Role Overview:

The C11 Platform Security Engineer contributes to the end-to-end design, development, and enhancement of high-throughput Java microservices and reverse-proxy components within the Security Gatewayecosystem. Working closely with C12 Lead Engineers and cross-functional teams, the role focuses on building secure, scalable, and resilient security filtering and API routing components.

Key Responsibilities:

1. Security Gateway & Java Microservice Development

- Java Application Engineering: Develop, test, and maintain high-performance, resilient microservices using Java (Java 11/17+), Spring Boot, Spring Security, and RESTful APIs.
- Security Gateway Implementations: Support reverse-proxy and gateway integrations (, Ping Access, Open Shift/ECS container services) to secure Green Network (GRN) enterprise application traffic.
- Authentication & Federation Support: Assist in implementing modern authentication protocols (SecureSSO, OIDC, OAuth , COIN tokens) and participate in migrating legacy security protocols (, Site Minder to OIDC/COIN).
- API Routing & Fault Tolerance: Configure and maintain routing downstream from API Gateways (Apigee / APIM), integrating service discovery (Eureka/CCP) and implementing resilience patterns (resilience4j/circuit breakers, retries, and rate limiters).

2. Software Lifecycle, Quality & Code Execution

- Full Development Lifecycle: Participate actively in all phases of the Agile SDLC (sprint planning, daily standups, backlog refinement, and retrospectives).
- Code Quality & Testing: Write clean, modular, and maintainable Java code adhering to SOLID principles; build comprehensive unit, integration,



and contract tests utilizing JUnit, Mockito, and test containers.
- Root Cause Analysis & Defect Remediation: Investigate, debug, and resolve application bugs, performance bottlenecks, and runtime errors in non-production and production environments.
- CI/CD & Dev Ops Integration: Build and manage automated build/deploy pipelines using Git, Maven/Gradle, and enterprise CI/CD tools (, Tekton/Lightspeed, Bitbucket/Git Hub, Open Shift).

3. Security, Risk & Collaboration

- Secure Coding & Vulnerability Remediation: Ensure all developed code complies with enterprise security benchmarks (Sonar Qube, Snyk, Checkmarx, MCD scans) and remediate identified vulnerabilities promptly.
- Peer Reviews & Collaboration: Actively participate in peer code reviews, contribute to technical documentation, and collaborate effectively with quality assurance, architecture, and platform operations teams.
- Risk & Controls Adherence: Adhere to Citi’s technology risk and governance policies, applying sound judgment to safeguard firm assets and data.

4. Recommended Qualifications & Education (C11 Level)

Recommended Qualifications:

- 5–8 years of hands-on software development experience with enterprise Java applications.
- Strong proficiency in Java (Java 11/17+), Spring Boot,



Spring Security, and microservices architecture.
- Solid understanding of REST APIs, HTTP/HTTPS protocols, mutual TLS (mTLS), and web security standards (OWASP Top 10).
- Working knowledge of authentication/authorization protocols such as OAuth2, OpenID Connect (OIDC), JWT, and SAML.
- Practical experience working with containerized environments (Docker, Kubernetes / Red Hat Open Shift).
- Experience with relational/NoSQL databases, SQL querying, and database connection pooling.
- Hands-on experience with automated testing tools (JUnit, Mockito) and CI/CD tools (Git, Maven/Gradle, Jenkins/Tekton).
- Valuable problem-solving, analytical, and debugging skills with distributed systems.
- Strong verbal and written communication skills with the ability to articulate technical issues clearly in an Agile team setup.

Education:

- Bachelor’s/University degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Digital Software Engineering

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

📌 Platform Security Engineer (India)
🏢 12542 Citicorp Services India Private
📍 India