Deloitte - Recruitment

Java Engineer

Deloitte - Recruitment City of London, England, United Kingdom

Business Consulting and Services · 10,001+ employees

Oct 06
java Senior (5-10 yrs) Full-time Contractor United Kingdom
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The role involves designing, developing, and maintaining enterprise-grade applications using Java and JavaScript within a secure, cloud-native environment. Engineers will also lead CI/CD pipeline enhancements and champion secure development lifecycle practices across the software delivery process.

What they look for

Java JavaScript Full-stack development DevSecOps CI/CD Cloud-native Microservices APIs Docker Kubernetes AWS Azure Google Cloud Secure Development Lifecycle Infrastructure-as-Code Threat modelling

Requirements

Candidates must have strong hands-on experience with Java, JavaScript, and distributed systems architecture. A bachelor’s degree in computer science or a related field is required, along with proven experience in DevSecOps and secure coding practices.

Full description

Role: Java Engineer

Location: London or Belfast - Hybrid Working Model

Start Date: ASAP

End Date: 6 Months

Daily Rate: Inside IR35

Payroll provider – Rockford Payroll Info for Contingent Workers – Rockford Pay

Assignment Overview

Deloitte sets the requirements for the assignment. Rockford Resourcing acts as the agency on behalf of Deloitte and is responsible for sourcing candidates to fulfil the assignment. Successful candidates will be employed by Rockford Payroll. Rockford Payroll is responsible for the Associate’s employment, pay and applicable employment-related processes.

Deloitte is seeking six senior full-stack software engineers with strong experience across Java back-end development and JavaScript front-end development to support a confidential engagement within a highly regulated enterprise environment. The role will focus on designing, building, and securing enterprise-grade applications and platforms, with a strong emphasis on DevSecOps, secure software supply chain practices, and embedding Secure Development Lifecycle (SDL) principles across the SDLC.

The successful consultants will contribute to the delivery of scalable, cloud-native solutions, support technical strategy and code quality, and help drive secure engineering practices across development and deployment pipelines.

Key Responsibilities

· Design, develop, and maintain enterprise-grade applications using Java and JavaScript

· Build scalable, secure solutions aligned to cloud-native and modern engineering principles

· Lead and participate in code reviews, technical design discussions, and architecture decisions

· Evaluate, adopt, and integrate open-source technologies where appropriate

· Design, enhance, and maintain CI/CD pipelines with integrated security controls

· Implement automated security testing such as code scanning and dependency analysis

· Develop automation to support continuous integration, testing, and secure deployment practices

· Promote and apply Infrastructure-as-Code best practices

· Champion SDL practices across the software delivery lifecycle

· Support threat modelling, security design reviews, and remediation of identified vulnerabilities

· ​Help embed secure coding standards and supply chain security controls into engineering workflows

Experience & Skills Required

· Java Spark and Market Risk experience

· Strong hands-on experience with Java and JavaScript

· Architecture: Solid understanding of distributed systems, microservices, APIs, and software design patterns

· CI/CD: Proven experience implementing and managing CI/CD pipelines using tools such as GitHub Actions, GitLab, or Jenkins

· Strong knowledge of SDL and secure coding practices

· Understanding of software supply chain security, including SBOMs, dependency management, and vulnerability management

· Experience with Software Composition Analysis (SCA) tools and DevSecOps practices is preferred

· Knowledge of Zero Trust architecture and policy-as-code is preferred

· Containerisation experience with Docker and Kubernetes

· Exposure to cloud platforms such as AWS, Azure, or Google Cloud

Similar roles