Senior Software Engineer (Go and Java, Secure SDLC)

Job Overview

We are seeking an experienced Senior Software Engineer with 5+ years of enterprise software development experience in Go (Golang) and Java. The ideal candidate will design, develop, and maintain secure, scalable, high-performance applications and cloud-native platforms using distributed systems, microservices, and well-defined APIs.

The role requires strong software engineering fundamentals, expertise in secure software development lifecycle (Secure SDLC) practices, and the ability to contribute to architecture decisions, technical strategy, code quality, and engineering best practices.

Key Responsibilities

1. Software Design and Development

• Design, develop, test, and maintain enterprise-grade applications using Go and Java.
• Build scalable, resilient, and high-performance microservices and distributed systems.
• Develop RESTful APIs and service integrations using industry-standard design principles.
• Apply object-oriented programming, SOLID principles, clean code practices, and established design patterns.
• Write modular, reusable, maintainable, and testable code.
• Identify and resolve performance bottlenecks, production defects, and reliability issues.

2. Secure Software Development Lifecycle (Secure SDLC)

• Integrate security practices throughout requirements gathering, design, development, testing, deployment, and maintenance.
• Follow secure coding standards and perform threat modeling and security risk assessments.
• Identify and remediate vulnerabilities such as injection attacks, broken access control, insecure deserialization, and improper input validation.
• Integrate static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and dependency scanning into CI/CD pipelines.
• Apply secure authentication and authorization mechanisms, including OAuth 2.0, OpenID Connect, and role-based access control.
• Implement secrets management, encryption, secure configuration, and audit logging.
• Address security findings in accordance with organizational policies and applicable standards.

3. Cloud-Native and Distributed Systems

• Design and develop cloud-native applications using microservices and distributed architecture principles.
• Build and deploy containerized applications using Docker and Kubernetes.
• Work with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform.
• Implement fault tolerance, retries, timeouts, circuit breakers, and graceful degradation.
• Apply observability practices using structured logging, metrics, tracing, and monitoring.
• Design reliable service-to-service communication and asynchronous processing using messaging technologies.

4. Architecture and Technical Leadership

• Participate in system design discussions, architecture reviews, and technical planning.
• Lead code reviews and enforce engineering standards for quality, performance, maintainability, and security.
• Mentor junior engineers and promote knowledge sharing across the team.
• Evaluate open-source frameworks, libraries, and tools for security, licensing, maintenance, compatibility, and operational suitability.
• Identify opportunities for technical improvements, refactoring, and automation.
• Collaborate with product managers, architects, DevOps engineers, QA teams, and security specialists.

5. Testing and Continuous Delivery

• Develop unit, integration, contract, and end-to-end tests.
• Use Go testing tools and Java testing frameworks such as JUnit and Mockito.
• Build and maintain CI/CD pipelines for automated builds, testing, security checks, and deployment.
• Participate in production releases, incident resolution, root-cause analysis, and post-incident reviews.
• Maintain technical documentation, API specifications, and architectural decision records.

Required Technical Skills

• Experience: 5+ years of professional software engineering experience in enterprise environments.
• Programming: Strong hands-on experience with Go and Java.
• Java ecosystem: Spring Boot, dependency injection, REST APIs, Maven or Gradle.
• Go ecosystem: Go modules, goroutines, channels, concurrency patterns, interfaces, and error handling.
• Architecture: Microservices, distributed systems, cloud-native design, and API development.
• Security: Secure coding, OWASP guidance, threat modeling, vulnerability remediation, and Secure SDLC.
• DevOps: Git, CI/CD, Docker, Kubernetes, and automated testing.
• Databases: SQL databases such as PostgreSQL or MySQL; familiarity with NoSQL databases is beneficial.
• Messaging: Kafka, RabbitMQ, or equivalent asynchronous messaging platforms.
• Observability: Logging, metrics, distributed tracing, and production monitoring.
• Engineering practices: Code reviews, design patterns, SOLID principles, clean architecture, and test-driven development.

Preferred Qualifications

• Experience with AWS, Azure, or GCP.
• Familiarity with SAST, DAST, SCA, and software bill of materials (SBOM).
• Knowledge of API gateways, service meshes, and zero-trust security principles.
• Experience with infrastructure as code, such as Terraform.
• Familiarity with OpenTelemetry, Prometheus, Grafana, or similar observability tools.
• Understanding of secure dependency management, software supply-chain security, and container security.
• Experience working in Agile or Scrum teams.

Key Competencies

• Strong analytical and problem-solving skills.
• Excellent understanding of software architecture and engineering trade-offs.
• Ability to make sound technical decisions and explain design choices.
• Strong communication, collaboration, and mentoring skills.
• Ownership of code quality, application security, reliability, and production readiness.
• Ability to balance delivery timelines with long-term maintainability and security.

Expected Outcomes

• Deliver secure, reliable, and scalable enterprise applications.
• Improve code quality, automated test coverage, and security posture.
• Reduce vulnerabilities and technical debt through proactive engineering practices.
• Improve service performance, availability, and operational observability.
• Contribute to architecture evolution and engineering standards.
• Support knowledge sharing and technical development across the team.