Senior Full-Stack Java Engineer
Deloitte · London, United Kingdom · hybrid
Role Title: Senior Full-Stack Java Engineer
Location: London or Belfast - Hybrid Working Model
Rate: Competitive Inside IR35 via Rockford PayrollDuration: 6 months initially
Overview
Deloitte is seeking six senior full-stack software engineers with strong experience across Java back-end development and JavaScript front-end development to support a confidential engagement within a highly regulated enterprise environment. The role will focus on designing, building, and securing enterprise-grade applications and platforms, with a strong emphasis on DevSecOps, secure software supply chain practices, and embedding Secure Development Lifecycle (SDL) principles across the SDLC.
The successful consultants will contribute to the delivery of scalable, cloud-native solutions, support technical strategy and code quality, and help drive secure engineering practices across development and deployment pipelines.
Key Responsibilities
• Software Engineering
o Design, develop, and maintain enterprise-grade applications using Java and JavaScript
o Build scalable, secure solutions aligned to cloud-native and modern engineering principles
o Lead and participate in code reviews, technical design discussions, and architecture decisions
o Evaluate, adopt, and integrate open-source technologies where appropriate
• DevSecOps and CI/CD
o Design, enhance, and maintain CI/CD pipelines with integrated security controls
o Implement automated security testing such as code scanning and dependency analysis
o Develop automation to support continuous integration, testing, and secure deployment practices
o Promote and apply Infrastructure-as-Code best practices
• Secure Development Lifecycle
o Champion SDL practices across the software delivery lifecycle
o Support threat modelling, security design reviews, and remediation of identified vulnerabilities
o Help embed secure coding standards and supply chain security controls into engineering workflows
Required Skills and Experience
• Programming: Strong hands-on experience with Java and JavaScript
• Architecture: Solid understanding of distributed systems, microservices, APIs, and software design patterns
• CI/CD: Proven experience implementing and managing CI/CD pipelines using tools such as GitHub Actions, GitLab, or Jenkins
Security:
- Strong knowledge of SDL and secure coding practices
- Understanding of software supply chain security, including SBOMs, dependency management, and vulnerability management
- Experience with Software Composition Analysis (SCA) tools and DevSecOps practices is preferred
- Knowledge of Zero Trust architecture and policy-as-code is preferred
Technologies:
- Containerisation experience with Docker and Kubernetes
- Exposure to cloud platforms such as AWS, Azure, or Google Cloud
Education
A bachelor’s degree in computer science, Software Engineering, or equivalent practical experience in a related technical field is required.