Lead II - Software Engineering

About the Role We’re looking for a Senior Java Developer to independently develop, support, and maintain secure Java applications and APIs hosted on AWS. These applications are business-critical, so reliability, security, and operational ownership matter as much as feature delivery. You’ll own your work end-to-end, from design and implementation through deployment, monitoring, and production support, and you’ll be the go-to engineer for CI/CD pipeline ownership and troubleshooting. You’ll work closely with architects, product managers, and security and operations teams to keep our platform stable and compliant. What You’ll Do Independently design, develop, and maintain Java applications and RESTful APIs using the Spring Framework (Spring Boot, Spring Security, Spring Data, and related modules) hosted on AWS. Build and support secure APIs with strong authentication and authorization (OAuth2/OIDC, JWT), input validation, secrets management, and encryption in transit and at rest. Design and operate AWS-hosted services using EC2, API Gateway, S3, Lambda, and other relevant managed services, including IAM, VPC networking, load balancing, and CloudWatch monitoring. Own CI/CD pipelines for build, test, and deployment (e.g., Jenkins, GitHub Actions, AWS CodePipeline/CodeBuild, or similar), and independently diagnose and resolve pipeline failures. Provide production support for business-critical applications, including incident triage, root-cause analysis, performance tuning, and post-incident remediation. Implement logging, auditing, and monitoring for applications and APIs to support traceability, compliance, and rapid incident response. Write clean, well-tested code, including unit, integration, and contract tests, and enforce code quality through peer reviews and automated checks. Participate in security reviews, threat modeling, and vulnerability remediation, and keep dependencies and runtime environments patched. Mentor junior and mid-level engineers on Java, Spring, AWS best practices, and secure coding standards. Document architecture, deployment procedures, and operational runbooks. What You’ll Bring 6–8+ years of professional Java software development experience, including significant hands-on work building and supporting production applications and APIs. Excellent working knowledge of the Spring Framework, including Spring Boot, Spring Security, and Spring Data, along with the relevant underlying skills (dependency injection, AOP, transaction management, and JPA/Hibernate). Strong AWS expertise with hands-on experience in EC2, API Gateway, S3, and Lambda, plus working knowledge of IAM, VPC, CloudWatch, and related services. Demonstrated ability to independently own CI/CD pipelines, including setup, maintenance, and troubleshooting of build and deployment failures. Strong track record of building secure applications and APIs, with familiarity with the OWASP Top 10 and API Security Top 10. Experience supporting mission-critical systems, including on-call or production incident response, performance tuning, and root-cause analysis. Solid software engineering fundamentals: version control (Git), automated testing, code review, and design patterns. Ability to work independently with minimal day-to-day direction while coordinating effectively with cross-functional teams. Strong written and verbal communication skills, including the ability to explain technical tradeoffs to non-technical stakeholders. Nice to Have AWS Certification (e.g., AWS Certified Developer – Associate/Professional, AWS Certified Solutions Architect – Associate). Experience with containerization and orchestration (Docker, Amazon ECS/EKS, Kubernetes). Experience with infrastructure-as-code (Terraform, AWS CloudFormation, or AWS CDK). Experience with messaging and event-driven architectures (SQS, SNS, Kafka, EventBridge). Experience in a regulated industry (healthcare, financial services, government) with exposure to HIPAA, SOC 2, PCI-DSS, or similar frameworks.