Senior Full-stack Software Engineer / Java Engineer (Market Risk)

Role: Senior Full-stack Software Engineer / Java Engineer (Market Risk) Location: London or Belfast - Hybrid Working Model Start Date: ASAP End Date: 6 Months Daily Rate: £475 Per Day Inside IR35 Payroll provider – Rockford Payroll Info for Contingent Workers – Rockford Pay Assignment Overview Deloitte sets the requirements for the assignment. Rockford Resourcing acts as the agency on behalf of Deloitte and is responsible for sourcing candidates to fulfil the assignment. Successful candidates will be employed by Rockford Payroll. Rockford Payroll is responsible for the Associate’s employment, pay and applicable employment-related processes. Deloitte is seeking a senior full-stack software engineer / Java Engineer with strong experience across Java back-end development and JavaScript front-end development to support a confidential engagement within a highly regulated enterprise environment. The role will focus on designing, building, and securing enterprise-grade applications and platforms, with a strong emphasis on DevSecOps, secure software supply chain practices, and embedding Secure Development Lifecycle (SDL) principles across the SDLC. The successful consultants will contribute to the delivery of scalable, cloud-native solutions, support technical strategy and code quality, and help drive secure engineering practices across development and deployment pipelines. Key Responsibilities Design, develop, and maintain enterprise-grade applications using Java and JavaScript Build scalable, secure solutions aligned to cloud-native and modern engineering principles Lead and participate in code reviews, technical design discussions, and architecture decisions Evaluate, adopt, and integrate open-source technologies where appropriate Design, enhance, and maintain CI/CD pipelines with integrated security controls Implement automated security testing such as code scanning and dependency analysis Develop automation to support continuous integration, testing, and secure deployment practices Promote and apply Infrastructure-as-Code best practices Champion SDL practices across the software delivery lifecycle Support threat modelling, security design reviews, and remediation of identified vulnerabilities Help embed secure coding standards and supply chain security controls into engineering workflows Experience & Skills Requirements Java Spark experience Market Risk or investment banking experience Strong hands-on experience with Java and JavaScript Architecture: Solid understanding of distributed systems, microservices, APIs, and software design patterns CI/CD: Proven experience implementing and managing CI/CD pipelines using tools such as GitHub Actions, GitLab, or Jenkins Strong knowledge of SDL and secure coding practices Understanding of software supply chain security, including SBOMs, dependency management, and vulnerability management Experience with Software Composition Analysis (SCA) tools and DevSecOps practices is preferred Knowledge of Zero Trust architecture and policy-as-code is preferred Containerisation experience with Docker and Kubernetes Exposure to cloud platforms such as AWS, Azure, or Google Cloud