We currently have a vacancy for an Security and Integration Expert fluent in English and French, to offer his/her services as an expert will be based in Luxembourg, Luxembourg. The work will be carried out either in the company’s premises or on site at customer premises. In the context of the first assignment, the successful candidate will be integrated in the team of the company that will closely cooperate with a major client’s IT team on site.

Your Tasks:

• Architecture, design and implementation of the integration layer between backend systems and secure messaging software;
• Provide expert advice on confidentiality, integrity, authorization, authentication, nonrepudiation, availability;
• Assist the team to test and conduct periodic vulnerability and security risk assessments of the messaging and data transfer system;
• Provide comprehensive guidance and consulting for the optimization of the integration layer;
• Participate to the maintenance of technical specifications related to transport and messaging protocols and their implementation in software.

Requirements

• Master degree in IT or relevant discipline, combined with minimum 16 years of relevant working experience in IT;
• Minimum 15 years of specific expertise in backend development techniques: inheritance, polymorphism, SOLID principles, data types, concurrency, design patterns, unit testing;
• Minimum 15 years of specific expertise in Java platform: garbage collection strategies, memory spaces, class loaders, serialization, multi-threading, syntax and semantics of the Java language, APIs of the Java Development Kit;
• Minimum 15 years of specific expertise in databases, directories and transactions: SQL, LDAP, ACID, XA ;
• Minimum 15 years of specific expertise in techniques used to secure Web applications: HTTP, TLS, WS-Security, Content Security Policy, Web Services (SOAP and REST), OAuth2, OpenID, OWASP;
• Minimum 15 years of specific expertise in continuous integration techniques and tools: Jenkins, TeamCity, Bamboo, GIT, SVN;
• Minimum 15 years of specific expertise in testing tools: SonarQube, Selenium WebDriver, Serenity, TestLink, JMeter;
• Minimum 15 years of specific expertise in monitoring tools: Dynatrace, Splunk;
• Minimum 15 years of specific expertise in operations including networking, hardware and operating systems: TCP/IP, Linux, databases, directories, shell scripts, virtualization, load balancers, reverse proxies, web application firewalls, HSM, TPM;
• Minimum 15 years of specific expertise in Atlassian collaborative tools (like Confluence and Jira);
• Minimum 10 years of specific expertise in open standards for data and document exchange: ebMS3, AS4, SBDH, XHE;
• Minimum 10 years of specific expertise open standards for service discovery: Business Document Metadata Service Location (BDXL), Service Metadata Publishing (SMP);
• Minimum 10 years of specific expertise in open standards for party identification: ebCore Party Id Type;
• Minimum 10 years of specific expertise in message format standards: XML, XSD, XPATH, WSDL, JSON, JSON schema;
• Minimum 10 years of specific expertise in discovery and service location technologies: DNS (NAPTR, CNAME), DNSSEC;
• Minimum 10 years of specific expertise in Business-to-Business (B2B) and Electronic Data Interchange (EDI) and common data and document exchange patterns;
• Minimum 10 years of experience in security related IT solutions and of required technology within one or more of the fields, such as, business process modelling, dematerialization processes, authentication and authorization management, electronic signatures and seals, document management and related processes, multi-level, multi-agent, transnational authorization systems, audit and quality improvements, information security standards, hosting, management, auditing, systems and processes, process management in collaborative environments and with novel collaborative methods, large distribution infrastructures with high security constraints;
• Minimum 10 years of experience in authentication and authorization management processes and secure coding standards;
• Minimum 10 years of experience in crisis management systems;
• Minimum 10 years of experience in large cross-border IT systems;
• Minimum 10 years of experience in identity and access management;
• Minimum 10 years of experience in test driven development (development methodologies);
• Minimum 10 years of experience with handling highly secure data (sensitive client data);
• Minimum 8 years of specific expertise in project management and software development methodologies: OpenPM2, SCRUM, Extreme Programming;
• Minimum 5 years of specific expertise in digital signature and encryption with X509 certificates, Public Key Infrastructure (PKI);
• Minimum 5 years of specific expertise in data containers: Associated Signature containers (ASiC), gzip;
• Minimum 5 years of specific expertise in the legal framework for the use of trust services: the Electronic Identification and Trust Services Regulation (eIDAS Regulation 910/2014/EC);
• Minimum 5 years of experience in Java development using Hibernate and Spring;
• Minimum 5 years of experience with development of workflow engines;
• Minimum 5 years of experience with XML and Rest driven applications;
• Minimum 2 years of specific expertise in mobile development techniques: Android/Java & Kotlin, iOS/Swift, Key Attestation;
• Minimum 2 years of specific expertise in containerization tools: Docker, Kubernetes;
• Certifications in ISO 27000, secure coding standards, data security standards;
• Excellent command of the English and French language.