Senior Software Engineer

Location: Onsite 2 days a week in Orlando, FL ( Local Only)


We are hiring a Senior Software Engineer on a 12-month contract to help build and ship the next-generation Children Discovery App (CDA) for Disney Cruise Line. CDA is a location-aware operational platform used by cast and youth programs across multiple ships and resort/island locations. It supports guest registration, check-in, guests-in-care workflows, messaging, reporting, real-time room/occupant visibility, and integrations with enterprise reservation and charging systems.
You will work across a multi-repo system—Angular SPA, Node.js Web API, and Java core services—following Disney Reference Architecture (RA) patterns, CI/CD promotion through latest → stage → per-location production, and enterprise security (MyID/Keycloak OIDC, authz, Vault/Consul-style config).

About the Project
The CDA replacement program modernizes a legacy application into a modular stack:
• UI: Angular SPA, Express static server, Capacitor (iOS/Android), lazy-loaded feature modules (check-in, dashboard, guests-in-care, notifications, settings), i18n, Jest (80% coverage threshold)
• Web API: Node.js + Restify, TypeScript, OpenAPI/Swagger, authz token endpoints
• Core API: Java 21, Spring Boot, embedded Jetty, CXF REST, Flyway/JPA, MariaDB, Redis, STOMP WebSocket relay with room-state aggregation

Domain highlights:
• Per-location behavior — ships (Adventure, Destiny, Dream, Fantasy, Magic, Treasure, Wish, Wonder) and resorts/islands (Aulani, Castaway, LHP, etc.) with configurable flows, charging rules, and UI visibility.
• Real-time operations — reader pulses aggregated into room occupancy snapshots pushed to the UI via WebSocket/STOMP; inactivity ("fruit punch”) alerting for guests in care.
• Enterprise integrations — reservation/guest data, OARS eligibility, Fidelio band charging (location-dependent).
• Observability — Grafana/Prometheus metrics, structured logging, correlation IDs.

What You'll Do
• End-to-end feature delivery — design, implement, test, and deploy user-facing and API capabilities aligned with acceptance criteria and location-config requirements.
• Full-stack contribution — primary strength in Angular + TypeScript and/or Node.js Web APIs, with willingness to touch Java/Spring services (relay, children API, persistence) when the work spans layers.
• Location-aware design — implement and extend configuration-driven behavior so one codebase serves many deployment targets without hard-coded location logic.
• Real-time UX — integrate STOMP/WebSocket room state in the SPA; handle reconnect, replay on subscribe, and consistent UI state under multi-pod deployments.
• Security & compliance — OIDC/MyID login flows, role/claims enforcement (CDA_USER, CDA_ADMIN, cast/guest authz patterns), parameterized data access, no secrets in code, safe error handling.
• API quality — REST contract design, OpenAPI documentation, backward-compatible versioning, integration with existing RA auth interceptors and validators.
• Data & persistence — MariaDB schema/migrations (Flyway), JPA entities, and coordination with documented MongoDB/per-location persistence strategy where applicable.
• DevOps collaboration — Docker images, health checks, environment-specific config (Vault, mpropz), and CI pipeline fixes; promote artifacts through latest → stage → production locations.
• Code quality — unit/integration tests, lint gates, code review, and clear PR descriptions (including Jira mapping and test plans).
• Mentorship — unblock mid-level engineers, uphold RA and team conventions, and document non-obvious domain or integration behavior.
• Modern engineering practices — use approved tools (including AI-assisted development where permitted) to accelerate delivery while maintaining test coverage, code review standards, and compliance requirements; validate all generated or suggested code and never expose guest/PII, credentials, or secrets to unapproved external tools.

Required Qualifications
• 8+ years professional software development, with 5+ years in senior or lead IC roles on production web applications.
• Strong TypeScript and Angular (modern standalone/module patterns, routing, HTTP interceptors, reactive forms, testing with Jest or similar).
• Production experience building Node.js REST APIs (TypeScript preferred); comfort with auth middleware, cookies/tokens, and API security basics.
• Solid SQL and relational modeling; experience with MariaDB/MySQL or equivalent.
• Experience with OAuth2/OIDC enterprise SSO, JWT validation, and role-based access control.
• Docker and cloud-style deployment (ECS/Kubernetes or similar); understanding of health checks, env-based config, and twelve-factor practices.
• Strong git workflow, code review culture, and ability to work in multi-repo codebases.
• Excellent communication: technical design notes, stakeholder updates, and clear written PR/Jira documentation.

Preferred Qualifications
• Java 21 and Spring Boot (JPA, Flyway, embedded servlet containers, Micrometer metrics).
• WebSocket/STOMP or similar real-time messaging; Redis pub/sub for multi-instance fan-out.
• Capacitor or hybrid mobile delivery for operational tablet apps.
• Experience with enterprise integration (reservation, POS/charging, eligibility services).
• Familiarity with WDPR Reference Architecture blocks (MyID login, mpropz, logasaurus, authz filters)—or comparable large-org platform libraries.
• NGINX reverse proxy and local multi-service dev setups.
• Load/performance testing and operational runbooks for ship/resort deployments.
• Productive use of AI-assisted development tools (e.g. IDE agents, code review aids) with strong judgment—validating output, preserving security and quality standards, and following company policy on guest/PII and credentials.