Senior Java Software Engineer (Security)

Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues.
We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential.

We’re looking for a talented Senior Software Engineer with solid experience and knowledge in application security to join our growing team in Zurich, Switzerland. In this role, you’ll work alongside experienced engineers and product specialists in a collaborative, agile environment where engineering quality, reliability, and maintainability are key. 

The ideal candidate combines solid software engineering experience with a good understanding of application and platform security. We are not necessarily looking for a specialist in a particular security technology. More important is someone who understands secure software design, security principles, vulnerabilities, and the challenges of building and maintaining security-sensitive enterprise applications. 

You will primarily focus on designing, developing and maintaining robust Java-based components, libraries and services used across Avaloq applications. The products operate within the application-security domain, giving you the opportunity to work on solutions and concepts related to authentication and authorization, JWT, Identity and Access Management, secure service-to-service communication and standards-based security integrations. 

Your key tasks

• Design, develop and maintain scalable, reliable and secure Java-based components, libraries, APIs and services 
• Write clean, testable and maintainable code that follows established engineering practices and architectural standards 
• Analyse existing and legacy solutions and progressively improve their architecture, quality and maintainability 
• Contribute to products and projects involving authentication, authorization, JWT, IAM integrations and service-to-service communication 
• Design and implement new features, including preparing comprehensive solution designs 
• Investigate and resolve complex technical issues across application, integration and security-related areas 
• Work with security concepts such as tokens, claims, certificates, keys and trust relationships 
• Participate in architecture discussions, technical reviews and code reviews 
• Improve automated testing, CI/CD integration, dependency management and software quality controls 
• Maintain clear technical documentation and contribute to knowledge sharing within and across teams 
• Collaborate with engineering, architecture, security and product teams consuming the shared components 

The role’s product area includes Avaloq’s evolution toward standards-based, vendor-independent IAM integrations, JWT compatibility and secure communication between applications and services.

• Minimum 7 years of proven experience in software development or a related engineering role 
• Strong programming skills in Java, with hands-on experience in the Spring ecosystem, ideally including Spring Boot 
• Experience designing and integrating REST APIs, shared libraries or enterprise application components 
• Excellent communication and collaboration skills, with the ability to work effectively across engineering and product teams 
• A good understanding of application-security principles, secure coding and vulnerability remediation 
• Interest or experience in security-related concepts such as authentication, authorization, tokens, certificates and secure communication 
• Strong experience with automated testing, debugging and troubleshooting complex software systems 
• Experience maintaining and modernizing established enterprise applications 
• Good understanding of CI/CD pipelines, build automation, dependency management and version control 
• Strong analytical and problem-solving skills, with a structured approach to complex technical challenges 
• Ability to take ownership of products and technical topics from analysis through implementation and maintenance 

It would be a real bonus if you have 

• Experience working with authentication and authorization solutions 
• Familiarity with JWT, OAuth 2.0, OpenID Connect or comparable security standards 
• Experience with IAM platforms such as Airlock IAM, Keycloak, Microsoft Entra ID or comparable solutions 
• Understanding of service-to-service or machine-to-machine authentication 
• Knowledge of TLS, certificates, keys and PKI concepts 
• Experience with Gradle, software-composition analysis or security-scanning tools 
• Experience with Docker, Kubernetes or OpenShift 
• Experience maintaining shared libraries or platform components used by multiple development teams 
• Experience in financial services or another security-sensitive enterprise environment 
• Track record of successfully delivering complex technical projects

We realize that managing work-life balance is a challenge we all face in our daily lives, and in order to support this, we are pleased to offer hybrid and flexible working for most of our Avaloqers. This enables us to maintain work-life balance while continuing our fantastic Avaloq culture in our global offices. 

At Avaloq, we are proud to embrace diversity and understand that the success of our business is built on the power of different opinions. We are wholeheartedly committed to fostering an equal-opportunity environment and an inclusive culture where you can be your true, authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique. We have done our best to write this advertisement in an inclusive and neutral way. 

Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.