Java Software Engineer

Bespoke Technologies, Inc.; Virginia; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Bespoke Technologies, Inc. is seeking a senior security software engineer in the United States with a active Poly clearance. You will design, develop, and secure Java REST APIs, integrate PKI-based authentication, and implement robust LDAP/SSH workflows on Linux servers.

The role requires 10+ years of enterprise experience, strong problem-solving, and the ability to communicate complex security concepts to technical and non-technical stakeholders.

Qualifications

• Active Poly clearance required; without it applicants will not be considered.
• 10+ years of experience in enterprise security software development.
• Strong experience with LDAP, SSH, Linux administration, and Java REST APIs.
• Proven ability to design PKI-based solutions and manage certificates.

Skills

LDAP authentication

SSH

Linux admin

Java REST API

JDBC/DAO

Tomcat/Apache

Jakarta Servlets

Base64 API

JCA cryptography

Encryption (AES/RSA/ECC)

Quartz Scheduler

Git/GitHub

PKI/SSL

X.509 certificates

OpenSSL

Communication

Requirements analysis

Clean code

Innovation/Proactivity

Tools

Python integration

AD CS PKI

Job description

Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.

Experience: 10+ years

Required skills:

• Extensive experience with LDAP authentication and authorization, and custom LDAP-based solutions.
• Strong experience with SSH and Putty, and custom SSH-based tools and applications on Linux platform.
• Experience with Linux system administration and command-line tools.
• Experience with Java REST API development, and API secure requests using application certificates and scalability for user activity monitoring.
• Experienced w/ JDBC, DAO pattern and configuration using MariaDB (MySQL) and custom database tools and scripts – connection pooling without framework.
• Experience deploying applications on Apache Tomcat, configuring Tomcat connectors, and managing HTTPD (Apache HTTP Server).
• Experience writing Jakarta Servlet API, including servlet lifecycle, request and response handling, and session management.
• Experience w/ Java Base64 API, that encodes and decodes data, including its usage and limitations.
• Knowledge of Java Cryptography Architecture (JCA) and its APIs.
• Knowledge of encryption algorithms, such as AES, RSA and ECC and their usage in Java.
• Experience w/ Quartz Job Scheduling Library using Core Java development.
• Experience w/ software version control tools (Git/GitHub) code repository.
• Knowledge of PKI infrastructure and secure data transmission, and custom PKI-based tools and applications.
• Knowledge of X.509 certificate handling, including certificate parsing, certificate validation and certificate chaining.
• Experienced in generating, managing, and storing key pairs using OpenSSL, and RSA, troubleshooting PKI-related issues, including key pair and certificate problems.
• Strong problem-solving skills and analytical thinking, attention to detail, and excellent communication and collaboration skills with technical and non-technical stakeholders.
• Ability to analyze user needs to determine technical requirements.
• Ability to write clean, maintainable, and well-documented code.
• Shows initiative and offers ideas for new products and improvements to existing interfaces.

Desired skills:

• Some experience integrating Python into web applications.
• Familiar w/ Windows Active Directory Certificate Services (AD CS) – for issuing and managing key infrastructure (PKI) certificates.