> Markdown version of [/jobs/ext/2116988-java-security-engineer](https://www.wearedevelopers.com/jobs/ext/2116988-java-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Java Security Engineer - **Company:** SAI SYSTEMS - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Spring Security, Application Programming Interfaces (APIs), Public-Key Cryptography, Cloud Computing, Cyber Security, DevOps, Digital Signature, Java Security, Key Management, OAuth, Public Key Infrastructure, X.509, Openid Connect, JSON Web Token, RSA (Cryptosystem), Secure Coding, Secure Hash Algorithm, Software Engineering, SSL Certificate Management, Transport Layer Security, Java Application Server, Software Security, Hashicorp - **Published:** August 19, 2026 - **Apply:** https://www.dice.com/job-detail/f0caf890-b281-4ab4-bab4-49ffff3e30d1 ## About the Role 5-7 years in Java development with strong hands-on experience in application security, cryptography, PKI, and secure software development., The ideal candidate will have hands-on experience implementing cryptographic solutions using AES, RSA, ECC, SSL/TLS, certificate management, OAuth2/JWT, and security frameworks such as Spring Security. Experience with cloud-based key management solutions such as AWS KMS and HashiCorp Vault is highly desirable., * Strong Java programming experience. * JCA / JCE * Java KeyStore (JKS), PKCS#12, truststores and keystores * Java security providers and cryptographic APIs * Secure coding and application security principles Cryptography * Symmetric encryption: AES * Asymmetric cryptography: RSA, ECC * Hashing: SHA-2/SHA-3 and related concepts * Digital signatures and signature verification * Key generation, storage, rotation, and lifecycle management * Encryption at rest and encryption in transit * Strong understanding of cryptographic primitives, algorithms, modes, padding, IVs/nonces, and randomness ## Description We are looking for a Senior Java Security Engineer with strong expertise in Java Cryptography Architecture (JCA), Java Cryptography Extension (JCE), PKI, X.509 certificates, encryption, digital signatures, and secure application development., * Design and develop secure Java applications using industry-standard cryptographic practices. * Implement encryption/decryption, hashing, digital signatures, key generation, and key-management mechanisms. * Work extensively with JCA/JCE and Java security providers. * Implement and manage AES, RSA, ECC and other cryptographic algorithms appropriately. * Design and integrate PKI infrastructure, X.509 certificates, certificate chains, CSRs, keystores, truststores, and certificate lifecycle management. * Implement and troubleshoot SSL/TLS configurations, mutual TLS (mTLS), cipher suites, and certificate validation. * Develop secure authentication and authorization mechanisms using Spring Security, OAuth2, OpenID Connect, and JWT. * Integrate applications with HashiCorp Vault, AWS KMS, HSMs, or other key-management platforms. * Design secure approaches for encryption of data at rest and in transit. * Participate in security architecture and threat-modeling activities. * Conduct secure code reviews and identify cryptographic and application-security vulnerabilities. * Establish and enforce secure coding standards and cryptographic best practices. * Collaborate with application, cloud, DevOps, and security teams to implement enterprise security controls. * Troubleshoot complex certificate, TLS, authentication, encryption, and key-management issues. * Ensure solutions align with organizational security policies and relevant industry standards. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Top 10 Java Libraries](https://www.wearedevelopers.com/magazine/364-top-10-java-libraries) - [93 Java Interview Questions You Should Prepare For](https://www.wearedevelopers.com/magazine/14-93-java-interview-questions-you-should-prepare-for) - [Java Basics](https://www.wearedevelopers.com/magazine/122-java-basics) - [6 Reasons to Use Java For Your Next AI Project](https://www.wearedevelopers.com/magazine/111-6-reasons-to-use-java-for-your-next-ai-project) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)