Principal Software Engineer — Java 

Lead architecture, design, and hands-on delivery for a security-critical, multi-tenant fintech platform that issues and manages virtual payment/transit cards across mobile wallets (Apple Wallet, Google Wallet) and EMV/contactless systems — including card tokenization and HSM-backed cryptography. You'll own technical direction across the full lifecycle and raise the engineering bar for payment-grade systems. 

Essential Duties and Responsibilities 

• Own architecture and design for scalability, security, and performance across a schema-per-tenant multi-tenant platform. 

• Provide hands-on technical leadership end to end, in a domain where financial and cryptographic correctness is paramount. 

• Build and evolve core subsystems using Java 17/21, Java EE, Spring / Spring Boot: virtual card lifecycle, payment tokenization (e.g., Mastercard MDES), key management, and wallet provisioning (APNs, Google Wallet). 

• Ensure reliable external integrations — card networks, key-management/HSM services, device notification, and downstream REST/SOAP endpoints — with retries, timeouts, and idempotency. 

• Design messaging/integration with Kafka and Apache Camel; caching with Redis. 

• Own data design and performance across PostgreSQL and Oracle (Liquibase migrations, Hibernate/JPA tuning). 

• Produce design docs, architecture diagrams, and threat models; mentor engineers on coding and secure-coding standards. 

• Drive CI/CD with Jenkins (pipeline-as-code), Gradle, and Docker. 

Required Skills & Qualifications 

• 10+ years in software development with strong Java; 3+ years in technical leadership/architecture. 

• Bachelor's in Computer Science, Engineering, or related field. 

• Deep hands-on Java EE, Spring Boot, and Spring on long-lived, service-oriented backends. 

• Solid security & cryptography: TLS/PKI, key management, HSMs, encryption/signing, secure handling of sensitive data. 

• PostgreSQL and Oracle (SQL Server a plus) with Hibernate/JPA; multi-tenant data experience strongly preferred. 

• REST and SOAP integration design with resilient outbound-call patterns. 

• Containerization (Docker, Kubernetes) and service-oriented/microservices architecture. 

• Strong grasp of concurrency, transactions, and distributed-system failure modes. 

• Excellent problem-solving, communication, and leadership. 

Preferred Qualifications: 

• Fintech/payments: EMV, contactless, card tokenization (MDES or equivalent), PCI-aware development. 

• Mobile wallet provisioning: Apple Wallet (APNs), Google Wallet, or similar device-tokenization flows. 

• Production Kafka, Camel, Redis; Gradle builds; observability with Micrometer/Prometheus and Log4j2. 

• Front-end exposure (Angular, Node.js); IaC (Terraform, Ansible) / ARM / CloudFormation.