Here is an Exciting opportunity - Risk and Compliance Full Stack

Job Description Senior Full Stack (Java/React, Microservices)

Key Responsibilities
- Design and develop robust, scalable backend services and RESTful / GraphQL APIs
- Build responsive, performant frontend applications and component libraries
- Participate in architectural design discussions and contribute to technical roadmap decisions
- Write clean, testable, well-documented code following established engineering standards
- Conduct thorough code reviews and provide constructive technical feedback
- Identify and resolve performance bottlenecks, security vulnerabilities, and reliability risks
- Collaborate with DevOps/Platform teams on CI/CD pipelines, containerization, and cloud infrastructure
- Contribute to observability practices — logging, metrics, alerting, and distributed tracing
- Drive engineering best practices across the team — testing strategy, API design, and code quality
Technical Skills Required
Backend Development
- Proficiency — Java 17
Strong experience with modern spring boot
- RESTful API design — versioning, contract-first approach, backward compatibility
- Asynchronous messaging and event-driven architecture (Kafka, RabbitMQ, SQS, or equivalent)
- Authentication and authorization — OAuth2, OpenID Connect, JWT, RBAC/ABAC patterns
- Caching strategies — Redis, Memcached, HTTP caching, cache invalidation patterns

Frontend Development
- Proficiency in React with TypeScript
- Strong understanding of browser fundamentals — DOM, event loop, rendering pipeline, Web APIs
- State management patterns — Redux, Context API, or equivalent
- Component-driven development and design system integration
- Performance optimization — lazy loading, code splitting, bundle analysis, Core Web Vitals
- Accessibility (WCAG) and responsive design principles
Microservices & Distributed Systems
- Designing services around bounded context and single responsibility
- Synchronous (REST/gRPC) and asynchronous (event-driven) inter-service communication

- Service discovery, API gateway patterns, and BFF (Backend for Frontend)

- Distributed transaction handling and eventual consistency

- Resilience patterns — circuit breaker, retry, bulkhead, timeout (Resilience4j, Hystrix, or equivalent)

- API versioning and backward-compatible contract evolution

Active-Active & High Availability Architecture

- Multi-region / multi-zone active-active deployment design

- Stateless service design for horizontal scalability

- Distributed session management and cache replication

- Data consistency strategies across active nodes — conflict resolution, quorum reads/writes

- Load balancing, traffic shaping, and automated failover

- RPO/RTO planning and disaster recovery design

- Understanding of CAP theorem trade-offs in production systems

Observability

- Structured logging with correlation IDs across service boundaries

- Distributed tracing with OpenTelemetry — trace propagation, sampling, span management

- Metrics instrumentation — Micrometer, Prometheus, StatsD, or equivalent

- Dashboarding and alerting with Grafana

- SLO / SLA definition and error budget management

- Health check design, runbook authoring, and on-call readiness

Database & Storage

- Relational databases — PostgreSQL, MySQL, Oracle: schema design, indexing, query optimization

- Database migration tooling — Liquibase, Flyway

- ORM frameworks and understanding of their performance implications

- Read/write splitting, connection pooling, and sharding concepts

Cloud & Infrastructure

- Hands-on experience with GCP — compute, storage, networking, managed services

- Container orchestration — Kubernetes: deployments, services, config management, resource tuning

- Docker — multi-stage builds, image optimization, registry management

- Infrastructure-as-code — Terraform

- CI/CD pipeline design — GitHub Actions, Jenkins, Cloud Build, or equivalent

Security

- Secure coding practices and OWASP Top 10 awareness

- TLS/mTLS, certificate management, and secret rotation

- Role-based and attribute-based access control implementation

- Static analysis, dependency scanning, and vulnerability management in CI pipelines

- Data encryption at rest and in transit

Testing

- Unit, integration, and end-to-end testing strategy

- Test-driven development (TDD) and behaviour-driven development (BDD)

- Contract testing (Pact or equivalent) for microservice boundaries

- Performance and load testing — JMeter, Gatling, k6, or equivalent