Java Full Stack - Java+ Spring + React + AWS + Kafka
80% backend/ 20% Frontend with react
Kafka
AWS
Spring boot
This is brand new development and everything will be written API’s or codes from scratch and all hands-on
This person will be part of the team doing development lifecycle.
Java Full Stack - (Hands-on IC, 7+ yrs) Spring + React + AWS + Kafka
1) Backend (Java/Spring Boot) expert
- Java: strong OOP + functional style, concurrency, collections, memory/perf awareness; can read thread dumps/heap dumps and profile hotspots.
- Kafka: Experience designing, building, and operating Kafka-based event streaming platforms—topics/partitions, producers/consumers, consumer groups, schema/serialization (Avro), Kafka Connect/Streams, security (ACLs/TLS), monitoring & tuning
- Spring Boot: controllers/validation, exception handling, interceptors/filters, content negotiation, file upload/streaming, async request handling where needed.
- Spring Data/JPA: entity modeling, transactions, isolation levels, pagination, query tuning; handles N+1/fetch strategy issues; sensible use of projections vs entities.
- Spring Security: OAuth2/OIDC integration patterns, method-level security, custom auth filters, CORS/CSRF, secure session/token handling.
- Build/deps: Photon/Maven/Gradle, BOMs, dependency hygiene, vulnerability remediation workflow.
2) Frontend (React) strong
- API integration: robust data fetching/caching, pagination/infinite scroll, optimistic updates, consistent client-side error handling.
- Testing: React Testing Library; e2e basics with Cypress/Playwright.
- Core AWS fluency (expected to have shipped production workloads):
- Compute: ECS and EC2 autoscaling concepts
- Networking: VPC, subnets, security groups, NACL basics, private vs public connectivity
- Storage/data: S3; RDS/Aurora Postgress fundamentals; DynamoDB awareness even if not primary
- Integration: SQS/SNS
- Observability: Splunk & CloudWatch logs/metrics/alarms, log retention, dashboards
- Identity & access: IAM roles/policies, least privilege, cross-account basics, secrets management patterns.
- Infrastructure as Code: Terraform or CloudFormation/CDK (one strongly); environment promotion strategy (dev/test/prod), parameterization, drift awareness.
- Containerization: Docker images, health checks, resource limits, multi-stage builds.
4) Data & persistence — advanced
- SQL: indexes, query plans, joins, transaction semantics; can tune "slow query" issues end-to-end (app + DB).
- Migrations: Flyway/Liquibase discipline; zero-downtime schema evolution patterns.
- Caching: Redis (ElastiCache) usage patterns, TTL design, cache stampede prevention, invalidation strategy.
5) Observability & production excellence — expert
- Structured logging with correlation IDs; PII redaction discipline.
- Metrics + SLO thinking: latency/error rate saturation signals; actionable alarms (not noise).
- Operability: runbooks, on-call readiness, meaningful postmortems with preventative actions.
6) Testing & quality — expert
- Backend: JUnit5, Mockito, Spring test slices, Test containers; contract tests (Pact) preferred for service-to-service APIs.
- Performance: basic load testing and interpreting results; capacity and tuning recommendations.
- Security: SAST/dependency scans; remediates CVEs quickly and safely.
7) Security (practical, senior-level) — non-negotiable
- AuthZ: RBAC/ABAC concepts; least privilege both in app and AWS IAM.