Full-Stack Java Engineer

Role Title: Full-Stack Java Engineer

Location

London or Belfast - Hybrid Working Model

Rate

Competitive Inside IR35 via Rockford Payroll

Duration

6 months initially

Overview

Deloitte is seeking six senior full-stack software engineers with strong experience across Java back-end development and JavaScript front-end development to support a confidential engagement within a highly regulated enterprise environment. The role will focus on designing, building, and securing enterprise-grade applications and platforms, with a strong emphasis on DevSecOps, secure software supply chain practices, and embedding Secure Development Lifecycle (SDL) principles across the SDLC.

The successful consultants will contribute to the delivery of scalable, cloud-native solutions, support technical strategy and code quality, and help drive secure engineering practices across development and deployment pipelines.

Key Responsibilities

• Design, develop, and maintain enterprise-grade applications using Java and JavaScript
• Build scalable, secure solutions aligned to cloud-native and modern engineering principles
• Lead and participate in code reviews, technical design discussions, and architecture decisions
• Evaluate, adopt, and integrate open-source technologies where appropriate

DevSecOps and CI/CD

• Design, enhance, and maintain CI/CD pipelines with integrated security controls
• Implement automated security testing such as code scanning and dependency analysis
• Develop automation to support continuous integration, testing, and secure deployment practices
• Promote and apply Infrastructure-as-Code best practices

Secure Development Lifecycle

• Champion SDL practices across the software delivery lifecycle
• Support threat modelling, security design reviews, and remediation of identified vulnerabilities
• ​Help embed secure coding standards and supply chain security controls into engineering workflows

Required Skills and Experience

• Programming: Strong hands-on experience with Java and JavaScript
• Architecture: Solid understanding of distributed systems, microservices, APIs, and software design patterns
• CI/CD: Proven experience implementing and managing CI/CD pipelines using tools such as GitHub Actions, GitLab, or Jenkins
• Java Spark
• Market Risk experience​

Security

• Strong knowledge of SDL and secure coding practices
• Understanding of software supply chain security, including SBOMs, dependency management, and vulnerability management
• Experience with Software Composition Analysis (SCA) tools and DevSecOps practices is preferred
• Knowledge of Zero Trust architecture and policy-as-code is preferred

Technologies

• Containerisation experience with Docker and Kubernetes
• Exposure to cloud platforms such as AWS, Azure, or Google Cloud

Education

A bachelor’s degree in computer science, Software Engineering, or equivalent practical experience in a related technical field is required.