Java Developer with Identity & Security… at Deutsche… · Budapest

Company Description

As Hungary’s most attractive employer in 2025 (according to Randstad’s representative survey), Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group. The company provides a wide portfolio of IT and telecommunications services with more than 5300 employees. We have hundreds of large customers, corporations in Germany and in other European countries. DT-ITS recieved the Best in Educational Cooperation award from HIPA in 2019, acknowledged as the the Most Ethical Multinational Company in 2019. The company continuously develops its four sites in Budapest, Debrecen, Pécs and Szeged and is looking for skilled IT professionals to join its team.

Job Description

About the Position

We are looking for a highly skilled Java Developer with a strong security mindset to join a team building Germany’s next-generation Identity Provider platform for the national healthcare Telematics Infrastructure (TI).

This platform enables millions of healthcare users to securely access digital health services and operates in one of the most security-sensitive and compliance-driven environments in Europe.

As a Senior Java Developer, you will be responsible for designing and building highly secure backend services, authentication and authorization components, and security-critical platform capabilities. You will play a key role in ensuring that security is embedded into every stage of the software development lifecycle, from architecture and implementation to deployment and operations.

This role is ideal for an experienced Java engineer who enjoys solving complex security challenges and building resilient, enterprise-grade software.

Key Responsibilities

• Design, develop, and operate security-critical backend services using Java and Spring Boot.
• Build and maintain authentication and authorization services based on OAuth 2.0, OpenID Connect, and modern identity standards.
• Apply secure software engineering principles throughout the development lifecycle.
• Identify, assess, and mitigate security risks during system design and implementation.
• Drive security-by-design practices across the platform.
• Develop secure APIs, token services, and identity-related microservices.
• Implement secure communication mechanisms including mTLS and certificate-based authentication.
• Contribute to cryptographic solutions including key management, encryption, digital signatures, and secure credential handling.
• Perform security-focused code reviews and proactively detect vulnerabilities.
• Collaborate with architects, security engineers, DevOps teams, and QA specialists to ensure secure and compliant solutions.
• Support threat modeling, security assessments, penetration testing remediation, and audit activities.
• Translate regulatory, compliance, and security requirements into robust technical implementations.
• Improve platform resilience, observability, and incident response capabilities.

Qualifications

Java SW Engineering Background

• 5+ years of proven software development experience.
• Strong expertise in Java and Spring Boot ecosystem.
• Extensive experience designing and developing enterprise-grade backend applications.
• Deep understanding of distributed systems, REST APIs, microservices, and event-driven architectures.
• Strong database experience, preferably PostgreSQL.

Security Expertise

• Strong security-first mindset and passion for secure software development.
• Solid understanding of application security principles including:
  • OWASP Top 10
  • Secure Coding Practices
  • Authentication & Authorization
  • Threat Modeling
  • Secrets Management
  • Data Protection
  • Security Testing
• Hands-on experience with:
  • Spring Security
  • OAuth 2.0
  • OpenID Connect
  • JWT
  • mTLS
• Experience implementing secure authentication and authorization mechanisms.
• Good understanding of cryptography fundamentals, certificate management, PKI, and key lifecycle management.

Engineering Practices

• Experience with:
  • Git
  • CI/CD pipelines
  • Automated testing
  • DevSecOps practices
• Strong understanding of cloud-native application development.

Additional Information

* Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.