1 day ago
Pune, IndiaSenior
Responsibilities
- Design and ship Java 21 and Spring Boot backend services using Spring MVC, Jersey/JAX-RS, Spring Cloud Gateway, and WebFlux.
- Extend Keycloak through custom SPIs, authentication flows, themes, and infrastructure-as-code realm configuration.
- Build event-driven, data-backed AWS features using SQS, SNS, S3, Secrets Manager, PostgreSQL, and Liquibase.
- Lead strangler-pattern migration of legacy identity services with zero-downtime cutovers.
- Design API contracts with OpenAPI and springdoc, including generated clients and contract compatibility checks.
- Write unit, integration, architecture, API, and end-to-end tests using the specified testing tools.
- Operate production services with Datadog, Micrometer, OpenTelemetry, structured logging, and on-call participation.
- Maintain GitHub Actions pipelines with SonarQube, JaCoCo, CycloneDX SBOMs, and Gradle dependency locking.
- Review code and participate in architecture decisions.
Requirements
- At least 4 years of professional JVM development experience, including recent Java 17 or Java 21 and Spring Boot experience.
- Strong knowledge of OAuth 2.0, OIDC, JWT, SAML, authorization code with PKCE, token exchange, and refresh token rotation.
- Hands-on relational database experience including schema design, indexing, query tuning, and versioned migrations with Liquibase or Flyway.
- Production AWS experience with messaging, storage, secrets, and IAM.
- Experience with Docker, container-based local development, Docker Compose, and Testcontainers.
- Strong automated testing practices and experience with Git workflows, CI/CD pipelines, and code review.
- Clear written English communication and ability to document technical decisions and trade-offs.
- Preferred: Keycloak or comparable identity provider experience such as Auth0, Gigya, Okta, or ForgeRock.
- Preferred: Gradle Kotlin DSL, React 18, TypeScript, Vite, Node.js, Express, Kubernetes, Helm, Terraform, and observability practices.
- Preferred: Experience in regulated healthcare or life sciences environments and familiarity with GxP, HIPAA, or GDPR.
- Nice to have: Python, Ruff, pytest, Playwright, Cypress, k6, JMeter, OWASP Top 10, SAST, DAST, dependency security, and SBOM practices.
Tech Stack
Apache JMeterAWSCypressDatadogDockerExpressFlywayGitHub ActionsGradleHelmJavaKubernetesNode.jsPostgreSQLpytestPythonReactSonarQubeSpring BootTerraformTypeScript
About Roche
Roche is a Swiss healthcare company that develops and sells prescription pharmaceuticals and in vitro diagnostic systems for hospitals, laboratories, and clinicians. Its business spans two core divisions—Pharmaceuticals and Diagnostics—with strengths in oncology, immunology, neuroscience, infectious diseases, and diabetes care. Founded in 1896 and headquartered in Basel, Switzerland, Roche also advances personalized healthcare by pairing therapies with companion diagnostics.