Platform Security Engineer

Role Overview: The C11 Platform Security Engineer contributes to the end-to-end design, development, and enhancement of high-throughput Java microservices and reverse-proxy components within the Security Gatewayecosystem. Working closely with C12 Lead Engineers and cross-functional teams, the role focuses on building secure, scalable, and resilient security filtering and API routing components. Key Responsibilities: 1. Security Gateway & Java Microservice Development Java Application Engineering: Develop, test, and maintain high-performance, resilient microservices using Java (Java 11/17+), Spring Boot, Spring Security, and RESTful APIs. Security Gateway Implementations: Support reverse-proxy and gateway integrations (e.g., PingAccess, OpenShift/ECS container services) to secure Green Network (GRN) enterprise application traffic. Authentication & Federation Support: Assist in implementing modern authentication protocols (SecureSSO, OIDC, OAuth 2.0, COIN tokens) and participate in migrating legacy security protocols (e.g., SiteMinder to OIDC/COIN). API Routing & Fault Tolerance: Configure and maintain routing downstream from API Gateways (Apigee / APIM), integrating service discovery (Eureka/CCP) and implementing resilience patterns (resilience4j/circuit breakers, retries, and rate limiters). 2. Software Lifecycle, Quality & Code Execution Full Development Lifecycle: Participate actively in all phases of the Agile SDLC (sprint planning, daily standups, backlog refinement, and retrospectives). Code Quality & Testing: Write clean, modular, and maintainable Java code adhering to SOLID principles; build comprehensive unit, integration, and contract tests utilizing JUnit, Mockito, and test containers. Root Cause Analysis & Defect Remediation: Investigate, debug, and resolve application bugs, performance bottlenecks, and runtime errors in non-production and production environments. CI/CD & DevOps Integration: Build and manage automated build/deploy pipelines using Git, Maven/Gradle, and enterprise CI/CD tools (e.g., Tekton/Lightspeed, Bitbucket/GitHub, OpenShift). 3. Security, Risk & Collaboration Secure Coding & Vulnerability Remediation: Ensure all developed code complies with enterprise security benchmarks (SonarQube, Snyk, Checkmarx, MCD scans) and remediate identified vulnerabilities promptly. Peer Reviews & Collaboration: Actively participate in peer code reviews, contribute to technical documentation, and collaborate effectively with quality assurance, architecture, and platform operations teams. Risk & Controls Adherence: Adhere to Citi’s technology risk and governance policies, applying sound judgment to safeguard firm assets and data. 4. Recommended Qualifications & Education (C11 Level) Recommended Qualifications: 5–8 years of hands-on software development experience with enterprise Java applications. Strong proficiency in Java (Java 11/17+), Spring Boot, Spring Security, and microservices architecture.