Java Backend Developer – Employee Permissions for Wholesale Banking @ING Hubs Romania

Discover ING Hubs Romania

ING Hubs Romania offers 130 services in software development, data management, non-financial risk & compliance, audit, and retail operations to 24 ING units worldwide, with the help of over 2000 high-performing engineers, risk, and operations professionals.

We started out in 2015 as ING’s software development hub, then steadily expanded our range to include more services and competencies. Now we provide borderless services with bank-wide capabilities and operate from two locations: Bucharest and Cluj-Napoca.

Our tech capabilities remain the core of our business, with more than 1800 colleagues active in Data and Analytics Tech, Tech Foundation and Channels, Retail Core Banking and Architecture, and Global Products and Technology Services.

We enjoy a flexible way of working and a highly collaborative environment, where fair and constructive feedback is encouraged.

For us, impact isn't a perk. It's the driver of our work. We are guided and rewarded by a shared desire to make the world a better place, one innovative solution at a time. Our colleagues make it their job to do impactful things and they love doing it in good company. Do you?

Here’s a sneak peak of what our colleagues say about working within ING Hubs Romania:

• At ING, we're building the solutions of tomorrow, today | 80% of our colleagues in Romania agree

The Mission

Wholesale Banking is building a new Employee Permissions application. The goal is to create a centralized solution that optimizes permissions for data, documents and journeys, used by all domains in Wholesale Banking and applicable to multiple functional areas such as servicing, sales and, in the future, other business domains.

The new application will act as a single source of truth for employee permissions, offering team management, role management, data-scope and functional-scope overviews. Other Wholesale Banking systems will be able to consume it in order to implement data shielding and unified access rights.

The first MVP will focus on Team Management in the Services / Lending functional area, with the ambition to evolve towards a broader WB permission model covering teams, roles, customers, documents, deals, cases and other assets

We are looking for a strong Java Backend Developer who is technically passionate, solution-focused and eager to be part of a new strategic product from the beginning. This role is suitable for a developer with solid hands-on experience, strong ownership and the ambition to grow towards a senior engineering role within the next year.

Your day to day

Even if you’ll start your day from the comfort of your home or drink your morning coffee in our office’s garden, your day will be quite similar when it comes to tasks.

You will:

• Design, develop, test and maintain backend services for the new Employee Permissions application.
• Build new features from scratch and contribute to the technical foundation of a new strategic Wholesale Banking asset.
• Develop APIs and backend capabilities supporting team management, role management, data-scope permissions and functional-scope permissions.
• Contribute to the modelling of complex business concepts such as employees, teams, roles, business permissions, clients, documents, deals, cases, facilities and team-to-asset assignments.
• Implement integrations with existing WB and bank-wide components such as CIT, OnePAM, GRDM, One Identity, Active Directory, data access, document access and access rules engine.
• Work on functionality that supports both:• Functional scope — what employees are allowed to do, such as access to applications, capabilities and business processes.
• Data scope — what employees are allowed to see, such as clients, documents and other business assets.

• Translate business requirements into technical solutions for granular access, hierarchical client access, assignment rules, exclusion rules, team governance and document access.
• Write clean, maintainable and testable code, with focus on quality, security and long-term maintainability.
• Perform code reviews, write unit and integration tests, refactor code and help reduce technical debt.
• Work closely with the Product Owner, CJE, Frontend Developer, DevOps Engineer, Chapter Lead, architects and dependent squads.
• Align and discuss technical solutions directly with stakeholders and consuming applications.
• Support the squad during production investigations, incident analysis and defect resolution.
• Contribute to Agile ceremonies, refinements, demos and discovery sessions.
• Help build a strong engineering culture based on ownership, collaboration, learning and continuous improvement.

What you’ll bring to the team

Experience

• Minimum 3 years of industry experience in Java backend development.
• Experience with the full software development lifecycle: analysis, design, development, testing, deployment and maintenance.
• Experience working in Agile / Scrum teams.

Tech stack / knowledge

Essential:

• Strong development skills in core server-side Java.
• Experience with Spring Boot and Spring modules such as Web, Data and Security, or similar dependency injection frameworks.
• Experience with building services from scratch and developing on top of existing components.
• Good understanding of REST APIs, API design, service boundaries, error handling and versioning.
• Experience with relational databases, preferably Oracle, SQL and relational modelling.
• Understanding of Continuous Delivery concepts and experience with tools such as Git, Azure DevOps and Maven.
• Familiarity with tools such as Confluence, Checkmarx, ServiceNow or similar.
• Experience with automated testing using tools such as Junit and/or BDD frameworks such as Cucumber.
• Experience or strong affinity with IT Security concepts, including authentication, authorization, access control, auditability and least privilege.
• Comfortable using Linux as a deployment environment.
• Strong analytical skills and ability to understand complex business domains.
• Proactive, hard-working and ownership-driven mindset.
• Good communication skills and ability to work with both technical and business stakeholders.
• English: advanced spoken and written.

Nice to have:

• Experience with IAM, One Identity, Active Directory, RBAC / ABAC, data shielding or entitlement-management systems.
• Experience with complex permission models, access rules, team-management solutions or document permissions.
• Experience with messaging technologies and protocols.
• Experience in optimizing software for performance and scalability.
• Experience with Kubernetes, OpenShift or cloud-native deployment.
• Flexibility in development technologies; openness to work with other languages such as Python or scripting when needed.
• Knowledge of Wholesale Banking, servicing, lending, sales or KYC processes.
• Bachelor’s Degree or higher, preferably in an IT-related field.

If you want to deep dive into the processing of personal data conducted by ING Hubs Romania during the recruitment process and your rights related to it, read the privacy notices on our website (make sure to scroll until you reach the Data Protection section/ Candidates tab).