise platforms focusing on authentication, authorization, data protection, and governance, with a hybrid work setup in Pune. The role requires 5+ years of experience and a proven track record implementing security controls in applications.

Qualifications

• Hands-on Java backend engineering with security focus.
• experience with OAuth/OIDC/JWT and RBAC.

Skills

Java

Spring Boot

REST APIs

OAuth 2.0 / OIDC / JWT

Authentication & Authorization

RBAC / Access Control

API Security

Secure Application Development

SQL

Git

Software Fundamentals

Job description

Job Title: Senior Software Engineer Java / API Security / Access Control
Location: Pune
Work Mode: Hybrid
Experience: 5+ years

Job Description

We are looking for a hands‑on Lead Software Engineer with strong Java backend engineering combined with application security, access control and secure API development.

The engineer will work on enterprise platforms where secure data access, authentication, authorization, data protection and governance are critical.

Mandatory Skills

• Java strong hands‑on experience
• Spring Boot
• REST APIs / Microservices
• OAuth 2.0 / OIDC / JWT
• Authentication & Authorization
• RBAC / Access Control
• API security
• Secure application development
• SQL / enterprise data handling
• Git
• Strong software engineering fundamentals

Strongly Preferred

• Data governance
• Data privacy
• Metadata management
• Data quality
• Secure data sharing
• IAM
• API Gateway security
• SAST / DAST
• SonarQube / Veracode / Checkmarx
• PCI / financial-services security
• AWS / Azure security services

What We Are Looking For

We need engineers who have personally implemented security controls in applications, not candidates whose exposure is limited to security teams or compliance documentation.