Full Stack Software Engineer (PKI & Security Applications, Java, Reac)

Role & responsibilities

Job Summary

The Full Stack Software Engineer will develop and maintain secure web-based applications, authentication systems, certificate management solutions, and APIs for communication with USB-based hardware security devices. The role focuses on cybersecurity, PKI infrastructure, digital certificates, and secure communication frameworks.

Key Responsibilities

• Design, develop, test, and maintain web applications interacting with USB-based hardware devices.

• Develop backend services and APIs for client-server communication.

• Implement authentication and authorization mechanisms using:

• OAuth

• WebAuthn

• CTAP

• Develop certificate-based authentication systems.

• Build and maintain Certificate Authority (CA) management applications.

• Integrate Hardware Security Modules (HSMs) with PKI solutions.

• Develop administrator consoles for device enrollment and configuration.

• Implement mutual authentication protocols between:

• Client and server

• Admin console and hardware devices

• Perform application testing, troubleshooting, and technical documentation.

• Work in secure/offline environments without internet connectivity when required.

Preferred candidate profile

Frontend

• HTML5
• CSS3
• JavaScript
• React JS

Backend

• Java
• Spring Boot
• REST API Development

Security & Cryptography

• PKI Infrastructure
• Digital Certificates
• Certificate Authority (CA)
• Hardware Security Modules (HSM)
• Public-key cryptography
• Mutual TLS (mTLS)

Networking

• TCP/IP
• DNS
• HTTP/HTTPS
• TLS/mTLS

Integration

• USB device communication
• Secure client-server architecture
• Hardware-software integration

Desired Skills

• Cybersecurity application development.
• Identity and Access Management (IAM).
• Secure coding practices.
• API security.
• Technical documentation.
• Problem-solving and analytical thinking.
• Strong communication and teamwork abilities.

Key Deliverables

• Secure web applications.
• Device communication APIs.
• Certificate management systems.
• Authentication and authorization modules.
• Admin management consoles.
• Test reports and deployment documentation.