Senior Application Security Engineer (Java), VP

Build and secure authentication platforms that support critical financial services. Citi is seeking a Senior Application Security Engineer (Java) to take ownership of the end-to-end engineering lifecycle for authentication and information security capabilities. This onsite role in Irving, TX blends hands-on Java development with security release certification, automation, and platform modernization toward containerized cloud environments.

You will help maintain and evolve Java-based applications and microservices that power authentication flows and security controls. The work includes validating MFA and RADIUS integrations across enterprise applications, staging and testing security patches, and ensuring SafeWord authentication product releases are certified before production rollout.

What you’ll do

• Maintain, enhance, and debug Java applications and microservices that support authentication and security controls.
• Assess new software versions, third-party libraries, and security updates for compatibility, performance, and risk impact.
• Implement and configure authentication frameworks and protocols including 2FA/MFA, OTP, Challenge/Response, and RADIUS.
• Certify SafeWord authentication product versions prior to production rollout.
• Stage and validate security patches across authentication infrastructure.
• Test MFA and RADIUS integrations to confirm functionality and compatibility across enterprise applications.
• Build and maintain automation scripts using Shell (Bash) to streamline operational tasks and deployments.
• Write and optimize database scripts and procedures using SQL and PL-SQL.
• Partner with operational teams to test, validate, and certify new software releases before deployment.
• Support migration of authentication services from virtual machines toward containerized cloud platforms on ECS OpenShift.
• Support integration of modern multi-factor authentication mechanisms across enterprise applications as part of legacy upgrade initiatives.
• Develop and maintain Standard Operating Procedures (SOPs) for authentication platform operations.

What we’re looking for

• 4+ years of progressive experience in software engineering, application security, and/or infrastructure engineering with a strong focus on authentication systems.
• Strong hands-on experience in Java programming, debugging, and maintaining enterprise Java applications.
• Solid understanding of authentication mechanisms: 2FA/MFA, OTP, and Challenge/Response architectures.
• Practical knowledge of network authentication protocols including RADIUS, LDAP/Active Directory, Kerberos, SAML, and PAM.
• Advanced proficiency in Linux/Unix including system administration, process management, file permissions, and performance tuning.
• Strong scripting skills in Bash and KornShell for task automation and orchestration.
• Proficiency with SQL and PL-SQL.
• Strong fundamentals in TCP/IP, DNS, SSL/TLS certificates, load balancing, and firewall rule configurations.
• Hands-on experience with Splunk (search syntax, alerts, dashboards) and AppDynamics (APM and transaction tracing).
• Working knowledge of cloud concepts including AWS, GCP, or enterprise private clouds.
• Proven ability to collaborate cross-functionally with operations, security operations, and engineering teams.
• Clear written and verbal communication skills for technical documentation and incident retrospectives.
• Strong attention to security best practices, access governance, and audit readiness.
• Containerization and orchestration experience (preferred): Docker, OpenShift, or Kubernetes.
• Experience in financial services or other highly regulated environments (preferred).

Skills and tools

Java, Shell (Bash), SQL, PL-SQL, 2FA/MFA, OTP, Challenge/Response, RADIUS, SafeWord, Linux/Unix, KornShell, TCP/IP, DNS, SSL/TLS certificates, load balancing, firewall rule configurations, Splunk, AppDynamics, AWS, GCP, Docker, OpenShift, Kubernetes, ECS OpenShift, ECS, LDAP/Active Directory, Kerberos, SAML, PAM, containerization, APM, transaction tracing.

Benefits

• Medical, dental & vision coverage
• 401(k)
• Life, accident, and disability insurance
• Wellness programs
• Paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Education and certifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related technical field.
• Industry certifications in information security or networking are preferred, such as CompTIA Security+, Network+, CEH, or CCNA.

Employment type: Full time. Salary range: USD 125,760 - 188,640 per year. Primary location: Irving, Texas, United States. Anticipated posting close date: Oct 28, 2026.