Senior Application Security Engineer (Java), VP

Citi is seeking a Senior Application Security Engineer (Java) to own end-to-end engineering for authentication and information security platforms.

Responsibilities

• Maintain, enhance, and debug Java applications and microservices for authentication flows and security controls
• Assess software versions, third-party libraries, and security updates for compatibility, performance, and risk impact
• Implement and configure authentication frameworks and protocols, including 2FA/MFA, OTP, Challenge/Response, and RADIUS
• Certify SafeWord authentication product versions before production rollout
• Stage and validate security patches across authentication infrastructure
• Test MFA and RADIUS integrations to confirm functionality and compatibility across enterprise applications
• Build and maintain automation scripts using Shell (Bash) to streamline operational tasks and deployments
• Write and optimize SQL and PL-SQL database scripts and procedures
• Partner with operational teams to test, validate, and certify software releases prior to deployment
• Support migration of authentication services from virtual machines toward containerized platforms on cloud ECS OpenShift
• Support integration of modern multi-factor authentication mechanisms across enterprise applications as part of legacy upgrade initiatives
• Develop and maintain Standard Operating Procedures (SOPs) for authentication platform operations

Requirements

• 4+ years of progressive experience in software engineering, application security, and/or infrastructure engineering with a strong focus on authentication systems
• Hands-on experience in Java programming, debugging, and maintaining enterprise Java applications
• Strong understanding of authentication mechanisms: 2FA/MFA, OTP, and Challenge/Response architectures
• Practical knowledge of network authentication protocols including RADIUS, LDAP/Active Directory, Kerberos, SAML, and PAM
• Advanced proficiency in Linux/Unix systems administration, including process management, file permissions, and performance tuning
• Strong Shell scripting skills in Bash and KornShell
• Proficiency writing SQL and PL-SQL queries and scripts
• Strong TCP/IP fundamentals plus DNS, SSL/TLS certificates, load balancing, and firewall rule configuration
• Hands-on experience with Splunk (search syntax, alerts, dashboards)
• Hands-on experience with AppDynamics (APM and transaction tracing)
• Working knowledge of cloud concepts: AWS, GCP, or enterprise private clouds
• Ability to collaborate across operations, security operations, and engineering teams
• Clear written and verbal communication skills for technical documentation and incident retrospectives
• Strong attention to security best practices, access governance, and audit readiness
• Familiarity with containerization/orchestration such as Docker, OpenShift, or Kubernetes is preferred
• Experience in Financial Services, Banking, or other highly regulated enterprise environments is preferred

Technologies

• Java
• Shell (Bash), KornShell
• SQL, PL-SQL
• 2FA/MFA, OTP, Challenge/Response, RADIUS
• SafeWord
• Linux/Unix
• TCP/IP, DNS, SSL/TLS certificates
• Load balancing, firewall rule configurations
• Splunk
• AppDynamics (APM, transaction tracing)
• AWS, GCP
• Docker, OpenShift, Kubernetes
• ECS OpenShift, ECS
• LDAP/Active Directory, Kerberos, SAML, PAM
• Containerization

Benefits

• Medical, dental & vision coverage
• 401(k)
• Life, accident, and disability insurance
• Wellness programs
• Paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Education

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related technical field
• Industry certifications in Information Security or Networking preferred, such as CompTIA Security+, Network+, CEH, or CCNA

Location: Irving, TX (onsite)

Employment type: Full time

Salary range: USD 125,760 - 188,640 per year

Primary location: Irving Texas United States

Anticipated posting close date: Oct 28, 2026

Time type: Full time