Overview
Deloitte is seeking six senior full-stack software engineers with strong experience across Java back-end development and JavaScript front-end development to support a confidential engagement within a highly regulated enterprise environment.
The role will focus on designing, building, and securing enterprise-grade applications and platforms, with a strong emphasis on DevSecOps, secure software supply chain practices, and embedding Secure Development Lifecycle (SDL) principles across the SDLC.
The successful consultants will contribute to the delivery of scalable, cloud-native solutions, support technical strategy and code quality, and help drive secure engineering practices across development and deployment pipelines.
Key Responsibilities
- Design, develop, and maintain enterprise-grade applications using Java and JavaScript
- Build scalable, secure solutions aligned to cloud-native and modern engineering principles
- Lead and participate in code reviews, technical design discussions, and architecture decisions
- Evaluate, adopt, and integrate open-source technologies where appropriate
- DevSecOps and CI/CD
- Design, enhance, and maintain CI/CD pipelines with integrated security controls
- Implement automated security testing such as code scanning and dependency analysis
- Develop automation to support continuous integration, testing, and secure deployment practices
- Promote and apply Infrastructure-as-Code best practices
- Secure Development Lifecycle
- Champion SDL practices across the software delivery lifecycle
- Support threat modelling, security design reviews, and remediation of identified vulnerabilities
- Help embed secure coding standards and supply chain security controls into engineering workflows
Required Skills and Experience
- Programming: Strong hands-on experience with Java and JavaScript
- Architecture: Solid understanding of distributed systems, microservices, APIs, and software design patterns
- CI/CD: Proven experience implementing and managing CI/CD pipelines using tools such as GitHub Actions, GitLab, or Jenkins
- Security: Strong knowledge of SDL and secure coding practices
- Understanding of software supply chain security, including SBOMs, dependency management, and vulnerability management
- Experience with Software Composition Analysis (SCA) tools and DevSecOps practices is preferred
- Knowledge of Zero Trust architecture and policy-as-code is preferred
- Technologies: Containerisation experience with Docker and Kubernetes
- Exposure to cloud platforms such as AWS, Azure, or Google Cloud
Education
- A bachelor’s degree in computer science, Software Engineering, or equivalent practical experience in a related technical field is required.