Senior Full-Stack Java Engineer

Role Title: Senior Full-Stack Java Engineer

Location: London or Belfast - Hybrid Working Model

Rate: Competitive Inside IR35 via Rockford PayrollDuration: 6 months initially

Overview

Deloitte is seeking six senior full-stack software engineers with strong experience across Java back-end development and JavaScript front-end development to support a confidential engagement within a highly regulated enterprise environment. The role will focus on designing, building, and securing enterprise-grade applications and platforms, with a strong emphasis on DevSecOps, secure software supply chain practices, and embedding Secure Development Lifecycle (SDL) principles across the SDLC.

The successful consultants will contribute to the delivery of scalable, cloud-native solutions, support technical strategy and code quality, and help drive secure engineering practices across development and deployment pipelines.

Key Responsibilities

• Software Engineering

o Design, develop, and maintain enterprise-grade applications using Java and JavaScript

o Build scalable, secure solutions aligned to cloud-native and modern engineering principles

o Lead and participate in code reviews, technical design discussions, and architecture decisions

o Evaluate, adopt, and integrate open-source technologies where appropriate

• DevSecOps and CI/CD

o Design, enhance, and maintain CI/CD pipelines with integrated security controls

o Implement automated security testing such as code scanning and dependency analysis

o Develop automation to support continuous integration, testing, and secure deployment practices

o Promote and apply Infrastructure-as-Code best practices

• Secure Development Lifecycle

o Champion SDL practices across the software delivery lifecycle

o Support threat modelling, security design reviews, and remediation of identified vulnerabilities

o Help embed secure coding standards and supply chain security controls into engineering workflows

Required Skills and Experience

• Programming: Strong hands-on experience with Java and JavaScript
• Architecture: Solid understanding of distributed systems, microservices, APIs, and software design patterns
• CI/CD: Proven experience implementing and managing CI/CD pipelines using tools such as GitHub Actions, GitLab, or Jenkins

Security:

• Strong knowledge of SDL and secure coding practices
• Understanding of software supply chain security, including SBOMs, dependency management, and vulnerability management
• Experience with Software Composition Analysis (SCA) tools and DevSecOps practices is preferred
• Knowledge of Zero Trust architecture and policy-as-code is preferred
• Technologies:
• Containerisation experience with Docker and Kubernetes
• Exposure to cloud platforms such as AWS, Azure, or Google Cloud

Education

A bachelor’s degree in computer science, Software Engineering, or equivalent practical experience in a related technical field is required.