Develop and maintain secure, high-throughput Java microservices, reverse proxies, API routing, and security gateway components. Implement authentication and federation protocols, resilience patterns, automated testing, CI/CD pipelines, and containerized deployments. Investigate defects, remediate vulnerabilities, conduct code reviews, and follow enterprise security and governance standards while collaborating with architecture, QA, and platform operations teams.
Role Overview:
Key Responsibilities:
1. Security Gateway & Java Microservice Development
The C11 Platform Security Engineer contributes to the end-to-end design, development, and enhancement of high-throughput Java microservices and reverse-proxy components within the Security Gatewayecosystem. Working closely with C12 Lead Engineers and cross-functional teams, the role focuses on building secure, scalable, and resilient security filtering and API routing components.
Key Responsibilities:
1. Security Gateway & Java Microservice Development
- Java Application Engineering: Develop, test, and maintain high-performance, resilient microservices using Java (Java 11/17+), Spring Boot, Spring Security, and RESTful APIs.
- Security Gateway Implementations: Support reverse-proxy and gateway integrations (e.g., PingAccess, OpenShift/ECS container services) to secure Green Network (GRN) enterprise application traffic.
- Authentication & Federation Support: Assist in implementing modern authentication protocols (SecureSSO, OIDC, OAuth 2.0, COIN tokens) and participate in migrating legacy security protocols (e.g., SiteMinder to OIDC/COIN).
- API Routing & Fault Tolerance: Configure and maintain routing downstream from API Gateways (Apigee / APIM), integrating service discovery (Eureka/CCP) and implementing resilience patterns (resilience4j/circuit breakers, retries, and rate limiters).
- Full Development Lifecycle: Participate actively in all phases of the Agile SDLC (sprint planning, daily standups, backlog refinement, and retrospectives).
- Code Quality & Testing: Write clean, modular, and maintainable Java code adhering to SOLID principles; build comprehensive unit, integration, and contract tests utilizing JUnit, Mockito, and test containers.
- Root Cause Analysis & Defect Remediation: Investigate, debug, and resolve application bugs, performance bottlenecks, and runtime errors in non-production and production environments.
- CI/CD & DevOps Integration: Build and manage automated build/deploy pipelines using Git, Maven/Gradle, and enterprise CI/CD tools (e.g., Tekton/Lightspeed, Bitbucket/GitHub, OpenShift).
- Secure Coding & Vulnerability Remediation: Ensure all developed code complies with enterprise security benchmarks (SonarQube, Snyk, Checkmarx, MCD scans) and remediate identified vulnerabilities promptly.
- Peer Reviews & Collaboration: Actively participate in peer code reviews, contribute to technical documentation, and collaborate effectively with quality assurance, architecture, and platform operations teams.
- Risk & Controls Adherence: Adhere to Citi’s technology risk and governance policies, applying sound judgment to safeguard firm assets and data.
- 5–8 years of hands-on software development experience with enterprise Java applications.
- Strong proficiency in Java (Java 11/17+), Spring Boot, Spring Security, and microservices architecture.
- Solid understanding of REST APIs, HTTP/HTTPS protocols, mutual TLS (mTLS), and web security standards (OWASP Top 10).
- Working knowledge of authentication/authorization protocols such as OAuth2, OpenID Connect (OIDC), JWT, and SAML.
- Practical experience working with containerized environments (Docker, Kubernetes / Red Hat OpenShift).
- Experience with relational/NoSQL databases, SQL querying, and database connection pooling.
- Hands-on experience with automated testing tools (JUnit, Mockito) and CI/CD tools (Git, Maven/Gradle, Jenkins/Tekton).
- Good problem-solving, analytical, and debugging skills with distributed systems.
- Strong verbal and written communication skills with the ability to articulate technical issues clearly in an Agile team setup.
- Bachelor’s/University degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
------------------------------------------------------
Job Family Group: Technology------------------------------------------------------
Job Family:Digital Software Engineering------------------------------------------------------
Time Type:Full time------------------------------------------------------
Most Relevant Skills Please see the requirements listed above.------------------------------------------------------
Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.
Citi Chennai, Tamil Nadu, IND Office
C P Ramaswamy Road, Chennai, Tamil Nadu, India, 600018
Similar Jobs
Artificial Intelligence • Big Data • Healthtech • Information Technology • Machine Learning • Software • Analytics
Design, develop, test, and maintain Java and Angular software applications. Translate business requirements into secure, scalable technical solutions, collaborate with Product, QA, and Operations teams, and support Agile delivery, CI/CD, deployments, monitoring, and production activities.
Top Skills:
AngularCi/CdJava
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Manage export compliance operations, including transaction screening, audits, risk assessments, export license and authorization management, metrics, regulatory procedures, training, and policy development. Ensure compliance with EAR, ITAR, OFAC, BIS, SCOMET, Military End User regulations, and applicable local export controls. Support global access controls, license renewals, internal audits, and continuous improvement of export compliance processes.
Top Skills:
Ocr EaseSap Gts
Fintech • Legal Tech • Software • Financial Services • Cybersecurity • Data Privacy
Oversee private equity fund accounting, including NAV calculations, capital accounts, waterfalls, carried interest, fees, expenses, transactions, valuations, and financial reporting. Review statements, investor packages, audits, tax-related information, and regulatory compliance. Lead and develop fund accounting teams, manage stakeholders, improve controls and processes, and support Investran or Geneva implementations.
Top Skills:
ExcelGenevaIfrsInvestranLux GaapUs Gaap
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
