Senior Java Developer

Position Description We are Canada's largest independent information technology services firm, and at 50 years, we're still growing! Join Canada's largest IT Company as a Senior Java Developer, in our Financial Services Sector in Toronto. This is a hybrid Senior Java Developer role requiring the successful candidate to work from our downtown Toronto office and/or the client office at a minimum of 4 days per week. The work arrangement is subject to change based on business requirements. We are seeking a hands-on senior technical resource who can contribute independently within a few weeks of receiving the required access and knowledge transfer. The successful candidate will take ownership of assigned work, proactively resolve technical and security-related issues, and deliver solutions with minimal supervision. Your future duties and responsibilities Design, develop, enhance, and maintain enterprise applications using Java, Spring Boot, and related technologies. Investigate, analyze, prioritize, and remediate application and infrastructure security vulnerabilities across cloud-based environments. Troubleshoot and resolve security findings affecting application code, RESTful APIs, containers, microservices, and cloud services. Apply secure coding practices and address common security vulnerabilities, including OWASP Top 10, CVEs, dependency vulnerabilities, IAM, secrets management, encryption, and data protection requirements. Use vulnerability scanning and code analysis tools such as Snyk, Checkmarx, Veracode, SonarQube, Black Duck, or similar platforms to identify and remediate security findings. Contribute to CI/CD pipelines and DevSecOps processes by integrating appropriate security controls and remediation practices into the software delivery lifecycle. Conduct code reviews and peer reviews to identify security vulnerabilities, maintain coding standards, and support compliance with organizational requirements. Perform root cause analysis for security and performance issues and implement sustainable long-term solutions. Provide technical direction and coordinate with offshore team members to support delivery, resolve technical issues, and ensure commitments are met on time. Collaborate with security teams, architects, business stakeholders, and development teams to prioritize vulnerabilities, develop remediation plans, and communicate delivery status. Required Qualifications To Be Successful In This Role 5+ years of experience identifying, analyzing, and remediating application and infrastructure security vulnerabilities in cloud-based environments. Strong hands-on experience with Java, Spring Boot, and related technologies in enterprise environments. Strong understanding of secure coding practices and common security vulnerabilities, including OWASP Top 10, CVEs, and dependency management. Hands-on experience with vulnerability scanning and remediation tools such as Snyk, Checkmarx, Veracode, SonarQube, Black Duck, or similar platforms. Proficiency with cloud platforms such as AWS, Azure, or GCP, including implementation of security best practices and controls. Strong knowledge of RESTful APIs, microservices architecture, and enterprise application integration patterns. Experience with CI/CD pipelines and integrating security controls into DevSecOps processes. Familiarity with containerization technologies such as Docker and orchestration platforms such as Kubernetes or OpenShift. Strong understanding of IAM, secrets management, encryption, and data protection best practices. Experience working in Agile/Scrum environments and managing multiple priorities in a fast-paced delivery setting. Strong communication, collaboration, and technical leadership skills, including the ability to coordinate with offshore team members and provide technical direction. Strong documentation skills, including the ability to prepare technical designs, remediation plans, and stakeholder status reports. Ability to collaborate effectively with security teams, architects, business stakeholders, and development teams to prioritize and remediate vulnerabilities. Nice to have - Prior experience managing or mentoring offshore teams. Experience with enterprise vulnerability remediation programs and security compliance initiatives. Financial services or other highly regulated industry experience. Relevant certifications such as AWS Certified Developer, Azure Developer Associate, Certified Secure Software Lifecycle Professional (CSSLP), or similar. Prior experience supporting large-scale, mission-critical applications with stringent security and availability requirements.CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $80,000–$130,000. This role is an existing vacancy. Together, as owners, let’s turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction. Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter. That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals. To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries. Come join our team—one of the largest IT and business consulting services firms in the world.