Senior Java Automation Developer -- Microservices & Security Testing
We are looking for a Senior Java Automation Developer to lead the design and implementation of an automation framework for our cloud-native, microservices-based Trusted Service Manager (TSM) backend. The role focuses on building robust, scalable test automation solutions for Java/Spring Boot 4 microservices, cryptography operations, and API-first services running on Kubernetes.
Key Responsibilities
- Lead the design, development, and maintenance of test automation frameworks for TSM backend microservices (Java, Spring Boot 4, Spring Cloud, MongoDB).
- Implement comprehensive automated test suites (unit, integration, API, end-to-end) for cloud-native services deployed on Docker/Kubernetes.
- Design and execute advanced security testing:
- DAST (Dynamic Application Security Testing)
- Fuzz testing for APIs and cryptographic operations
- Build automation around API-first architectures (REST, OpenAPI), including contract testing and API validation.
- Integrate automated tests into CI/CD pipelines, ensuring high coverage and fast feedback for every deployment.
- Incorporate cryptography-related validation into test suites, including PKI workflows, X.509 certificates, and secure key usage.
- Apply agile methodologies (Scrum), TDD, BDD, and secure coding/testing best practices (SAST, DAST).
- Collaborate closely with backend developers, DevOps engineers, QA, and security teams to ensure robust and secure software delivery.
- Contribute to test observability and reporting, improving traceability, logging, and metrics for test runs.
- Mentor team members on test automation strategies, frameworks, and tools.
Required Skills & Experience
- University degree in Computer Science, Software Engineering, or a related field.
- Strong experience as a Java developer with a focus on test automation.
- Hands-on experience building automation frameworks for:
- Microservices (Java, Spring Boot)
- API-first services (REST, OpenAPI)
- Solid understanding of cloud-native architectures and deployments (Docker, Kubernetes).
- Strong knowledge of:
- Security testing methodologies (DAST, fuzz testing)
- SAST/DAST integration into CI/CD pipelines
- Deep understanding of cryptography, PKI, and X.509 certificates, and how to validate them in automated tests.
- Experience working in agile teams (Scrum), with TDD and BDD.
- Familiarity with large-scale, high-availability distributed systems from a testing and reliability perspective.
- Proficient with Atlassian and DevOps toolchains:
- Jira, Confluence
- Git (GitLab/GitHub)
- SonarQube, Jenkins, Nexus, Maven
- Strong problem-solving skills, capable of analyzing complex systems and designing effective test strategies.
- Excellent communication skills and a collaborative, team-oriented mindset.
- Fluent English (spoken and written).
Nice to Have
- Experience testing SDKs and client applications (mobile or desktop) that consume backend APIs.
- Knowledge of mobile phone development concepts and client--server interaction patterns.
- Experience in financial services, payment systems, or digital currency projects.
What we offer
- CULTURE: Join a professional, dynamic environment where collaboration, teamwork, and innovation are valued.
- PHILOSOPHY: Be part of a team where your ideas and contributions have real impact.
- SCHEDULE: Mon--Thu 8:30--17:30h, Fri 8:30--15:30h (1h flexible start time). Hybrid work options available.
- CONTRACT & BENEFITS: Permanent contract, annual training plan, summer intensive schedule, company parking, flexible compensation (transport, childcare, training, health insurance).
- CANTEEN: Onsite cafeteria with breakfast and lunch at subsidized prices.
- LOCATION: El Prat de Llobregat, Mercabarna exit. Accessible via Bus 88/110 from Barcelona or PR4 from El Prat.
Explore what makes G D unique -- check out this video: Giesecke Devrient -- We make the lives of billions of people more secure.
Privacy Notice
The personal data you provide will be processed to manage your application in accordance with the GDPR and our Privacy Policy, available at Data Privacy | G D.