Principal Software Engineer - Core Platform

Netcracker develops enterprise-grade microservice/kubernetes - based solutions with strict requirements to uptime, throughput and flexibility. Typical solution landscape: Enterprise-grade:
o Contains up to different 500 microservices at a time that communicate with each other via REST and messaging o Several Data Bases types are used at a time - PostgreSQL, Cassandra, Opensearch etc, including ones provided by Public Clouds (AWS RDS, Google CloudSQL etc). Number of data base instances could be up to 100.
o Handles up to 10k transaction per second depending on business function Framework based: o One central framework/SDK that is used for all Company products / solutions o Framework is an internal product that is in continuous development and support
o Framework provides basic building blocks for business logic implementation via microservices - REST, Messaging, Data Layer, Service Mesh Secure:
o Works with private and personal data
o Provides data protection / encryption on all levels - network, storage, API
o Solution is usually integrated with various 3rd party systems via OIDC/SAML/LDAP/x.509 and other protocols
o Authentication, Authorization and Audit function are embedded into framework / SDK We are looking for an expert level Java/GoLang software developer to a Framework/SQK team who will develop security-related system modules by given requirements and high level design starting from low-level design, code implementation, auto tests implementation and further support.

 

Responsibility:-

Develop authorization management framework
Develop authentication modules to integrate with external Identity Provider
Develop extensions for central Keycloak based Identity Provider
Develop SDK/Framework that will enable authentication / authorization / audit in microservices
Develop automated (m)TLS certificates management, distribution and refresh
Develop integrations with secrets (credentials) management systems

Required experience:
Expert knowledge in: Core Java o Spring (SpringBoot, SpringSecurity, SpringData)
o REST frameworks (JAX-RS, RestEasy, Netty etc)
Advanced knowledge of: o Secure application implementation principles o Kubernetes applications implementation
o Microservices-based application implementation principles
o Identity Provider - Keycloak o Authentication/Authorization protocols: OIDC, OAuth , SAML, LDAP o TLS (CA, certificate management and lifecycle)
Basic Knowledge in: o XACML o Antlr o Secrets/password storage systems - Hashicorp Vault, key management systems in public clouds Expected but not mandatory experience- GoLang. If GoLang experience exists, it will be a benefit during hiring. Otherwise, a training course will be provided.