Senior Java Developer (Cloud)

Category: Software Development/ Engineering

Main location: Canada, Ontario, Toronto

Position ID:J0726-2284

Employment Type: Full Time

Position Description:

We are seeking a Senior Java Developer with strong cloud and application security expertise to join a high-performing delivery team supporting enterprise applications in a highly regulated environment. This hybrid role requires a hands-on technical professional who can quickly become productive, take ownership of complex initiatives, and work independently with minimal supervision after onboarding.
The successful candidate will bring deep expertise in Java, Spring Boot, cloud technologies, secure coding practices and common security vulnerabilities, including OWASP Top 10, CVEs, and dependency management.

Your future duties and responsibilities:
• Design, develop, and maintain enterprise Java applications using Java, Spring Boot, and modern development frameworks.
• Identify, analyze, prioritize, and remediate application and infrastructure security vulnerabilities across cloud environments.
• Review application code to identify security risks and ensure adherence to secure coding standards and organizational best practices.
• Integrate security controls into CI/CD pipelines and support DevSecOps initiatives.
• Troubleshoot and resolve security findings related to application code, APIs, containers, and cloud services.
• Collaborate with architects, security teams, developers, and business stakeholders to implement secure, scalable solutions.
• Perform root cause analysis for security and performance issues and implement sustainable long-term solutions.
• Provide technical leadership, mentor offshore development teams, and coordinate project deliverables.
• Produce technical documentation including solution designs, remediation plans, and status reports.
• Participate in Agile ceremonies while managing multiple priorities in a fast-paced delivery environment.

Required qualifications to be successful in this role:
• This role is hybrid and requires you to be at our downtown Toronto office and/or client office at a minimum of four (4) days per week. This requirement is subject to change at any time.
• 5+ years of experience identifying, analyzing, and remediating application and infrastructure security vulnerabilities within cloud-based environments.
• Recent hands-on enterprise development experience using Java, Spring Boot, and related technologies.
• Strong understanding of secure coding principles, OWASP Top 10, Common Vulnerabilities and Exposures (CVEs), software dependency management, and application security best practices.
• Hands-on experience using vulnerability scanning and remediation tools such as Snyk, Checkmarx, Veracode, SonarQube, Black Duck, or similar platforms.
• Experience with cloud platforms including AWS, Azure, or Google Cloud Platform and implementation of cloud security best practices.
• Strong experience troubleshooting security issues affecting applications, REST APIs, containers, and cloud infrastructure.
• Solid understanding of RESTful APIs, microservices architecture, and enterprise integration patterns.
• Experience implementing security controls within CI/CD pipelines and DevSecOps environments.
• Hands-on experience with Docker and container orchestration platforms such as Kubernetes or OpenShift.
• Strong understanding of Identity and Access Management (IAM), encryption, secrets management, and data protection.
• Experience conducting secure code reviews and peer reviews to ensure compliance with organizational standards.
• Excellent communication and leadership skills with the ability to coordinate and mentor offshore development teams.
• Experience working within Agile/Scrum delivery environments.
• Strong analytical, troubleshooting, and technical documentation skills.
Nice to have-
• Financial services or other highly regulated industry experience.
• Experience supporting enterprise vulnerability remediation programs and security compliance initiatives.
• Experience supporting large-scale, mission-critical applications with stringent security and availability requirements.
• AWS Certified Developer, Microsoft Azure Developer Associate, Certified Secure Software Lifecycle Professional (CSSLP), or equivalent security/cloud certification.
• Previous experience leading or mentoring offshore development teams.

**CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $80,000-$130,000. This role is an existing vacancy.

#LI-BN

Skills:

• Amazon Web Services Cloud
• Checkmarx
• Financial Services
• Java
• RESTful (Rest-APIs)
• SonarQube
• Spring Boot