Platform Security Engineer

Citi

. Develop, test, and maintain high-performance Java microservices using Java 11/17+, Spring Boot, Spring Security, and RESTful APIs .

Posted 10/22/2026full-timePune • IndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining high-performance Java microservices using Java 11/17+, Spring Boot, and RESTful APIs, while ensuring security through OAuth 2.0 and OpenID Connect implementations. Proficient in Agile methodologies and CI/CD practices, with strong problem-solving and debugging skills in distributed systems.

Highest-signal resume keywords

Java 11/17+Spring BootMicroservices ArchitectureOAuth 2.0CI/CD Pipelines

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Java DevelopmentREST APIsSpring SecurityJUnitSQL QueryingDockerKubernetesMavenGradleAgile SDLC

Soft Skills

Problem-SolvingAnalytical SkillsCommunication Skills

Tools & Technologies

GitJenkinsSonarQubeSnykCheckmarxOpenShiftApigeeEureka

Industry Keywords

Enterprise Java ApplicationsMicroservicesSecurity Gateway IntegrationsDistributed SystemsTechnology Risk and Governance

Tech Stack

Tools & technologies

Distributed SystemsDockerGradleJavaJenkinsJUnitKubernetesMavenMicroservicesMockitoNoSQLOpenShiftSDLCSpringSpring BootSpringBootSQL

About the role

Key responsibilities & impact

Develop, test, and maintain high-performance Java microservices using Java 11/17+, Spring Boot, Spring Security, and RESTful APIs
Support reverse-proxy and security gateway integrations using PingAccess and OpenShift/ECS container services
Assist with SecureSSO, OIDC, OAuth 2.0, and COIN token implementations and migrate legacy protocols to OIDC/COIN
Configure API gateway downstream routing with Apigee/APIM, Eureka/CCP service discovery, and resilience patterns
Participate in Agile SDLC activities including sprint planning, standups, backlog refinement, and retrospectives
Write maintainable Java code and comprehensive unit, integration, and contract tests
Investigate and resolve bugs, performance bottlenecks, and runtime errors in non-production and production environments
Build and manage automated CI/CD pipelines using Git, Maven/Gradle, and enterprise tools
Remediate security vulnerabilities identified by SonarQube, Snyk, Checkmarx, and MCD scans
Participate in peer reviews, technical documentation, and collaboration with QA, architecture, and platform operations teams
Adhere to Citi technology risk and governance policies

Requirements

What you’ll need

5–8 years of hands-on software development experience with enterprise Java applications
Strong proficiency in Java 11/17+, Spring Boot, Spring Security, and microservices architecture
Solid understanding of REST APIs, HTTP/HTTPS protocols, mutual TLS (mTLS), and OWASP Top 10
Working knowledge of OAuth2, OpenID Connect (OIDC), JWT, and SAML
Practical experience with Docker, Kubernetes, and Red Hat OpenShift
Experience with relational/NoSQL databases, SQL querying, and database connection pooling
Hands-on experience with JUnit, Mockito, Git, Maven/Gradle, and Jenkins/Tekton
Good problem-solving, analytical, and debugging skills with distributed systems
Strong verbal and written communication skills
Bachelor’s/University degree in Computer Science, Information Technology, Engineering, or equivalent practical experience

Benefits

Comp & perks

Equal opportunity employer
Reasonable accommodation available for persons with disabilities