Java Software Engineer (HashiCorp Vault)@Melbourne and Sydney

Position: Java Software Engineer

Location: Melbourne and Sydney

Duration: 6 months

Key Responsibilities:

Development & Implementation:

• Create and support APIs using Spring Boot, following proven patterns and practices
• Develop secure integration solutions with guidance from senior engineers
• Write clean, well-tested code that others can easily understand and maintain
• Contribute to code reviews and technical discussions
• Help evolve our continuous integration pipeline
• Ensure solutions are scaled and deployment and management is automated across environments
• Conduct routine security assessments, vulnerability scans, and penetration testing
• Implement security and data controls using the APIs and features provided by HashiCorp Vault and related tooling
• Ensure solutions meet internal security and compliance requirements (e.g., PCI, DSS, GDPR, etc...)
• Work to define and enforce new and updated best practices within cloud and on-prem environments – specifically around DLP and tokenization

Technical Collaboration:

• Partner with senior engineers to shape API design and deliver integration solutions
• Provide technical support and help track down and resolve integration challenges
• Troubleshoot and debug integration issues effectively
• Share knowledge and learn from team activities
• Work with cross-functional teams to find and address business needs for secure data management and related controls and best practices

Technical Requirements

Must Have:

• 3+ years of commercial software development experience
• Strong Java development skills (Java 11+)
• Practical experience with Spring Framework (Boot, MVC, Security)
• Solid understanding of REST API design principles
• Track record of writing effective unit and integration tests
• Good command of Git and CI/CD practices
• Working knowledge of cloud platforms (preferably AWS)
• Strong experience with Format Preserving Encryption (FPE) and tokenization using HashiCorp Vault
• Familiarity with tokenization and encryption technologies (e.g., symmetric/asymmetric encryption, key management)