Security access systems jobs in MarbellaCreate job alerts

🚀 We are still looking for the very Top Talent…and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35,000 employees all over the world and presence in more than 35 countries. We are leaders in digital technology services, and we provide large-scale technological solutions to big companies. 🔎 What we look for? We are looking for a Java Developer to join a highly innovative team working within a microservice-based cloud environment in the utility technology sector. You will play a key role in designing, developing, and supporting secure, scalable, and maintainable Java services, APIs, and integrations that connect critical business systems and internal tools. ⚙ Key Responsibilities: • Design and implement Java services, REST APIs, integration adapters, and extension components using Java and the Spring ecosystem., • Translate business requirements, user stories, and interface specifications into clean, maintainable, and scalable code., • Develop RESTful APIs with proper validation, versioning, pagination, security, and error-handling mechanisms., • Implement reliable event-driven and asynchronous integrations, ensuring resiliency through retry, timeout, correlation, idempotency, and dead-letter patterns., • Build and optimize persistence layers using Hibernate/JPA and SQL best practices., • Integrate microservices and internal tools with CRM, finance, payment, analytics, web, and mobile platforms., • Create and maintain unit, integration, component, and contract tests to ensure high-quality software delivery., • Participate in code reviews, technical design sessions, backlog refinement, and secure development practices., • Troubleshoot production incidents using logs, metrics, traces, and database analysis, providing sustainable root-cause solutions., • Support CI/CD pipelines, automated quality controls, deployment processes, and cloud-native engineering practices., • Contribute to technical documentation, operational procedures, and service supportability improvements., • Ensure solutions meet performance, reliability, scalability, and security standards. 💡 Mandatory Requirements: • Strong professional experience developing enterprise applications with Java., • Hands-on experience with Spring Framework and Spring Boot., • Solid knowledge of Hibernate/JPA, relational databases, and SQL optimization., • Experience designing and consuming REST APIs and working with OpenAPI/Swagger specifications., • Experience with event-driven architectures, asynchronous messaging, or distributed systems., • Strong testing experience using JUnit, Mockito, and integration/contract testing frameworks., • Experience working with Git, Maven/Gradle, CI/CD pipelines, and code review practices., • Understanding of secure coding principles, authentication, authorization, observability, logging, and monitoring., • Strong analytical, problem-solving, and debugging skills., • Excellent communication skills and fluent English. 🎩 Nice to have: • Experience in utility, customer information, billing, payment, or energy-sector platforms., • Knowledge of platforms such as SAP Utilities, Oracle Utilities, Kraken Technologies, or Hansen. Experience with AWS, including: • API Gateway, • Lambda, • Fargate, • EventBridge, • SQS/SNS, • Aurora, • CloudWatch, • IAM, • Secrets Manager, • Experience with containers, infrastructure-as-code, and cloud-native deployment patterns., • Knowledge of distributed tracing, performance testing, and production support for high-volume systems., • Understanding of customer, metering, usage, tariff, billing, payment, and debt-management processes within utilities. 💰 What can we offer? • ✈️ 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!, • ❤️ Numerous benefits (Health Care Plan, Internet Connectivity, Life and Accident Insurances)., • 🍴 Retribución Flexible Program: (Meals, Kindergarten, Transport, Online English Lessons, Health Care Plan…), • 🎓 Free access to several training platforms., • 🚀 Professional stability and career plans., • 🚶 UST also compensates referrals, from which you could benefit when you refer professionals., • 🔗 The option to pick between 12 or 14 payments along the year., • 🏡 Real Work-Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)., • 🎁 UST Club Platform discounts and gym access discounts. 📧 If you would like to know more, do not hesitate to apply and we’ll get in touch to fill you in details. UST is waiting for you! At UST, we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation, or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with a disability certificate.

🚀 UST is looking for the very Top Talent…and we would be delighted if you were to join our family! More in detail, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and a presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies. 🔍 What are we looking for? We are currently looking for a Fullstack Developer to join one of our biggest clients in the banking sector. 👩🏼 💻✅ Key Skills • Java, Spring Boot, Hibernate/JPA, • Angular, HTML, CSS, JavaScript, TypeScript, • Oracle, PostgreSQL, SQL, • REST API design and integration, • Microservices Architecture, • Git, GitHub, Jenkins, CI/CD, • Scrum, Agile methodologies, • Docker, OpenShift, DevOps & Cloud technologies 🤖 AI-Native Engineering • Hands-on experience with AI-powered development tools, • Prompt Engineering, • AI-assisted software development practices, • AI integration within engineering processes and delivery pipelines 🌟 Nice to Have • Kubernetes, • Event-driven architectures & messaging systems, • Automated testing frameworks, • GenAI and AI/ML platform integrations, • Software security & secure coding practices, • AWS, • Monitoring, logging, and observability tools 🌎 Languages: • English C1 💰 What can we offer? ✈️ 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! ❤️ Numerous benefits (Heath Care Plan, Internet Connectivity, Life and Accident Insurances). 🍴 `Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Heath Care Plan…) 🎓 Free access to several training platforms 🚀 Professional stability and career plans 🚶 UST also, compensates referrals from which you could benefit when you refer professionals. 🔗 The option to pick between 12 or 14 payments along the year. 🏡 Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…) 🎁 UST Club Platform discounts and gym Access discounts 📧 If you would like to know more, do not hesitate to apply and we’ll get in touch to fill you in details. UST is waiting for you! In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate.

Senior Agentic Identity & Access Security Engineer Location: Remote from Spain (an indefinite Spanish employment contract) Our client is a leading global investment management company headquartered in London. It manages over $228 billion in assets and serves institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide. The firm specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science, machine learning, and AI are core components of its investment and research processes. As part of our collaboration we will focus on two foundational capabilities required to enable safe and scalable AI adoption across the enterprise: Agentic Security and AI-Ready Data Foundations. Project Overview: We define how autonomous agents authenticate, obtain scoped access, and operate safely across a large, regulated financial estate where the runtime security model genuinely does not exist yet. The value, and the danger, of agentic AI is set by what an agent can reach: an agent that inherits a full user context and long-lived secrets has an effectively unlimited blast radius. Your job is to close that gap. This is a hands-on senior-level role for a security engineer who remains deeply technical and actively ships production code, operating at the intersection of enterprise IAM, platform engineering, and the emerging domain of agentic AI security. You will design and build the IaC-driven, self-service identity patterns, credential flows, and onboarding standards that make the secure way the easy way, across high-velocity teams that have long governed themselves. Requirements: • 6+ years in security architecture and/or platform engineering, with a track record of shipping production code. Principal / Staff-level depth, ideally in a high-velocity or quant / financial-services engineering culture., • Deep, mechanical command of modern identity and authorisation: OIDC / OAuth2 / JWT — token issuance flows, claims design, and delegation / impersonation patterns., • Hands-on HashiCorp Vault experience, including dynamic / short-lived secrets and the realities of migrating off long-lived tokens without breaking a large application estate at once., • Keycloak policy modelling, ideally with the Terraform-driven configuration the firm already uses., • Strong Terraform / IaC fluency — enough to design repeatable, self-service patterns that others adopt, rather than bespoke per-team setups., • Working knowledge of the Active Directory + Entra legacy reality: nested groups, LDAP-backed role mapping, and the distribution-list-as-permission-group failure mode — able to design around the mess pragmatically. Nice to have • Real exposure to agentic / LLM systems and why they change the threat model — an agent actively probes and exploits standing permissions rather than stumbling onto them. That removes the “security through obscurity” cushion humans relied on., • Familiarity with MCP as an integration / onboarding standard, and at least one agent harness (Claude Agent SDK preferred)., • Experience with just-in-time, task-scoped delegation versus standing access, and risk-gated credential issuance (e.g. a short-lived token issued against a CrowdStrike-style risk score)., • Behavioural baselining / anomaly detection for workloads — defining “normal” for a recurring workflow and catching deviation at volume., • SIEM integration and action attribution: distinguishing an agent’s action from the human whose credentials it borrowed., • Financial-services audit literacy, • Consulting or client-facing / pre-sales experience. Responsibilities: • Design and ship IaC-driven, self-service identity patterns that roll out firm-wide without requiring a full Active Directory cleanup first., • Define the currently undefined agentic runtime security model: containerised code execution, permission delegation to agents, and MCP-based tool access., • Lead the transition from long-lived secrets toward ephemeral, time-based, risk-scored credentials, scoped to task duration and issued via JWT / OIDC., • Layer LLM / software guardrails (policy-as-text plus human review) on top of whatever hard guardrails are feasible across the estate., • Establish an opinionated onboarding standard (e.g. mandatory MCP interfaces) and win adoption through better defaults and developer experience, not mandate alone., • Design SIEM integration, behavioural baselining, and anomaly detection for agentic workflows, and centralise siloed audit logs to satisfy both security and regulatory requirements., • Take bounded beachheads (for example, authenticate users and then delegate scoped access to internal systems) from vague to delivered. Why this position: This role sits at the intersection of data engineering, AI, and financial services, solving one of the most important challenges in enterprise AI: enabling agents to securely access and reason over trusted data. You'll have the opportunity to design and build foundational platforms that combine large-scale data systems, governance, and AI technologies in highly regulated environments. It offers significant technical ownership, exposure to cutting-edge AI agent architectures, and the chance to shape how organisations safely unlock value from their data.

Senior Agentic Identity & Access Security Engineer Location: Remote from Spain (an indefinite Spanish employment contract) Our client is a leading global investment management company headquartered in London. It manages over $228 billion in assets and serves institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide. The firm specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science, machine learning, and AI are core components of its investment and research processes. As part of our collaboration we will focus on two foundational capabilities required to enable safe and scalable AI adoption across the enterprise: Agentic Security and AI-Ready Data Foundations. Project Overview: We define how autonomous agents authenticate, obtain scoped access, and operate safely across a large, regulated financial estate where the runtime security model genuinely does not exist yet. The value, and the danger, of agentic AI is set by what an agent can reach: an agent that inherits a full user context and long-lived secrets has an effectively unlimited blast radius. Your job is to close that gap. This is a hands-on senior-level role for a security engineer who remains deeply technical and actively ships production code, operating at the intersection of enterprise IAM, platform engineering, and the emerging domain of agentic AI security. You will design and build the IaC-driven, self-service identity patterns, credential flows, and onboarding standards that make the secure way the easy way, across high-velocity teams that have long governed themselves. Requirements: • 6+ years in security architecture and/or platform engineering, with a track record of shipping production code. Principal / Staff-level depth, ideally in a high-velocity or quant / financial-services engineering culture., • Deep, mechanical command of modern identity and authorisation: OIDC / OAuth2 / JWT — token issuance flows, claims design, and delegation / impersonation patterns., • Hands-on HashiCorp Vault experience, including dynamic / short-lived secrets and the realities of migrating off long-lived tokens without breaking a large application estate at once., • Keycloak policy modelling, ideally with the Terraform-driven configuration the firm already uses., • Strong Terraform / IaC fluency — enough to design repeatable, self-service patterns that others adopt, rather than bespoke per-team setups., • Working knowledge of the Active Directory + Entra legacy reality: nested groups, LDAP-backed role mapping, and the distribution-list-as-permission-group failure mode — able to design around the mess pragmatically. Nice to have • Real exposure to agentic / LLM systems and why they change the threat model — an agent actively probes and exploits standing permissions rather than stumbling onto them. That removes the “security through obscurity” cushion humans relied on., • Familiarity with MCP as an integration / onboarding standard, and at least one agent harness (Claude Agent SDK preferred)., • Experience with just-in-time, task-scoped delegation versus standing access, and risk-gated credential issuance (e.g. a short-lived token issued against a CrowdStrike-style risk score)., • Behavioural baselining / anomaly detection for workloads — defining “normal” for a recurring workflow and catching deviation at volume., • SIEM integration and action attribution: distinguishing an agent’s action from the human whose credentials it borrowed., • Financial-services audit literacy, • Consulting or client-facing / pre-sales experience. Responsibilities: • Design and ship IaC-driven, self-service identity patterns that roll out firm-wide without requiring a full Active Directory cleanup first., • Define the currently undefined agentic runtime security model: containerised code execution, permission delegation to agents, and MCP-based tool access., • Lead the transition from long-lived secrets toward ephemeral, time-based, risk-scored credentials, scoped to task duration and issued via JWT / OIDC., • Layer LLM / software guardrails (policy-as-text plus human review) on top of whatever hard guardrails are feasible across the estate., • Establish an opinionated onboarding standard (e.g. mandatory MCP interfaces) and win adoption through better defaults and developer experience, not mandate alone., • Design SIEM integration, behavioural baselining, and anomaly detection for agentic workflows, and centralise siloed audit logs to satisfy both security and regulatory requirements., • Take bounded beachheads (for example, authenticate users and then delegate scoped access to internal systems) from vague to delivered. Why this position: This role sits at the intersection of data engineering, AI, and financial services, solving one of the most important challenges in enterprise AI: enabling agents to securely access and reason over trusted data. You'll have the opportunity to design and build foundational platforms that combine large-scale data systems, governance, and AI technologies in highly regulated environments. It offers significant technical ownership, exposure to cutting-edge AI agent architectures, and the chance to shape how organisations safely unlock value from their data.

Senior IT Systems Engineer - San Sebastian, Spain (On-site) - SaaS Own and continuously improve the technology ecosystem that powers our employees' daily work. You will design, implement, and support secure, scalable, and reliable IT infrastructure, identity platforms, endpoint management solutions, and SaaS applications. Key Requirements: • 7+ years of experience in IT Engineering, Systems Engineering, Workplace Technology, or similar roles., • Strong hands-on JAMF administration experience in a macOS-heavy environment., • Proven experience managing Identity & Access Management (IAM) platforms, particularly Microsoft Entra ID., • Expertise in endpoint management, including device compliance, software deployment, patch management, and lifecycle management., • Strong knowledge of SSO integrations, SCIM provisioning, identity lifecycle management, and access governance., • Experience implementing and supporting Zero Trust principles, least-privilege access, and secure authentication practices., • Advanced scripting and automation skills, with a track record of building scalable IT automation solutions., • Ability to independently troubleshoot and resolve complex technical issues, performing root cause analysis when needed., • Experience managing and optimizing macOS endpoints through enterprise MDM solutions., • Strong understanding of SaaS administration, collaboration platforms, and enterprise IT infrastructure., • Demonstrated ability to improve IT processes, workflows, documentation, and operational efficiency., • Excellent stakeholder management and communication skills, with the ability to support both technical and non-technical audiences., • Strong customer-service mindset and experience supporting senior stakeholders and business-critical teams., • Fluency in Spanish and English. Preferred Qualifications: • Experience working in a technology company or engineering-led environment., • Experience managing SaaS ecosystems, including SSO, SCIM, MDM, and SaaS access governance., • Familiarity with security and compliance frameworks, audit processes, and risk remediation initiatives., • Knowledge of endpoint security controls and secure-by-design IT operations., • Experience with automation platforms and/or configuration management solutions at scale., • Previous experience mentoring colleagues and serving as a senior technical reference within an IT team., • Relevant certifications in JAMF, Microsoft Entra ID, Identity & Access Management, Endpoint Management, IT Service Management (ITIL), or Security and Compliance frameworks.

Senior ML / Evaluation Engineer Location: Remote from Spain (an indefinite Spanish employment contract) We are looking for a Senior ML / Evaluation Engineer to help define and implement quality standards for enterprise-grade AI agents and LLM-powered applications. In this role, you will design evaluation frameworks, build custom evaluation pipelines, and establish automated quality gates across the AI delivery lifecycle. You will work closely with AI Platform Engineers, ML Engineers, and DevOps teams to ensure reliable, measurable, and production-ready AI systems through scalable evaluation, observability, and governance practices. Project Overview: Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. Requirements: • 5+ years ML engineering or AI platform engineering, • LLM evaluation framework design and implementation, • Custom evaluator implementation for deterministic quality checks, • CI/CD deployment gate design for ML model or agent quality, • AWS AgentCore Evaluation (on-demand mode for CI/CD gates, online mode for production sampling), • LLM-as-judge evaluator design (built-in AgentCore evaluators — helpfulness, correctness), • Custom code-based Lambda evaluators (Python — deterministic checks), • Evaluation levels (TRACE for per-response, TOOL_CALL for per-invocation, SESSION for workflow), • OTel spans from AWS AgentCore Observability as evaluation input, • Enterprise evaluation standard authoring (mandatory dimensions, pass/fail criteria) Nice-to-have • AWS AgentCore Evaluation API hands-on (CreateEvaluation, GetEvaluationResult), • AWS Bedrock Guardrails for PII detection evaluator integration, • CloudWatch metrics output from AgentCore Evaluation for online mode Responsibilities: • Design, implement, and maintain enterprise-grade evaluation frameworks for LLMs, AI agents, and multi-step AI workflows., • Develop and optimize LLM-as-a-judge evaluators to assess dimensions such as helpfulness, correctness, consistency, and policy compliance., • Build custom Python-based evaluators using AWS Lambda to perform deterministic validation, business-rule enforcement, and workflow quality checks., • Define and implement evaluation standards, mandatory quality dimensions, scoring methodologies, and pass/fail criteria across AI platforms., • Design evaluation strategies at multiple levels, including TRACE, TOOL_CALL, and SESSION evaluation scopes., • Integrate evaluation workflows into CI/CD pipelines and establish automated deployment quality gates for AI-powered applications., • Leverage AWS AgentCore Evaluation capabilities to execute on-demand evaluations and support production quality monitoring., • Utilize observability data, OpenTelemetry traces, and AgentCore telemetry signals as evaluation inputs for quality assessment and root-cause analysis., • Collaborate with platform, security, and AI engineering teams to improve agent reliability, accuracy, and operational quality., • Analyze evaluation results, identify quality regressions, and drive corrective actions across models, prompts, tools, and workflows., • Define monitoring and reporting mechanisms for evaluation outcomes, quality trends, and operational KPIs., • Contribute to the evolution of enterprise AI governance, testing methodologies, and evaluation best practices.

Leverage your Career within the greatest Identity Security Community We champion #IAMExcellence Join our team as a (Senior) IAM Consultant – ForgeRock / Ping Identity (m/f/d) – either on-site/hybrid at our locations in Barcelona or Madrid, or flexibly remote from within Spain. iC Consult is a global Identity Security consultancy and a true People Business: a close-knit community of Identity Security enthusiasts who combine agility, direct impact, and strong leadership with global delivery excellence – jointly optimizing people desirability, technology feasibility, and sustainable business viability. Within this environment, you will work in a local team setup that is part of our multimatrix organization – meaning your local team, your project team, and your reporting line may differ, giving you broad exposure, flexibility, and diverse collaboration opportunities. Your Responsibilities: • Architect Modern Authentication: Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems., • Master Identity Standards: Architect and govern complex OAuth 2.0 and OpenID Connect (OIDC) flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies., • Drive Passwordless Innovation: Lead the strategy and design for Passkeys (WebAuthn) and passwordless authentication to eliminate credential-based risks., • Platform Orchestration: Serve as the subject matter expert for the Ping Identity suite (formerly ForgeRock), including PingAM, PingIDM, and PingDS, to build scalable identity solutions., • Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices. Your Experience: • PingIdentity/ForgeRock Ecosystem: Hands-on experience configuring and deploying PingAM, PingIDM, and PingDS (formerly ForgeRock) in enterprise environments., • IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs., • Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments., • Passkey Proficiency: Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics., • Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines. Bonus Points: • Familiarity with European identity standards (eIDAS 2.0, LoA, and electronic signatures like AdES/QES)., • Experience with PSD2/SCA compliance, orchestrated MFA, and continuous authentication., • Expertise in managing complex B2C/B2B identity lifecycles and device-binding strategies What we offer: • 30 days of vacation (plus public holidays) as well as a flextime model and the option to work from your home office, promoting your life balance, • High-quality equipment of your choice including company mobile phone – whether Apple or Windows, you decide which top equipment you prefer to work with, • iC Consult University – our comprehensive onboarding program accompanies you on your individual induction path with training modules, mentoring programs and events and a 3-day onsite bootcamp for your new start with us, in which you will be trained around representing iC Consult and IAM, • Through our iC Consult Academy you have access to internal and external trainings tailored to your needs – 10 days a year are dedicated to your personal and professional development, • Further Benefit like a personal coach, language training platforms, food vouchers, health insurance and employee discounts on products and services from well-known suppliers, • Regular team and company events in a relaxed atmosphere to strengthen the corporate climate, • A workplace with flat hierarchies, short decision-making paths, and a high degree of personal responsibility, providing substantial decision-making freedom Central Office: iC Consult Spain S.L. Gran Via de Carles III, 94, planta 8 puerta 3, 08028 Barcelona Spain www.ic-consult.com Apply now and become part of our team! If you have any questions, we’re always here for you and look forward to getting in touch. Please send us your application documents (CV, certificates, salary expectations, and possible start date) via LinkedIn Easy Apply. Diversity matters to us. We welcome applications regardless of gender, age, origin, religion or belief, disability, sexual identity, or any other characteristic protected by law. All hiring decisions are based solely on qualifications and suitability. For more information, visit: https://careers.ic-consult.com/en/ The protection of your data is important to us. You can find all information on how we handle your data in our privacy policy.

Interested in joining Capitole? Take a look at this opportunity 👇 We are looking for an AI Solutions Engineer with at least 4 years of experience in software development and hands-on experience building and deploying Generative AI solutions in production environments. You will join a strategic initiative focused on designing, developing, and operating AI-powered solutions that improve operational efficiency, automate processes, and unlock business value through technologies such as Azure AI, Azure OpenAI, Microsoft Copilot, and intelligent agents. Responsibilities • Design, develop, and deploy AI-powered applications and intelligent agents., • Build solutions using Large Language Models (LLMs), prompt engineering, and Retrieval-Augmented Generation (RAG)., • Integrate AI solutions with enterprise applications, Microsoft 365 services, and internal knowledge sources., • Develop reusable components, integration patterns, and implementation standards., • Collaborate closely with operational teams and business stakeholders to transform use cases into production-ready solutions., • Ensure security, scalability, maintainability, and alignment with the wider AI technology ecosystem., • Monitor, support, and continuously improve deployed AI solutions., • Measure and track productivity gains and business outcomes enabled by AI. Required Skills • 4+ years of experience in software development., • Proven experience developing and deploying AI solutions in production environments., • Strong understanding of Generative AI, LLMs, prompt engineering, and RAG architectures., • Experience with Azure AI, Azure OpenAI, Microsoft Copilot Studio, or similar AI platforms., • Strong Python development skills., • Experience designing and consuming REST APIs., • Experience integrating solutions with Microsoft 365 and enterprise applications., • Knowledge of workflow automation platforms and process automation., • Experience with GitHub, testing, monitoring, and technical documentation., • Good understanding of AI security, access management, logging, and lifecycle management., • High level of English (C1 or above). Nice to Have • Experience building AI Agents or multi-agent systems., • Experience with Azure AI Foundry, Azure AI Studio, or Azure Cognitive Services., • Knowledge of LangChain, LlamaIndex, Semantic Kernel, CrewAI, or similar frameworks., • Experience with Power Platform and Power Automate., • Familiarity with Docker, CI/CD pipelines, and cloud-native environments., • Experience working in enterprise-scale environments. Conditions & Benefits • 📍 Fully Remote from Spain, • ✒️ Permanent contract with Capitole, • 💰 Competitive salary aligned with experience, • 🕘 Flexible working hours and intensive Fridays, • 💼 Long-term project with strong growth opportunities, • 💌 Monthly follow-ups and a defined career development plan, • 📚 €1,200 annual training budget for individual learning and certifications., • 🩺 Private health insurance fully covered by Capitole., • 📈 Flexible compensation through Payflow., • 🏋🏻 Access to Wellhub (Gympass) with a wide range of fitness options., • 🍻 Team-building activities every 1-2 months.

Staff Interoperability Engineer (healthcare solution) Location: Remote from Spain (an indefinite Spanish employment contract) Intellias is looking for a Staff Interoperability Engineer to join a large-scale digital healthcare initiative focused on designing, building, and scaling healthcare interoperability solutions that enable secure, standards-compliant health data exchange across the U.S. healthcare ecosystem. This is a Staff-level Individual Contributor role for an experienced engineer who combines deep expertise in healthcare interoperability, distributed backend systems, API architecture, and cloud-native engineering. You will define technical direction, solve the platform’s most complex interoperability challenges, and establish engineering standards that enable teams to build reliable, scalable, and compliant healthcare integrations. The role combines deep hands-on engineering with broad technical influence across interoperability architecture, FHIR implementation, API security, healthcare standards, and AI-enabled engineering practices. Project Overview: The project is building a FHIR-based healthcare data platform that enables secure interoperability across EHR systems, healthcare providers, payers, national healthcare exchange networks, laboratories, pharmacies, wearable devices, and digital health applications. The platform processes healthcare data at national scale, supporting Patient Access APIs, Bulk FHIR APIs, Provider Directory APIs, SMART on FHIR, and real-time healthcare integration services while maintaining compliance with U.S. healthcare interoperability standards and regulations. The engineering environment combines Python, Apache Spark, Kafka, Kubernetes, cloud-native infrastructure, FHIR R4, HL7, REST APIs, OAuth2/OIDC, SMART on FHIR, distributed event-driven architectures, and AI-assisted engineering. This is an AI-native engineering environment, where coding agents and reusable AI capabilities are used to accelerate implementation, testing, validation, documentation, and interoperability engineering without compromising correctness, security, or PHI safety. Requirements: • 8+ years of professional experience in healthcare interoperability, Health IT, backend engineering, or distributed integration platforms., • Proven Staff-level technical ownership of complex interoperability platforms and production healthcare integration solutions., • 4+ years of hands-on experience implementing FHIR-based solutions, including production FHIR R4 implementations., • Extensive experience integrating multiple EHR/EMR platforms, including systems such as Epic, Oracle Health (Cerner), Allscripts, athenahealth, eClinicalWorks, Meditech, NextGen, or comparable platforms., • Proven experience implementing Patient Access APIs, Provider Directory APIs, Bulk FHIR APIs, and other FHIR-based interoperability services., • Production experience integrating with HIE/HIN ecosystems, including Carequality, CommonWell, eHealth Exchange, TEFCA, or comparable national interoperability frameworks., • Expert knowledge of FHIR R4, including resources, profiles, extensions, search parameters, Bundles, validation, and implementation patterns., • Deep understanding of US Core Implementation Guides, USCDI, and U.S. healthcare interoperability requirements., • Strong knowledge of SMART on FHIR, OAuth 2.0, OpenID Connect, SMART scopes, backend services, and healthcare authorization models., • Strong understanding of HL7 v2.x, C-CDA, and healthcare data transformation patterns., • Experience with healthcare terminology standards including SNOMED CT, LOINC, RxNorm, ICD-10, CPT, and CVX., • Strong hands-on programming skills in Python, plus experience with at least one additional language such as Java, TypeScript/JavaScript, Go, or C#., • Experience designing and building RESTful APIs, FHIR APIs, event-driven architectures, and distributed backend services., • Strong knowledge of API security, including OAuth 2.0, JWT, mTLS, rate limiting, audit logging, and consent management., • Experience with messaging technologies such as Kafka, RabbitMQ, or comparable event-driven systems., • Experience building distributed systems using Spark, Kubernetes, Docker, and cloud-native infrastructure., • Strong knowledge of ETL/ELT, CDC, streaming, and asynchronous processing patterns., • Proven experience establishing reusable interoperability frameworks, engineering standards, implementation guides, and technical documentation., • Practical experience using AI coding agents such as Claude Code or comparable AI-assisted engineering tools., • Strong engineering judgment regarding deterministic processing versus AI-assisted implementation., • Professional English sufficient for direct collaboration with U.S.-based engineering, product, and clinical stakeholders. Nice to Have: • Experience with MPI (Master Patient Index), patient matching, identity resolution, or probabilistic matching algorithms., • Experience with advanced clinical data-quality profiling and anomaly detection., • Experience implementing healthcare consent frameworks such as FHIR Consent, XACML, DS4P., • Experience with payer interoperability standards including CARIN Blue Button and Da Vinci Implementation Guides (PDex, CDex, HRex, DTR, PAS)., • Experience integrating healthcare wearable ecosystems such as Apple HealthKit, Google Fit, Fitbit, or comparable platforms., • Experience integrating pharmacy standards such as NCPDP SCRIPT and Surescripts., • Experience with laboratory interoperability including ORU/ORM messaging, LOINC mapping, DiagnosticReport., • Experience building AI/LLM capabilities for clinical data extraction, terminology normalization, entity resolution, or healthcare interoperability., • Contributions to HL7/FHIR communities, healthcare interoperability working groups, or open-source healthcare projects., • Hands-on experience with HAPI FHIR, Synthea, or comparable interoperability frameworks., • Responsibilities:, • Design, build, and scale large-scale healthcare interoperability solutions supporting secure, standards-based health data exchange., • Define technical direction for FHIR implementation, API architecture, interoperability frameworks, and distributed integration services., • Design and implement Patient Access APIs, Provider Directory APIs, Bulk FHIR APIs, and related interoperability services., • Build integrations with EHR/EMR platforms, HIE/HIN networks, healthcare providers, payers, laboratories, pharmacies, wearables, and digital health ecosystems., • Develop robust FHIR resource mappings, validation rules, transformation pipelines, and interoperability tooling., • Design and implement HL7 v2.x to FHIR and C-CDA to FHIR transformation engines., • Build automated frameworks for FHIR conformance testing, interoperability validation, data quality, and integration testing., • Design secure healthcare APIs using SMART on FHIR, OAuth2/OIDC, JWT, mTLS, consent management, and modern API security practices., • Solve complex interoperability issues involving API failures, patient matching, terminology normalization, data mapping conflicts, and compliance requirements., • Define engineering standards, implementation frameworks, and reusable interoperability capabilities adopted across engineering teams., • Make AI-assisted engineering a practical part of interoperability development, testing, documentation, mapping, and validation workflows., • Mentor engineers through architecture reviews, technical guidance, pairing, and knowledge sharing., • Represent interoperability best practices in architecture discussions and industry standards initiatives. Why this position: This role offers the opportunity to shape the technical direction of healthcare interoperability for a modern FHIR-based platform operating at national scale. As a Staff-level Individual Contributor, you will solve some of the most challenging interoperability problems in digital healthcare, including real-time data exchange, standards implementation, patient identity resolution, API security, healthcare compliance, and integration across thousands of healthcare organizations. The position combines deep healthcare interoperability expertise, distributed backend engineering, cloud-native architecture, API platform design, and AI-native engineering. Beyond building production systems, you will establish reusable engineering frameworks, define interoperability standards, mentor experienced engineers, and help shape how healthcare integrations are designed, implemented, validated, and operated across the platform.

Senior ML / Evaluation Engineer Location: Remote from Spain (an indefinite Spanish employment contract) We are looking for a Senior ML / Evaluation Engineer to help define and implement quality standards for enterprise-grade AI agents and LLM-powered applications. In this role, you will design evaluation frameworks, build custom evaluation pipelines, and establish automated quality gates across the AI delivery lifecycle. You will work closely with AI Platform Engineers, ML Engineers, and DevOps teams to ensure reliable, measurable, and production-ready AI systems through scalable evaluation, observability, and governance practices. Project Overview: Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. Requirements: • 5+ years ML engineering or AI platform engineering, • LLM evaluation framework design and implementation, • Custom evaluator implementation for deterministic quality checks, • CI/CD deployment gate design for ML model or agent quality, • AWS AgentCore Evaluation (on-demand mode for CI/CD gates, online mode for production sampling), • LLM-as-judge evaluator design (built-in AgentCore evaluators — helpfulness, correctness), • Custom code-based Lambda evaluators (Python — deterministic checks), • Evaluation levels (TRACE for per-response, TOOL_CALL for per-invocation, SESSION for workflow), • OTel spans from AWS AgentCore Observability as evaluation input, • Enterprise evaluation standard authoring (mandatory dimensions, pass/fail criteria) Nice-to-have • AWS AgentCore Evaluation API hands-on (CreateEvaluation, GetEvaluationResult), • AWS Bedrock Guardrails for PII detection evaluator integration, • CloudWatch metrics output from AgentCore Evaluation for online mode Responsibilities: • Design, implement, and maintain enterprise-grade evaluation frameworks for LLMs, AI agents, and multi-step AI workflows., • Develop and optimize LLM-as-a-judge evaluators to assess dimensions such as helpfulness, correctness, consistency, and policy compliance., • Build custom Python-based evaluators using AWS Lambda to perform deterministic validation, business-rule enforcement, and workflow quality checks., • Define and implement evaluation standards, mandatory quality dimensions, scoring methodologies, and pass/fail criteria across AI platforms., • Design evaluation strategies at multiple levels, including TRACE, TOOL_CALL, and SESSION evaluation scopes., • Integrate evaluation workflows into CI/CD pipelines and establish automated deployment quality gates for AI-powered applications., • Leverage AWS AgentCore Evaluation capabilities to execute on-demand evaluations and support production quality monitoring., • Utilize observability data, OpenTelemetry traces, and AgentCore telemetry signals as evaluation inputs for quality assessment and root-cause analysis., • Collaborate with platform, security, and AI engineering teams to improve agent reliability, accuracy, and operational quality., • Analyze evaluation results, identify quality regressions, and drive corrective actions across models, prompts, tools, and workflows., • Define monitoring and reporting mechanisms for evaluation outcomes, quality trends, and operational KPIs., • Contribute to the evolution of enterprise AI governance, testing methodologies, and evaluation best practices.

PayXpert is a pioneer in omnichannel payments and a subsidiary of the Société Générale group. We serve a diverse array of local and international brands both online and in-store, spanning various sectors. At the heart of our vision is the creation of a payment ecosystem that fosters an inclusive commerce experience for all. We have developed services that focus on revenue optimisation, performance enhancement, fraud prevention, and seamless payment orchestration. Our expertise extends to cross-border payments and alternative payment methods such as Alipay+ and WeChat Pay. Furthermore, our solutions are designed with accessibility in mind, offering features that cater to the visually impaired, ensuring everyone can engage in the modern commerce landscape. The Senior Backend Developer is responsible for designing, building and evolving the backend services that support PayXpert's Payment Gateway, Secure Store and other security‑sensitive components within the core payments platform The role spans mainly on the PHP‑based e‑commerce gateway but also on the Java/Kotlin payments platform components, working across these stacks to deliver and maintain secure transaction services The role operates with advanced technical expertise and high autonomy, developing complex backend features, maintaining service integrity and ensuring the protection of sensitive transactional data within a regulated and compliance‑driven environment. Key Responsibilities Backend Development & Secure Domain Ownership • Design, develop, and maintain payment-oriented backend services across both PHP (e‑commerce gateway) and Java/Kotlin (core payments platform) codebases, • Contribute to core payment backend applications with a strong focus on security-sensitive transaction flows., • Identify gaps or limitations in core backend services and propose technical solutions aligned with business needs., • Analyze business and technical requirements to assess feasibility and implementation impact., • Own backend components end-to-end, from design and implementation through production support. Act as a co‑owner of the PHP e‑commerce gateway, sharing accountability for its evolution, security and reliability. Security, Reliability & Performance • Apply secure coding practices appropriate for transaction-critical and sensitive data environments., • Support the implementation of payment protocols and security-related service interactions., • Participate in incident analysis and troubleshooting related to payment services., • Ensure backend services meet reliability, performance, and data integrity requirements., • Critically review AI-assisted code for security, correctness and compliance before it reaches production, treating AI output as a draft to be validated rather than trusted by default. Ensure no sensitive transactional data, secrets or regulated information is exposed to AI tooling. Testing, Quality & Continuous Integration • Design and perform unit and integration testing for payment services., • Debug and resolve defects identified during CI pipelines and iterative builds., • Maintain and continuously improve test coverage and backend quality standards., • Participate actively in code reviews to ensure consistency, quality, and security standards., • Use AI coding assistants to accelerate test authoring, refactoring and debugging, while retaining full ownership and accountability for the quality of the delivered code. Collaboration & Delivery • Work closely with Product Managers to design and deliver backend solutions using agile methodologies., • Collaborate with peer developers, QA engineers, and release teams across the Core Business Domain., • Provide technical support for complex production issues and internal problem-solving when required. Continuous Improvement • Contribute to improving backend architecture, service interactions, and development practices., • Support documentation and knowledge sharing related to Secure Store services., • Actively contribute to improving system robustness and long-term maintainability., • Help mature the team's practices for effective and responsible AI-assisted development, sharing prompts, patterns and guardrails that improve productivity without compromising security. Requirements • Bachelor’s degree in Computer Science, Engineering, or related fields., • 7–10 years of total backend development experience, including secure, high‑risk backend systems., • 4–6 years in similar senior PHP/Java/Kotlin backend roles, owning production services and developing secure backend features., • Experience working with REST-based backend architectures and service-oriented systems., • Strong familiarity with development and delivery tools: Git, GitLab, Docker, CI/CD pipelines, and issue-tracking tools., • Hands-on experience using AI coding assistants in a professional software development workflow, with an understanding of their security and data-confidentiality implications., • Experience working in payments, fintech, or other regulated and security-sensitive environments is a strong plus., • Exposure to or ability to collaborate on systems built with Java / Spring Boot is a great plus., • Fluent English is mandatory., • French and/or Spanish are a plus. Our Culture & Ways of Working Our culture is built around people, ownership and continuous progress. We strive to create an environment where individuals feel trusted, supported and challenged to grow, with regular feedback and meaningful follow-up. We value collaboration over hierarchy. Ideas can come from anywhere, and every voice matters; we expect our teams to contribute, challenge and shape the way we work. We are strongly product-oriented, with a hands-on mindset and a genuine openness to new ideas. Innovation is not limited to specific teams; it is a shared responsibility. We believe in continuous improvement over perfection. Each quarter, we actively look for ways to optimise our processes, enhance our solutions and raise the bar as an organisation. At PayXpert, we want you to grow, feel valued and enjoy your work experience. Here’s what we bring to the table: Compensation & Stability • Competitive salary package with a permanent contract, • Flexible working hours and a wellbeing-focused intensive summer schedule. Work Environment & Flexibility • International, diverse and collaborative teams across Spain, France & the UK, • Regular engagement events to build strong connections Growth & Career Development • Real ownership and visible impact on key HR initiatives, • Continuous learning opportunities tailored to your development plan, • Free language courses (Spanish, French, English) to support your global career, • Involvement in exciting and innovative fintech projects Recognition & Rewards • Employee referral bonus program Apply now and let’s build the future of payments together. In line with our commitment to equal opportunities and fair recruitment practices, candidates may submit a blind CV, excluding personal details that are not relevant to the assessment of their skills, experience and professional suitability for the role. We believe in equal employment opportunity, a culture built around gender-balanced development opportunities for our professionals, a flexible and healthy working environment, and general equality in the workplace. The personal data collected is intended for PAYXPERT and used to process your application with a view to possibly offering you an employment contract. It is intended for use by the departments responsible for recruitment. This information will be kept for a maximum of 2 years if your application is not successful. In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data, you have the right to access, rectify, delete, portability and limit the Processing of Data concerning you. You may also, for legitimate reasons, object to the Processing of your Data. You may exercise your rights by contacting our DPO at the following address or at the following postal address Av. Diagonal 440, 08037 BARCELONA,SPAIN. For more information on the Processing of your Personal Data by PAYXPERT, please consult our privacy policy available on our website at the following address: https://www.payxpert.com/privacy-policy/.

Senior Security & Governance Engineer Location: Remote from Spain (an indefinite Spanish employment contract) We are looking for a Security & Governance Engineer to establish and enforce security controls, governance standards, and compliance requirements across AI platforms, APIs, and cloud-native services. The role focuses on authentication, authorization, data protection, network isolation, and security validation of enterprise integrations. The ideal candidate has strong cloud security expertise, deep knowledge of identity management, and experience participating in enterprise security review processes. Project Overview: Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. Requirements: • 4+ years application security or cloud security engineering, • Identity and access management (OAuth 2.0 / SigV4 / JWT security, OIDC), • TLS/mTLS configuration in cloud environments( TLS 1.3 enforcement), • Participation in InfoSec reviews for enterprise APIs, • IT-STD-317 / enterprise security standards, • Data classification for tool payloads, • Security testing (OWASP, pen-test methodology), • Network isolation (VPC, PrivateLink) Will be a plus: • MCP or tool-protocol security experience, • AWS WAF, Security Hub, Macie, • Prior work on enterprise AI platform governance Responsibilities: • Design and implement security controls for cloud-native applications, APIs, and AI platform integrations., • Define and enforce OAuth 2.0, JWT, OIDC, and SigV4 authentication and authorization standards., • Configure and maintain TLS 1.3 and secure communication channels across distributed systems., • Establish governance requirements for tool integrations, API interactions, and AI platform workloads., • Define and maintain data classification policies for tool payloads, metadata, and sensitive business information., • Design and implement network isolation strategies using VPCs, PrivateLink, and cloud-native security controls., • Perform security reviews, threat assessments, and architecture evaluations for enterprise services., • Conduct security testing activities, including penetration testing, OWASP-based assessments, and vulnerability validation., • Support InfoSec reviews, architecture review boards, and enterprise governance processes., • Develop security standards, implementation guidance, and compliance documentation., • Collaborate with engineering teams to embed security requirements into development and deployment workflows., • Monitor security posture and recommend improvements across cloud and AI platform environments., • Partner with stakeholders to ensure compliance with enterprise security policies and standards.

Senior Solution Architect | 100% Remote | Contract role A global leader in technology is looking for a Senior Solution Architect to define and lead the architecture of a new internal workflow-orchestration platform, supporting critical business and workforce transformation processes. The project: You will design the target architecture, from the ground up, of a secure, role-based, reusable platform that supports several business transformation products. The core challenge: enabling multiple products to share foundational technical services while keeping strict separation of data, permissions, workflows, business rules, and user experiences. This is primarily an architecture and technical-direction role, with selective hands-on contribution when the project calls for it. Responsibilities: • Define the end-to-end architecture: frontend applications, backend services, databases, workflow-control layer, identity and access, audit, integration adapters, reporting, export, and deployment, • Design the reusable workflow foundation: role permissions, stage gates, approval routing, scenario and version management, change ledger, validation, reporting, exports, and reconciliation, • Establish data-isolation and access-control patterns so multiple products can reuse shared components without compromising security, data models, or processes, • Set the nonfunctional requirements: scale, availability, recoverability, observability, performance, maintainability, and disaster recovery, • Lead technical design reviews, architectural decisions, risk management, engineering standards, and documentation, • Provide technical direction to the full-stack engineering team, ensuring build decisions align with the approved architecture and security model Requirements: • 10+ years in enterprise software engineering, including 4+ in systems, solution, platform, or enterprise architecture, • Proven experience building scalable solutions within the AWS ecosystem, • Experience architecting secure workflow, case-management, planning, or orchestration platforms with automation and human-in-the-loop processes, • Strong knowledge of domain-driven design, API architecture, relational and event-driven data models, IAM, and enterprise integration, • Experience with systems handling sensitive data (employee, financial, legal, or regulated), • Role-based access control (RBAC), ideally also attribute- or field-level authorization, • Full-stack fluency (React/TypeScript; Python/FastAPI, Java/Spring, Node.js, .NET or similar), able to go hands-on when needed, • Cloud architecture, CI/CD, observability, disaster recovery, and production support, • Strong communication skills to bridge business, security, data, and engineering Nice to have: • Integrations with HR, finance, or workforce-planning systems (Workday HCM, Workday Adaptive Planning, or similar), • Workforce planning, org design, hierarchical data, scenario modeling, or highly governed people-transformation processes, • AI-assisted workflow patterns, with a clear sense of where deterministic rules and human approval must stay authoritative, • Regulated global environments with strict audit and governance requirements

Pluxee is a global player in employee benefits and engagement that operates in 28 countries. Pluxee helps companies attract, engage, and retain talent thanks to a broad range of solutions across Meal & Food, Wellbeing, Lifestyle, Reward & Recognition, and Public Benefits. Powered by leading technology and more than 5,000 engaged team members, Pluxee acts as a trusted partner within a highly interconnected B2B2C ecosystem made up of more than 500,000 clients, 36 million consumers and 1.7 million merchants. Conducting its business as a trusted partner for more than 45 years, Pluxee is committed to creating a positive impact on all its stakeholders, from driving business to local communities, to supporting wellbeing at work for employees while protecting the planet. 🚀 Your next challenge Join Pluxee as a Senior Backend Engineer and become a key contributor of the product that employees actually experience every day. You'll join the Benefits Squad, the team at the center of Cobee by Pluxee: we own the domain that defines what benefits an employee can access, under what conditions, with what limits, and in what markets. This is where business complexity lives. Benefits isn't a simple CRUD layer — it's a rich domain with multi-tenant configurations, eligibility rules that vary by company, country, tax compliance requirements and real-time state that must always be consistent. Getting it right means hundreds of thousands of employees get their benefits seamlessly. Getting it wrong is visible immediately. 🚀 Key Responsibilities • Own the Core Domain Model: Design and evolve the backend services that define how benefits work — plans, entitlements, limits, and eligibility — ensuring the model stays clean, consistent, and extensible as we grow into new markets and product lines., • Tame Business Complexity: Translate intricate, multi-country regulatory and business rules into robust, maintainable code. You'll work closely with Product and Operations to model edge cases that matter in the real world., • Build for Consistency at Scale: Design systems where data integrity is non-negotiable across multi-tenant configurations, concurrent transactions, and distributed state — even as traffic and product scope grow., • Drive Product Velocity Without Cutting Corners: Deliver new benefit types, configurations, and market expansions at speed, without accumulating technical debt that slows down future iterations. You understand that clean domain design is the fastest path to sustainable velocity., • Quality as a Product Requirement: Write tests that encode business rules, not just code paths. In a domain where a misconfigured eligibility rule affects thousands of employees, comprehensive test coverage is a feature, not a hygiene task., • Operational Excellence & Observability: Monitor domain health in production. Build the dashboards and alerts that let the team detect when a benefit isn't being applied correctly before an employee notices., • Technical Leadership: Raise the bar through deep code reviews, clear technical documentation, and mentoring. Help the squad develop shared vocabulary for the domain — the kind of codebase where new engineers become productive fast., • AI-Driven Execution: Actively leverage AI tools and coding assistants on a daily basis to accelerate development cycles, automate repetitive tasks, and optimize overall team processes and delivery speed. Our daily stack is: • TypeScript, Node.js,React, React Native, Auth0, MongoDB (Atlas)., • We add tests to everything. Also, we log what's going on internally using Sentry., • We have our CI/CD with GitlabCI and we deploy several times each day., • Code collaboration: GitHub, Gitlab, Docker, K8, • AI & Productivity: GitHub Copilot, Claude Sonnet, ChatGPT, and other GenAI assistants., • Project management and knowledge: JIRA, Confluence, • Communication: Teams 🌟 You are a match • Proven Senior Expertise: 5+ years of experience developing production-grade applications. Experience within the Node.js ecosystem will be a plus., • Distributed Systems Mastery: Deep understanding of race conditions, eventual consistency, idempotency, and message brokers is a must., • Experience in developing medium/large-scale web applications and distributed systems., • Experience operating your services in a production environment., • Experience with unit, integration, functional, and e2e testing, • AI-Empowered Developer: A strong inclination to lean on AI tools for problem-solving, code generation, and workflow optimization, always looking for ways to work smarter and improve team efficiency., • Problem-Solving DNA: A systematic approach to troubleshooting complex issues in high-concurrency environments., • Quality First: Extensive experience with automated testing patterns and a "shift-left" security mindset., • Growth Mindset: A passion for continuous learning, open to feedback, and a drive to help others improve their craft., • Spanish & English fluency. ☀️ Happy at work 1) A meaningful job: Be the change! Help us build the future of employee benefits by bringing to life sustainable and personalized experiences and contribute to make a real impact on millions of lives. Our business model delivers not just for individuals but their communities too, by supporting local businesses and economies. 2) A great culture: People matter – a lot! Be part of a multicultural team that moves as one in a fast paced and innovative environment. We respect and care authentically about our people, we embrace wellbeing and work-life balance, new ideas and we have a lot of fun! 3) An empowering environment: Be yourself! At Pluxee we proudly embrace diversity and value the uniqueness of our talents, fostering an inclusive workplace where all abilities are celebrated, and equal learning and growing opportunities are a given.

🚀 We are looking for Top Talent…and we would be delighted if you joined our team! More in detail, UST is a multinational company based in North America, certified as a Top Employer company with over 35,000 employees worldwide and a presence in more than 30 countries. We are leaders in digital technology services, delivering large-scale technology solutions for some of the world's leading organizations. 🔎 What are we looking for? We are looking for a Senior .NET, Azure developer, to join our Policy as Code Team, helping to build and evolve a next-generation platform that automates compliance, governance, and release controls across a large enterprise technology landscape. You'll work at the intersection of Software Engineering, DevOps, Cloud, Security, and Compliance, building services that connect engineering platforms such as GitHub Enterprise Cloud and Azure DevOps to policy evaluation and control systems. This is an exciting opportunity for engineers who enjoy solving complex integration challenges, working with APIs and webhooks, and building highly reliable solutions that operate within regulated environments. 100% remote within Spain 🔧 Key Responsibilities As part of a small, highly skilled engineering team, you will design, develop, and operate the services that: • Capture evidence from software delivery pipelines., • Evaluate software changes against codified compliance policies., • Automate release and deployment approvals., • Deliver reliable allow/deny decisions in real time., • Generate complete audit trails for governance and regulatory purposes., • Integrate with our Continuous Compliance Framework (CCF). You'll be working in an event-driven, API-first environment that relies heavily on webhooks, REST integrations, cloud-native services, and automation. Integration Engineering (Primary Focus) • Design, build, and maintain REST APIs, webhook receivers, and API clients., • Integrate GitHub Enterprise Cloud and Azure DevOps with policy evaluation and evidence management systems., • Define and own API contracts, including:, • Authentication and authorization flows, • Payload validation and enrichment, • Retry and resiliency patterns, • Idempotency and timeout handling, • Failure management and observability Policy as Code & Release Governance • Develop services that collect and process compliance evidence., • Build solutions that evaluate compliance policies and automate deployment decisions., • Contribute to the implementation of policy-driven release governance. Software Development • Build clean, scalable, testable, and maintainable services., • Apply modern engineering practices including:, • Test Driven Development (TDD), • Pull Request workflows, • Automated testing, • Event-driven architectures, • Serverless development, • Documentation-first engineering Security, Risk & Compliance • Design systems with security, auditability, compliance, and operational resilience as core requirements., • Ensure solutions are transparent, explainable, and defensible during internal and external audits. 🔧 What do we need? 10 years of professional experience:Strong development experience with C# and .NET Solid hands-on experience with Microsoft Azure (mainly Azure functions) Proven experience building: • REST APIs, • Webhook integrations, • Distributed and event-driven systems, • Cloud-native applications Strong knowledge of: • Modern SDLC practices, • CI/CD pipelines, • DevOps tooling, • Integration engineering Understanding of: • Authentication & authorization, • HTTP protocols and API design, • Resiliency and fault tolerance patterns, • Testing and quality engineering practices, • English B2+/C1 ⭐ Nice to Have Python development experience Experience with: • Azure Functions, • Azure API Management, • Azure Key Vault, • Azure Table Storage Knowledge of: • Open Policy Agent (OPA), • Rego, • Continuous Compliance Framework (CCF), • OSCAL, • Policy-as-Code approaches, • Experience within regulated environments such as banking, finance, or insurance What can we offer? ✈️ 23 days of Annual Leave plus the 24th and 31st of December as discretionary days ❤️ Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurance) 🍴 Flexible Compensation Program (Meals, Childcare, Transport, Online English Lessons, Health Care Plan, and more) 🎓 Free access to multiple learning and training platforms 🚀 Professional stability and career development opportunities 🚶 Employee Referral Program with attractive incentives 🔗 Option to choose between 12 or 14 salary payments per year 🏡 Work-life balance measures including flexibility and hybrid working 🎁 Access to UST Club discounts and gym benefits 📧 If you would like to know more, don't hesitate to apply. We'd love to hear from you! At UST, we are committed to equal opportunities and do not discriminate on the basis of race, gender, disability, age, religion, sexual orientation, or nationality. We strongly support diversity, equity, inclusion, and the recruitment of professionals with disabilities.

Leverage your Career within the greatest Identity Security Community We champion #IAMExcellence Join our team as a (Senior) IAM Consultant – ForgeRock / Ping Identity (m/f/d) – either on-site/hybrid at our locations in Barcelona or Madrid, or flexibly remote from within Spain. iC Consult is a global Identity Security consultancy and a true People Business: a close-knit community of Identity Security enthusiasts who combine agility, direct impact, and strong leadership with global delivery excellence – jointly optimizing people desirability, technology feasibility, and sustainable business viability. Within this environment, you will work in a local team setup that is part of our multimatrix organization – meaning your local team, your project team, and your reporting line may differ, giving you broad exposure, flexibility, and diverse collaboration opportunities. Your Responsibilities: • Architect Modern Authentication: Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems., • Master Identity Standards: Architect and govern complex OAuth 2.0 and OpenID Connect (OIDC) flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies., • Drive Passwordless Innovation: Lead the strategy and design for Passkeys (WebAuthn) and passwordless authentication to eliminate credential-based risks., • Platform Orchestration: Serve as the subject matter expert for the Ping Identity suite (formerly ForgeRock), including PingAM, PingIDM, and PingDS, to build scalable identity solutions., • Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices. Your Experience: • PingIdentity/ForgeRock Ecosystem: Hands-on experience configuring and deploying PingAM, PingIDM, and PingDS (formerly ForgeRock) in enterprise environments., • IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs., • Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments., • Passkey Proficiency: Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics., • Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines. Bonus Points: • Familiarity with European identity standards (eIDAS 2.0, LoA, and electronic signatures like AdES/QES)., • Experience with PSD2/SCA compliance, orchestrated MFA, and continuous authentication., • Expertise in managing complex B2C/B2B identity lifecycles and device-binding strategies What we offer: • 30 days of vacation (plus public holidays) as well as a flextime model and the option to work from your home office, promoting your life balance, • High-quality equipment of your choice including company mobile phone – whether Apple or Windows, you decide which top equipment you prefer to work with, • iC Consult University – our comprehensive onboarding program accompanies you on your individual induction path with training modules, mentoring programs and events and a 3-day onsite bootcamp for your new start with us, in which you will be trained around representing iC Consult and IAM, • Through our iC Consult Academy you have access to internal and external trainings tailored to your needs – 10 days a year are dedicated to your personal and professional development, • Further Benefit like a personal coach, language training platforms, food vouchers, health insurance and employee discounts on products and services from well-known suppliers, • Regular team and company events in a relaxed atmosphere to strengthen the corporate climate, • A workplace with flat hierarchies, short decision-making paths, and a high degree of personal responsibility, providing substantial decision-making freedom Central Office: iC Consult Spain S.L. Gran Via de Carles III, 94, planta 8 puerta 3, 08028 Barcelona Spain www.ic-consult.com Apply now and become part of our team! If you have any questions, we’re always here for you and look forward to getting in touch. Please send us your application documents (CV, certificates, salary expectations, and possible start date) via LinkedIn Easy Apply. Diversity matters to us. We welcome applications regardless of gender, age, origin, religion or belief, disability, sexual identity, or any other characteristic protected by law. All hiring decisions are based solely on qualifications and suitability. For more information, visit: https://careers.ic-consult.com/en/ The protection of your data is important to us. You can find all information on how we handle your data in our privacy policy.

At Decskill, we believe that technological excellence is driven by human talent. We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives. As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams. About the Role We are looking for a MuleSoft Developer to join a dynamic integration team, where you will be responsible for designing, developing, and implementing API-led integration solutions using MuleSoft Anypoint Platform. You will collaborate with business stakeholders, architects, and technical teams to deliver scalable, secure, and high-quality integrations while contributing throughout the entire API development lifecycle. Key Responsibilities • Design, develop, and implement integration solutions using MuleSoft Anypoint Platform., • Analyze complex business and integration requirements and translate them into technical solutions., • Design, develop, and document REST APIs following API best practices and standards., • Develop MuleSoft integration flows and orchestrations., • Optimize integration flows and orchestrations to improve performance and maintainability., • Design APIs using RAML and implement data transformations using DataWeave., • Collaborate with Security teams to ensure secure API implementation and controlled access to source and target systems., • Participate in the integration of Salesforce and other enterprise applications. Required Skills Essential • Strong experience developing solutions with MuleSoft Anypoint Platform., • Solid understanding of the MuleSoft API Lifecycle., • Experience designing and implementing MuleSoft Integrations., • Strong knowledge of MuleSoft Flow Design., • Experience developing REST APIs following industry best practices., • Hands-on experience with RAML and DataWeave., • Experience integrating Salesforce with enterprise applications. Nice to Have • Experience with API-led Connectivity architecture., • Knowledge of API security standards (OAuth 2.0, JWT, TLS, API policies). What We Offer • 100% remote working model., • Opportunity to work on innovative cloud platform projects within an international environment. 🚀 Your next challenge might start here! **At Decskill, we are committed to equal opportunities and non-discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.

🚀 We are still looking for the very Top Talent…and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies. 🔎 What we look for? We are looking for 3 Apache Spark (Backend Developer Analyst) with at least 2 years of experience in backend application development, particularly within Big Data environments using Apache Spark. The ideal candidate is passionate about technology, follows Agile development methodologies, and has experience working in collaborative, continuously improving software teams. Strong knowledge of SQL, Continuous Integration practices (Git, GitHub, Jenkins), and excellent communication skills in English (B2+/C1 level) are essential. Main tasks and accountabilities will be: Design, develop, and maintain backend applications using Apache Spark and Big Data technologies. Participate in the full Software Development Life Cycle (SDLC), from requirements analysis to deployment and maintenance. Collaborate with multidisciplinary teams following Agile methodologies. Develop, optimize, and maintain SQL queries and database-related processes. Implement and support Continuous Integration and Continuous Delivery (CI/CD) pipelines using tools such as Git, GitHub, and Jenkins. Create and maintain automation scripts, mainly using Bash. Support and monitor batch processing environments using tools such as Control-M. Ensure code quality, security, and compliance with development best practices, leveraging tools such as SonarQube. Contribute to cloud-based and containerized environments using technologies such as Docker, Kubernetes, Azure, or AWS. Participate in the implementation and maintenance of SOA (Service-Oriented Architecture) solutions. What do we expect from you? 💡 Mandatory requirements: Minimum 2+ years of experience in backend software development. Hands-on experience with Apache Spark and Big Data technologies. Strong understanding of Agile software development practices. Experience with Git, GitHub, and Jenkins in CI/CD environments. Solid knowledge of SQL. English proficiency at B2 level or higher (C1 preferred). Nice to have: Experience with Jenkins orchestration. Knowledge of Bash scripting. Experience with Control-M scheduling and monitoring tools. Familiarity with SDLC management tools such as HP ALM. Basic knowledge of cybersecurity and code quality tools (e.g., SonarQube). Understanding of cloud computing concepts and technologies, including Docker, Kubernetes, Azure, AWS, and Object Storage Services (OSS/S3). Exposure to SOA Architecture and distributed systems. Key skills: Apache Spark Agile Methodologies Git & GitHub Jenkins SQL English Communication (B2+/C1) Bash Scripting Control-M Docker & Kubernetes Microsoft Azure & AWS SOA Architecture Cybersecurity & Code Quality Best Practices ⏰ Work mode: remote within Spain. Business Hours 💰 What can we offer? -✈️ 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! -❤️ Numerous benefits (Heath Care Plan, teleworking compensation, Life and Accident Insurances). -🍴 `Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Heath Care Plan…) -🎓 Free access to several training platforms -🚀 Professional stability and career plans -🚶 UST also, compensates referrals from which you could benefit when you refer professionals. -🔗 The option to pick between 12 or 14 payments along the year. -🏡 Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…) -🎁 UST Club Platform discounts and gym Access discounts 📧 If you would like to know more, do not hesitate to apply and we’ll get in touch to fill you in details. UST is waiting for you! In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate.

PayXpert is a pioneer in omnichannel payments and a subsidiary of the Société Générale group. We serve a diverse array of local and international brands both online and in-store, spanning various sectors. At the heart of our vision is the creation of a payment ecosystem that fosters an inclusive commerce experience for all. We have developed services that focus on revenue optimisation, performance enhancement, fraud prevention, and seamless payment orchestration. Our expertise extends to cross-border payments and alternative payment methods such as Alipay+ and WeChat Pay. Furthermore, our solutions are designed with accessibility in mind, offering features that cater to the visually impaired, ensuring everyone can engage in the modern commerce landscape. The Senior Backend Developer is responsible for designing, building and evolving the backend services that support PayXpert's Payment Gateway, Secure Store and other security‑sensitive components within the core payments platform The role spans mainly on the PHP‑based e‑commerce gateway but also on the Java/Kotlin payments platform components, working across these stacks to deliver and maintain secure transaction services The role operates with advanced technical expertise and high autonomy, developing complex backend features, maintaining service integrity and ensuring the protection of sensitive transactional data within a regulated and compliance‑driven environment. Key Responsibilities Backend Development & Secure Domain Ownership • Design, develop, and maintain payment-oriented backend services across both PHP (e‑commerce gateway) and Java/Kotlin (core payments platform) codebases, • Contribute to core payment backend applications with a strong focus on security-sensitive transaction flows., • Identify gaps or limitations in core backend services and propose technical solutions aligned with business needs., • Analyze business and technical requirements to assess feasibility and implementation impact., • Own backend components end-to-end, from design and implementation through production support. Act as a co‑owner of the PHP e‑commerce gateway, sharing accountability for its evolution, security and reliability. Security, Reliability & Performance • Apply secure coding practices appropriate for transaction-critical and sensitive data environments., • Support the implementation of payment protocols and security-related service interactions., • Participate in incident analysis and troubleshooting related to payment services., • Ensure backend services meet reliability, performance, and data integrity requirements., • Critically review AI-assisted code for security, correctness and compliance before it reaches production, treating AI output as a draft to be validated rather than trusted by default. Ensure no sensitive transactional data, secrets or regulated information is exposed to AI tooling. Testing, Quality & Continuous Integration • Design and perform unit and integration testing for payment services., • Debug and resolve defects identified during CI pipelines and iterative builds., • Maintain and continuously improve test coverage and backend quality standards., • Participate actively in code reviews to ensure consistency, quality, and security standards., • Use AI coding assistants to accelerate test authoring, refactoring and debugging, while retaining full ownership and accountability for the quality of the delivered code. Collaboration & Delivery • Work closely with Product Managers to design and deliver backend solutions using agile methodologies., • Collaborate with peer developers, QA engineers, and release teams across the Core Business Domain., • Provide technical support for complex production issues and internal problem-solving when required. Continuous Improvement • Contribute to improving backend architecture, service interactions, and development practices., • Support documentation and knowledge sharing related to Secure Store services., • Actively contribute to improving system robustness and long-term maintainability., • Help mature the team's practices for effective and responsible AI-assisted development, sharing prompts, patterns and guardrails that improve productivity without compromising security. Requirements • Bachelor’s degree in Computer Science, Engineering, or related fields., • 7–10 years of total backend development experience, including secure, high‑risk backend systems., • 4–6 years in similar senior PHP/Java/Kotlin backend roles, owning production services and developing secure backend features., • Experience working with REST-based backend architectures and service-oriented systems., • Strong familiarity with development and delivery tools: Git, GitLab, Docker, CI/CD pipelines, and issue-tracking tools., • Hands-on experience using AI coding assistants in a professional software development workflow, with an understanding of their security and data-confidentiality implications., • Experience working in payments, fintech, or other regulated and security-sensitive environments is a strong plus., • Exposure to or ability to collaborate on systems built with Java / Spring Boot is a great plus., • Fluent English is mandatory., • French and/or Spanish are a plus. Our Culture & Ways of Working Our culture is built around people, ownership and continuous progress. We strive to create an environment where individuals feel trusted, supported and challenged to grow, with regular feedback and meaningful follow-up. We value collaboration over hierarchy. Ideas can come from anywhere, and every voice matters; we expect our teams to contribute, challenge and shape the way we work. We are strongly product-oriented, with a hands-on mindset and a genuine openness to new ideas. Innovation is not limited to specific teams; it is a shared responsibility. We believe in continuous improvement over perfection. Each quarter, we actively look for ways to optimise our processes, enhance our solutions and raise the bar as an organisation. At PayXpert, we want you to grow, feel valued and enjoy your work experience. Here’s what we bring to the table: Compensation & Stability • Competitive salary package with a permanent contract, • Flexible working hours and a wellbeing-focused intensive summer schedule. Work Environment & Flexibility • International, diverse and collaborative teams across Spain, France & the UK, • Regular engagement events to build strong connections Growth & Career Development • Real ownership and visible impact on key HR initiatives, • Continuous learning opportunities tailored to your development plan, • Free language courses (Spanish, French, English) to support your global career, • Involvement in exciting and innovative fintech projects Recognition & Rewards • Employee referral bonus program Apply now and let’s build the future of payments together. In line with our commitment to equal opportunities and fair recruitment practices, candidates may submit a blind CV, excluding personal details that are not relevant to the assessment of their skills, experience and professional suitability for the role. We believe in equal employment opportunity, a culture built around gender-balanced development opportunities for our professionals, a flexible and healthy working environment, and general equality in the workplace. The personal data collected is intended for PAYXPERT and used to process your application with a view to possibly offering you an employment contract. It is intended for use by the departments responsible for recruitment. This information will be kept for a maximum of 2 years if your application is not successful. In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data, you have the right to access, rectify, delete, portability and limit the Processing of Data concerning you. You may also, for legitimate reasons, object to the Processing of your Data. You may exercise your rights by contacting our DPO at the following address or at the following postal address Av. Diagonal 440, 08037 BARCELONA,SPAIN. For more information on the Processing of your Personal Data by PAYXPERT, please consult our privacy policy available on our website at the following address: https://www.payxpert.com/privacy-policy/.

Geek+ is a global technology company specialized in smart logistics. We apply advanced robotics and artificial intelligence technologies to create solutionsfor warehouse and factory operations. With the rise of e-commerce and the demand for a faster and more flexible movement of goods, warehouse and manufacturing operators are facing increasingly complex production and logistic challenges today. Speed, product diversification, same-day delivery, volume, safety… these concerns are impacting a wide range of industries, from apparel, retail, automotive, to even electronics, energy and pharmaceutical industries. Geek+ was founded to be the solution to these problems. We make logistics affordable, efficient, flexible, safe and agile. Our vision is to establish a fully automatedand intelligent supply chain globally. Job Description: • Responsible for the design, implementation, and operation of enterprise hybrid cloud network architecture, integrating public clouds (AWS, Alibaba Cloud, Huawei Cloud, Azure) with on-premise environments, • Lead the deployment, optimization, and maintenance of remote access and secure networking platforms, including VPN, SASE, and SD-WAN, ensuring secure and efficient connectivity for large-scale users worldwide, • Design and manage complex AWS networking environments — including VPC design, Transit Gateway, Direct Connect, Route 53, Security Groups, and inter-region connectivity — ensuring high availability, scalability, and compliance, • Manage and maintain enterprise firewalls, with extensive hands-on experience in Palo Alto and FortiGate for policy configuration, VPN management, and log analysis, • Plan, deploy, and troubleshoot hybrid and multi-cloud connectivity, covering routing, authentication, VPN, DNS, and traffic optimization, • Operate and optimize wireless networks, including enterprise Wi-Fi design, controller management, and performance troubleshooting, • Work with virtualization and infrastructure platforms, including VMware and cloud networking environments, • Implement automation and monitoring using Python and AI tools to enhance operational efficiency; apply Infrastructure as Code (Terraform) and NetDevOps practices to streamline configuration management, • Support PKI systems and certificate management to ensure secure authentication and encrypted connectivity, • Collaborate with global IT and Security teams to ensure network compliance, performance, and security across all environments, • Maintain accurate technical documentation, including AWS network architecture diagrams, firewall policies, automation scripts, and SOPs Job Requirements: • Bachelor’s degree or above in Computer Science, Network Engineering, or related field; 5+ years of relevant enterprise networking experience, • Expert-level knowledge of AWS networking, including VPC, Transit Gateway, Direct Connect, Route 53, Security Groups, and hybrid cloud interconnection, • Proven hands-on experience in VPN, SASE, and SD-WAN technologies, supporting large-scale remote or branch-office deployments, • Solid experience with public clouds (AWS, Alibaba Cloud, Huawei Cloud, Azure) and hybrid cloud architectures, • Strong operational knowledge of Palo Alto and FortiGate firewalls, including policy management, VPN setup, and troubleshooting, • Familiar with VMware virtualization and enterprise wireless network deployment and tuning, • Understanding of PKI, digital certificates, and enterprise authentication systems, • Proficient in core networking protocols (TCP/IP, DHCP, DNS, VLAN, routing, authentication), with strong troubleshooting and root cause analysis skills, • Experience with automation and AI-assisted network operations using Python, • Knowledge of Infrastructure as Code (IaC) and tools such as Terraform; familiar with NetDevOps principles, workflows, and toolchains, • Strong communication, ownership, and documentation skills; able to work independently in global teams, • Preferred certifications: AWS Advanced Networking Specialty, PCNSE, NSE7/NSE8, CCNP/CCIE, VMware VCP, Terraform Associate, • Good communication skills in Mandarin are a must

Pluxee is a global player in employee benefits and engagement that operates in 28 countries. Pluxee helps companies attract, engage, and retain talent thanks to a broad range of solutions across Meal & Food, Wellbeing, Lifestyle, Reward & Recognition, and Public Benefits. Powered by leading technology and more than 5,000 engaged team members, Pluxee acts as a trusted partner within a highly interconnected B2B2C ecosystem made up of more than 500,000 clients, 36 million consumers and 1.7 million merchants. Conducting its business as a trusted partner for more than 45 years, Pluxee is committed to creating a positive impact on all its stakeholders, from driving business to local communities, to supporting wellbeing at work for employees while protecting the planet. 🚀 Your next challenge Join Pluxee as a Senior Backend Engineer and become a key contributor of the product that employees actually experience every day. You'll join the Benefits Squad, the team at the center of Cobee by Pluxee: we own the domain that defines what benefits an employee can access, under what conditions, with what limits, and in what markets. This is where business complexity lives. Benefits isn't a simple CRUD layer — it's a rich domain with multi-tenant configurations, eligibility rules that vary by company, country, tax compliance requirements and real-time state that must always be consistent. Getting it right means hundreds of thousands of employees get their benefits seamlessly. Getting it wrong is visible immediately. 🚀 Key Responsibilities • Own the Core Domain Model: Design and evolve the backend services that define how benefits work — plans, entitlements, limits, and eligibility — ensuring the model stays clean, consistent, and extensible as we grow into new markets and product lines., • Tame Business Complexity: Translate intricate, multi-country regulatory and business rules into robust, maintainable code. You'll work closely with Product and Operations to model edge cases that matter in the real world., • Build for Consistency at Scale: Design systems where data integrity is non-negotiable across multi-tenant configurations, concurrent transactions, and distributed state — even as traffic and product scope grow., • Drive Product Velocity Without Cutting Corners: Deliver new benefit types, configurations, and market expansions at speed, without accumulating technical debt that slows down future iterations. You understand that clean domain design is the fastest path to sustainable velocity., • Quality as a Product Requirement: Write tests that encode business rules, not just code paths. In a domain where a misconfigured eligibility rule affects thousands of employees, comprehensive test coverage is a feature, not a hygiene task., • Operational Excellence & Observability: Monitor domain health in production. Build the dashboards and alerts that let the team detect when a benefit isn't being applied correctly before an employee notices., • Technical Leadership: Raise the bar through deep code reviews, clear technical documentation, and mentoring. Help the squad develop shared vocabulary for the domain — the kind of codebase where new engineers become productive fast., • AI-Driven Execution: Actively leverage AI tools and coding assistants on a daily basis to accelerate development cycles, automate repetitive tasks, and optimize overall team processes and delivery speed. Our daily stack is: • TypeScript, Node.js,React, React Native, Auth0, MongoDB (Atlas)., • We add tests to everything. Also, we log what's going on internally using Sentry., • We have our CI/CD with GitlabCI and we deploy several times each day., • Code collaboration: GitHub, Gitlab, Docker, K8, • AI & Productivity: GitHub Copilot, Claude Sonnet, ChatGPT, and other GenAI assistants., • Project management and knowledge: JIRA, Confluence, • Communication: Teams 🌟 You are a match • Proven Senior Expertise: 5+ years of experience developing production-grade applications. Experience within the Node.js ecosystem will be a plus., • Distributed Systems Mastery: Deep understanding of race conditions, eventual consistency, idempotency, and message brokers is a must., • Experience in developing medium/large-scale web applications and distributed systems., • Experience operating your services in a production environment., • Experience with unit, integration, functional, and e2e testing, • AI-Empowered Developer: A strong inclination to lean on AI tools for problem-solving, code generation, and workflow optimization, always looking for ways to work smarter and improve team efficiency., • Problem-Solving DNA: A systematic approach to troubleshooting complex issues in high-concurrency environments., • Quality First: Extensive experience with automated testing patterns and a "shift-left" security mindset., • Growth Mindset: A passion for continuous learning, open to feedback, and a drive to help others improve their craft., • Spanish & English fluency. ☀️ Happy at work 1) A meaningful job: Be the change! Help us build the future of employee benefits by bringing to life sustainable and personalized experiences and contribute to make a real impact on millions of lives. Our business model delivers not just for individuals but their communities too, by supporting local businesses and economies. 2) A great culture: People matter – a lot! Be part of a multicultural team that moves as one in a fast paced and innovative environment. We respect and care authentically about our people, we embrace wellbeing and work-life balance, new ideas and we have a lot of fun! 3) An empowering environment: Be yourself! At Pluxee we proudly embrace diversity and value the uniqueness of our talents, fostering an inclusive workplace where all abilities are celebrated, and equal learning and growing opportunities are a given.

Senior Security & Governance Engineer Location: Remote from Spain (an indefinite Spanish employment contract) We are looking for a Security & Governance Engineer to establish and enforce security controls, governance standards, and compliance requirements across AI platforms, APIs, and cloud-native services. The role focuses on authentication, authorization, data protection, network isolation, and security validation of enterprise integrations. The ideal candidate has strong cloud security expertise, deep knowledge of identity management, and experience participating in enterprise security review processes. Project Overview: Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. Requirements: • 4+ years application security or cloud security engineering, • Identity and access management (OAuth 2.0 / SigV4 / JWT security, OIDC), • TLS/mTLS configuration in cloud environments( TLS 1.3 enforcement), • Participation in InfoSec reviews for enterprise APIs, • IT-STD-317 / enterprise security standards, • Data classification for tool payloads, • Security testing (OWASP, pen-test methodology), • Network isolation (VPC, PrivateLink) Will be a plus: • MCP or tool-protocol security experience, • AWS WAF, Security Hub, Macie, • Prior work on enterprise AI platform governance Responsibilities: • Design and implement security controls for cloud-native applications, APIs, and AI platform integrations., • Define and enforce OAuth 2.0, JWT, OIDC, and SigV4 authentication and authorization standards., • Configure and maintain TLS 1.3 and secure communication channels across distributed systems., • Establish governance requirements for tool integrations, API interactions, and AI platform workloads., • Define and maintain data classification policies for tool payloads, metadata, and sensitive business information., • Design and implement network isolation strategies using VPCs, PrivateLink, and cloud-native security controls., • Perform security reviews, threat assessments, and architecture evaluations for enterprise services., • Conduct security testing activities, including penetration testing, OWASP-based assessments, and vulnerability validation., • Support InfoSec reviews, architecture review boards, and enterprise governance processes., • Develop security standards, implementation guidance, and compliance documentation., • Collaborate with engineering teams to embed security requirements into development and deployment workflows., • Monitor security posture and recommend improvements across cloud and AI platform environments., • Partner with stakeholders to ensure compliance with enterprise security policies and standards.

Platform Engineer (Semantic Discovery & Credentials) Location: Remote from Spain (an indefinite Spanish employment contract) We are looking for a Platform Engineer to build secure discovery and credential management capabilities for enterprise AI platforms. The role focuses on semantic search, vector-based discovery, secrets management, credential access services, and AI tool classification. The ideal candidate has hands-on experience with Python backend development, secrets management solutions, and modern semantic search technologies. Project Overview: Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. Requirements: • 4+ years platform or backend engineering, • Secrets management (Vault or AWS Secrets Manager), • Vector search or semantic search implementation, • Semantic discovery implementation (vector embeddings, OpenSearch or pgvector), • Vault (HashiCorp) integration for credential management, • AWS Secrets Manager as an alternative, • Python credential retrieval API, • MCP server capability and semantic domain taxonomy Will be a plus: • AWS Bedrock embedding models for semantic indexing, • OpenSearch Service or pgvector on RDS, • OAuth token lifecycle management Responsibilities: • Design and implement semantic discovery capabilities for MCP servers, tools, and agent ecosystems., • Build and maintain vector-based search solutions using embeddings, OpenSearch, pgvector, or similar technologies., • Develop metadata taxonomies and capability classification models for MCP services and AI tools., • Design and implement secure credential retrieval services using Python and cloud-native architectures., • Integrate HashiCorp Vault and AWS Secrets Manager to support secure secret storage and access management., • Build APIs for credential retrieval, access validation, and secure secret consumption., • Implement governance controls for credentials, service identities, and tool access policies., • Design semantic indexing pipelines and relevance-ranking strategies for discovery services., • Collaborate with platform, security, and AI engineering teams to establish discovery and credential management standards., • Implement observability, auditability, and monitoring for secret access and discovery workflows., • Support lifecycle management of credentials, service identities, and access tokens across distributed systems., • Produce technical documentation, architecture guidelines, and operational playbooks.

Senior Agentic Identity & Access Security Engineer Location: Remote from Spain (an indefinite Spanish employment contract) Our client is a leading global investment management company headquartered in London. It manages over $228 billion in assets and serves institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide. The firm specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science, machine learning, and AI are core components of its investment and research processes. As part of our collaboration we will focus on two foundational capabilities required to enable safe and scalable AI adoption across the enterprise: Agentic Security and AI-Ready Data Foundations. Project Overview: We define how autonomous agents authenticate, obtain scoped access, and operate safely across a large, regulated financial estate where the runtime security model genuinely does not exist yet. The value, and the danger, of agentic AI is set by what an agent can reach: an agent that inherits a full user context and long-lived secrets has an effectively unlimited blast radius. Your job is to close that gap. This is a hands-on senior-level role for a security engineer who remains deeply technical and actively ships production code, operating at the intersection of enterprise IAM, platform engineering, and the emerging domain of agentic AI security. You will design and build the IaC-driven, self-service identity patterns, credential flows, and onboarding standards that make the secure way the easy way, across high-velocity teams that have long governed themselves. Requirements: • 6+ years in security architecture and/or platform engineering, with a track record of shipping production code. Principal / Staff-level depth, ideally in a high-velocity or quant / financial-services engineering culture., • Deep, mechanical command of modern identity and authorisation: OIDC / OAuth2 / JWT — token issuance flows, claims design, and delegation / impersonation patterns., • Hands-on HashiCorp Vault experience, including dynamic / short-lived secrets and the realities of migrating off long-lived tokens without breaking a large application estate at once., • Keycloak policy modelling, ideally with the Terraform-driven configuration the firm already uses., • Strong Terraform / IaC fluency — enough to design repeatable, self-service patterns that others adopt, rather than bespoke per-team setups., • Working knowledge of the Active Directory + Entra legacy reality: nested groups, LDAP-backed role mapping, and the distribution-list-as-permission-group failure mode — able to design around the mess pragmatically. Nice to have • Real exposure to agentic / LLM systems and why they change the threat model — an agent actively probes and exploits standing permissions rather than stumbling onto them. That removes the “security through obscurity” cushion humans relied on., • Familiarity with MCP as an integration / onboarding standard, and at least one agent harness (Claude Agent SDK preferred)., • Experience with just-in-time, task-scoped delegation versus standing access, and risk-gated credential issuance (e.g. a short-lived token issued against a CrowdStrike-style risk score)., • Behavioural baselining / anomaly detection for workloads — defining “normal” for a recurring workflow and catching deviation at volume., • SIEM integration and action attribution: distinguishing an agent’s action from the human whose credentials it borrowed., • Financial-services audit literacy, • Consulting or client-facing / pre-sales experience. Responsibilities: • Design and ship IaC-driven, self-service identity patterns that roll out firm-wide without requiring a full Active Directory cleanup first., • Define the currently undefined agentic runtime security model: containerised code execution, permission delegation to agents, and MCP-based tool access., • Lead the transition from long-lived secrets toward ephemeral, time-based, risk-scored credentials, scoped to task duration and issued via JWT / OIDC., • Layer LLM / software guardrails (policy-as-text plus human review) on top of whatever hard guardrails are feasible across the estate., • Establish an opinionated onboarding standard (e.g. mandatory MCP interfaces) and win adoption through better defaults and developer experience, not mandate alone., • Design SIEM integration, behavioural baselining, and anomaly detection for agentic workflows, and centralise siloed audit logs to satisfy both security and regulatory requirements., • Take bounded beachheads (for example, authenticate users and then delegate scoped access to internal systems) from vague to delivered. Why this position: This role sits at the intersection of data engineering, AI, and financial services, solving one of the most important challenges in enterprise AI: enabling agents to securely access and reason over trusted data. You'll have the opportunity to design and build foundational platforms that combine large-scale data systems, governance, and AI technologies in highly regulated environments. It offers significant technical ownership, exposure to cutting-edge AI agent architectures, and the chance to shape how organisations safely unlock value from their data.

⚡ Empowering people. Unlocking innovation. With 1,000+ professionals and over a decade of experience, we’ve built an environment where talent is trusted, supported and continuously challenged to grow. 🤝 People-first culture built on trust and real proximity. 📉 Stable environment with turnover clearly below industry average. 💻 International, high-impact projects powered by modern tech stacks. 📚 €1,200 annual training budget per employee. 🕓 Real flexibility, not just a promise. 💬 Continuous feedback culture with monthly follow-ups and annual 360º reviews. 🏥 Private health insurance, flexible compensation and Wellhub. 💡 Active tech communities where knowledge is shared and innovation evolves. 🎉 A team that delivers and celebrates together. Ready to grow with us? Take a look at this opportunity 👇 At Capitole, we are looking for an AI Engineer to join an exciting international project within a leading German automotive company. You will play a key role in the evolution of conversational and agentic AI solutions, driving the adoption of cutting-edge technologies and ensuring their successful integration into a global enterprise environment. What will you do? • Collaborate closely with Product Owners and business stakeholders to define and deliver AI-driven solutions., • Design and evolve the conversational AI platform strategy in alignment with enterprise architecture and IT guidelines., • Lead proof of concepts (PoCs) and pilot initiatives to validate technologies, platforms, and architectural approaches., • Identify and develop new conversational and agentic AI use cases with global business teams., • Drive platform adoption and promote AI best practices across the organization., • Manage relationships with technology providers and delivery partners., • Ensure quality standards, technical governance, security compliance, and operational excellence., • Lead integrations between AI solutions and the enterprise ecosystem., • Guide architectural decisions and technology evolution initiatives., • Evaluate emerging AI technologies, foundation models, and LLM-based solutions to drive innovation and business value., • Ensure all developments align with corporate AI governance and responsible AI principles., • Support security, administration, and operational processes related to AI platforms. What are we looking for? • 5+ years of experience in AI Engineering, Conversational AI, Software Engineering, or similar roles., • Strong experience working with cloud platforms such as Azure and/or Google Cloud Platform (GCP)., • Hands-on experience with Agentic AI architectures, Agent2Agent (A2A) frameworks, and Google Agent Development Kit (ADK)., • Experience designing and developing conversational AI solutions, including chatbots and voicebots., • Solid understanding of Large Language Models (LLMs) and Generative AI technologies., • Experience integrating AI solutions within complex enterprise environments., • Strong communication and stakeholder management skills., • Fluent English communication skills. Nice to have • Experience with AI governance, security, and responsible AI frameworks., • Knowledge of MLOps, AI platform operations, and monitoring., • Experience in the automotive sector or other international enterprise environments., • Exposure to multi-agent systems and advanced orchestration frameworks. Location: 100% Remote Schedule: 40h/week. Flexible, with reduced hours on Fridays Language: English (C1), Spanish (B2) Want to know more? Click here 🖱️ and find out! See what people say about us 🕵️ Glassdoor Reviews Feel free to send us your profile, we are excited to meet you! 💙 The employee will adhere to information security policies: -Will have access to confidential information related to Capitole and the project they are working on. -Must comply with the security policies and internal policies of the company and the client. -Must sign an NDA.

Leverage your Career within the greatest Identity Security Community We champion #IAMExcellence Join our team as a (Senior) IAM Consultant – ForgeRock / Ping Identity (m/f/d) – either on-site/hybrid at our locations in Barcelona or Madrid, or flexibly remote from within Spain. iC Consult is a global Identity Security consultancy and a true People Business: a close-knit community of Identity Security enthusiasts who combine agility, direct impact, and strong leadership with global delivery excellence – jointly optimizing people desirability, technology feasibility, and sustainable business viability. Within this environment, you will work in a local team setup that is part of our multimatrix organization – meaning your local team, your project team, and your reporting line may differ, giving you broad exposure, flexibility, and diverse collaboration opportunities. Your Responsibilities: • Architect Modern Authentication: Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems., • Master Identity Standards: Architect and govern complex OAuth 2.0 and OpenID Connect (OIDC) flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies., • Drive Passwordless Innovation: Lead the strategy and design for Passkeys (WebAuthn) and passwordless authentication to eliminate credential-based risks., • Platform Orchestration: Serve as the subject matter expert for the Ping Identity suite (formerly ForgeRock), including PingAM, PingIDM, and PingDS, to build scalable identity solutions., • Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices. Your Experience: • PingIdentity/ForgeRock Ecosystem: Hands-on experience configuring and deploying PingAM, PingIDM, and PingDS (formerly ForgeRock) in enterprise environments., • IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs., • Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments., • Passkey Proficiency: Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics., • Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines. Bonus Points: • Familiarity with European identity standards (eIDAS 2.0, LoA, and electronic signatures like AdES/QES)., • Experience with PSD2/SCA compliance, orchestrated MFA, and continuous authentication., • Expertise in managing complex B2C/B2B identity lifecycles and device-binding strategies What we offer: • 30 days of vacation (plus public holidays) as well as a flextime model and the option to work from your home office, promoting your life balance, • High-quality equipment of your choice including company mobile phone – whether Apple or Windows, you decide which top equipment you prefer to work with, • iC Consult University – our comprehensive onboarding program accompanies you on your individual induction path with training modules, mentoring programs and events and a 3-day onsite bootcamp for your new start with us, in which you will be trained around representing iC Consult and IAM, • Through our iC Consult Academy you have access to internal and external trainings tailored to your needs – 10 days a year are dedicated to your personal and professional development, • Further Benefit like a personal coach, language training platforms, food vouchers, health insurance and employee discounts on products and services from well-known suppliers, • Regular team and company events in a relaxed atmosphere to strengthen the corporate climate, • A workplace with flat hierarchies, short decision-making paths, and a high degree of personal responsibility, providing substantial decision-making freedom Central Office: iC Consult Spain S.L. Gran Via de Carles III, 94, planta 8 puerta 3, 08028 Barcelona Spain www.ic-consult.com Apply now and become part of our team! If you have any questions, we’re always here for you and look forward to getting in touch. Please send us your application documents (CV, certificates, salary expectations, and possible start date) via LinkedIn Easy Apply. Diversity matters to us. We welcome applications regardless of gender, age, origin, religion or belief, disability, sexual identity, or any other characteristic protected by law. All hiring decisions are based solely on qualifications and suitability. For more information, visit: https://careers.ic-consult.com/en/ The protection of your data is important to us. You can find all information on how we handle your data in our privacy policy.

🚀 We are still looking for the very Top Talent…and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies. 🔎 What we look for? We are looking for 3 Apache Spark (Backend Developer Analyst) with at least 2 years of experience in backend application development, particularly within Big Data environments using Apache Spark. The ideal candidate is passionate about technology, follows Agile development methodologies, and has experience working in collaborative, continuously improving software teams. Strong knowledge of SQL, Continuous Integration practices (Git, GitHub, Jenkins), and excellent communication skills in English (B2+/C1 level) are essential. Main tasks and accountabilities will be: Design, develop, and maintain backend applications using Apache Spark and Big Data technologies. Participate in the full Software Development Life Cycle (SDLC), from requirements analysis to deployment and maintenance. Collaborate with multidisciplinary teams following Agile methodologies. Develop, optimize, and maintain SQL queries and database-related processes. Implement and support Continuous Integration and Continuous Delivery (CI/CD) pipelines using tools such as Git, GitHub, and Jenkins. Create and maintain automation scripts, mainly using Bash. Support and monitor batch processing environments using tools such as Control-M. Ensure code quality, security, and compliance with development best practices, leveraging tools such as SonarQube. Contribute to cloud-based and containerized environments using technologies such as Docker, Kubernetes, Azure, or AWS. Participate in the implementation and maintenance of SOA (Service-Oriented Architecture) solutions. What do we expect from you? 💡 Mandatory requirements: Minimum 2+ years of experience in backend software development. Hands-on experience with Apache Spark and Big Data technologies. Strong understanding of Agile software development practices. Experience with Git, GitHub, and Jenkins in CI/CD environments. Solid knowledge of SQL. English proficiency at B2 level or higher (C1 preferred). Nice to have: Experience with Jenkins orchestration. Knowledge of Bash scripting. Experience with Control-M scheduling and monitoring tools. Familiarity with SDLC management tools such as HP ALM. Basic knowledge of cybersecurity and code quality tools (e.g., SonarQube). Understanding of cloud computing concepts and technologies, including Docker, Kubernetes, Azure, AWS, and Object Storage Services (OSS/S3). Exposure to SOA Architecture and distributed systems. Key skills: Apache Spark Agile Methodologies Git & GitHub Jenkins SQL English Communication (B2+/C1) Bash Scripting Control-M Docker & Kubernetes Microsoft Azure & AWS SOA Architecture Cybersecurity & Code Quality Best Practices ⏰ Work mode: remote within Spain. Business Hours 💰 What can we offer? -✈️ 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! -❤️ Numerous benefits (Heath Care Plan, teleworking compensation, Life and Accident Insurances). -🍴 `Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Heath Care Plan…) -🎓 Free access to several training platforms -🚀 Professional stability and career plans -🚶 UST also, compensates referrals from which you could benefit when you refer professionals. -🔗 The option to pick between 12 or 14 payments along the year. -🏡 Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…) -🎁 UST Club Platform discounts and gym Access discounts 📧 If you would like to know more, do not hesitate to apply and we’ll get in touch to fill you in details. UST is waiting for you! In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate.

Senior Data Engineer (Metadata & Lineage Integration) Location: Remote from Spain (an indefinite Spanish employment contract) Our client is a leading global investment management company headquartered in London. It manages over $228 billion in assets and serves institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide. The firm specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science, machine learning, and AI are core components of its investment and research processes. As part of our collaboration we will focus on two foundational capabilities required to enable safe and scalable AI adoption across the enterprise: Agentic Security and AI-Ready Data Foundations. Project Overview: We build the data foundations that make AI useful and safe inside regulated financial firms. The value of AI is capped by the data its agents can reach: if an agent cannot find, interpret, trace or be correctly permissioned against data, the capability is useless, or worse, unsafe. Your job is to close that gap. This is a hands-on senior role for an excellent Python engineer with strong data-engineering skills who is genuinely comfortable building with AI agents. You will design and build the catalogue, semantic, entitlement and analytical layers that turn large on-premise data estates into something agents can use. Requirements: • 5+ years building production data systems in Python, with strong engineering fundamentals (testing, code review, performance) and solid SQL., • Experience building crawlers, harvesters or connector frameworks that extract inventories, schemas, field dictionaries and lineage from databases, filesystems, message platforms and API surfaces, in addition to conventional data pipelines., • Event-driven integration with Kafka or similar, including secure producer patterns (mTLS or equivalent) and schema-managed topics., • Experience with search and document stores that back catalogue platforms (e.g. Elasticsearch, OpenSearch, MongoDB or similar)., • Working knowledge of lineage capture and modelling, with OpenLineage or similar as a reference, and readiness to work with proprietary in-house event models., • Experience applying LLMs to metadata work, such as drafting descriptions and classifications for human review, including quality evaluation of the generated output., • Readiness to work inside another team's codebase, complete components that the team has designed, and contribute through its review process., • Fluent English for written and spoken communication with client teams. Will be a plus • Time-series and tick stores (e.g. kdb+ or similar columnar time-series databases), market-data vendor schema APIs, symbology and asset-class concepts (market-data opening)., • MS SQL Server estates, reporting and BI systems, inventory extraction from application metadata tables (reporting opening)., • Columnar and lake formats (Parquet or similar), large object stores, orchestration platforms (Airflow or similar)., • Working-level knowledge of graph databases; data contracts and data quality frameworks; catalogue platforms (DataHub or similar) on the ingestion side., • Day-to-day use of AI coding agents; building data services consumed by AI agents., • Experience in financial services or other regulated on-premise environments. Responsibilities: • Build extraction, enrichment and registration paths that populate domain catalogues from live estates (databases, time-series stores, streaming platforms, filesystems, internal and vendor APIs) and connect them to the client's central catalogue through its existing mechanisms., • Extend an existing scraping capability from bare dataset and symbol inventories to full metadata: descriptions, field-level dictionaries, date ranges, asset-class and cadence tags, vendor provenance., • Load vendor schema metadata at scale, through vendor APIs, into a persistent internal knowledge base designed for step-by-step disclosure to humans and LLMs., • Seed report and dataset inventories from existing application metadata tables and ETL sources; combine them with LLM-drafted descriptions approved by stewards., • Integrate lineage into the client's lineage backend across batch, streaming and cross-system report chains, completing the client's existing registration designs., • Implement the federation contract defined by the architect: stable identities, ownership, hierarchy, links and availability state exposed by each local catalogue to the central layer., • Keep metadata current through scheduled and event-driven refresh, with explicit staleness detection and quality signals. Why this position: This role sits at the intersection of data engineering, AI, and financial services, solving one of the most important challenges in enterprise AI: enabling agents to securely access and reason over trusted data. You'll have the opportunity to design and build foundational platforms that combine large-scale data systems, governance, and AI technologies in highly regulated environments. It offers significant technical ownership, exposure to cutting-edge AI agent architectures, and the chance to shape how organisations safely unlock value from their data.

🧩 Job Opportunity: Senior Solution Architect Work Model: Remote Contract Type: Permanent Working Hours: Full-time 🌐 About the role At SOTEC Consulting – Astek Group, we are looking for a Solution Architect to join an international enterprise project. This role acts as the primary authority for end-to-end integration architecture and systemic design across a multi-platform enterprise ecosystem. You will be responsible for designing, validating and governing highly scalable, secure and resilient data integrations across multiple disparate systems, bridging business objectives with complex technical execution while driving architectural governance within a global governance framework. 🪛 Responsibilities • Lead the end-to-end architectural design of complex, high-throughput integration streams., • Define integration strategies based on Event-Driven Architectures, synchronous and asynchronous APIs, Publish/Subscribe (Pub/Sub) and ETL/ELT pipelines., • Define and enforce technical standards, API contracts and middleware strategies across multiple platforms., • Govern data schemas, payload structures, message formats and collaborate with Data Engineering teams on mappings, transformation rules and serialization protocols., • Drive resilient solution design with a focus on scalability, reliability, error handling, idempotency, retry policies, circuit breakers and rate limiting., • Present and defend architectural decisions, technical designs and engineering trade-offs before architecture boards and senior stakeholders., • Review and approve vendor technical deliverables, ensuring alignment with the target-state architecture., • Produce architecture blueprints, sequence diagrams, Solution Design Documents (SDDs) and development-ready technical documentation. 🛠️ Mandatory Requirements • Proven experience as a Solution Architect leading complex enterprise integration projects involving multiple interconnected systems., • Strong expertise in end-to-end integration architecture and systemic design., • Deep understanding of data modelling, schema design, distributed systems and data synchronization., • Experience designing enterprise integration solutions using Event-Driven Architectures, synchronous/asynchronous APIs, Pub/Sub and ETL/ELT pipelines., • Experience producing architectural documentation, including Solution Design Documents (SDDs), architecture blueprints and sequence diagrams., • Excellent communication skills with the ability to explain complex technical concepts, defend architectural decisions and influence senior technical stakeholders., • Pragmatic engineering mindset with the ability to balance engineering best practices, business priorities, delivery velocity and legacy constraints while maintaining security, scalability and system resilience., • Strong ownership, analytical mindset and the ability to challenge assumptions constructively and raise risks early., • English level: C1 (mandatory). 📃 Nice to Have • Experience integrating MarTech platforms such as Adobe., • Experience integrating CRM platforms such as Salesforce or Veeva., • Experience integrating Customer Experience platforms., • Knowledge of digital marketing ecosystems, omnichannel engagement platforms, customer interaction data flows and downstream analytics., • Experience with Customer Identity & Access Management (CIAM), Single Sign-On (SSO), OAuth2, OpenID Connect (OIDC) and distributed consent management frameworks., • Experience within Pharmaceutical, Healthcare or similarly regulated environments involving GDPR, HIPAA, compliance frameworks, data privacy and system validation. 🎯 What we offer • Participation in innovative projects with high business impact., • Collaborative culture with multidisciplinary teams., • Professional development plans and continuous learning. 🌍 Why join SOTEC / ASTEK? Joining SOTEC Consulting means becoming part of a company with more than 30 years of experience in the IT sector, backed by the strength of the ASTEK Group. Thanks to this integration, you will have access to large-scale international projects, collaborating with global teams and working in multicultural environments that foster your professional growth. SOTEC is committed to equal opportunities regardless of race, gender, religion, age, sexual orientation, marital status, disability, nationality or gender identity. We are proud to promote an inclusive recruitment process free from bias. 📈 Take the next step in your career and become part of projects that are shaping the future of enterprise technology. 📩 We'd love to hear from you!

Pluxee is a global player in employee benefits and engagement that operates in 28 countries. Pluxee helps companies attract, engage, and retain talent thanks to a broad range of solutions across Meal & Food, Wellbeing, Lifestyle, Reward & Recognition, and Public Benefits. Powered by leading technology and more than 5,000 engaged team members, Pluxee acts as a trusted partner within a highly interconnected B2B2C ecosystem made up of more than 500,000 clients, 36 million consumers and 1.7 million merchants. Conducting its business as a trusted partner for more than 45 years, Pluxee is committed to creating a positive impact on all its stakeholders, from driving business to local communities, to supporting wellbeing at work for employees while protecting the planet. 🚀 Your next challenge Join Pluxee as a Senior Backend Engineer and become a key contributor of the product that employees actually experience every day. You'll join the Benefits Squad, the team at the center of Cobee by Pluxee: we own the domain that defines what benefits an employee can access, under what conditions, with what limits, and in what markets. This is where business complexity lives. Benefits isn't a simple CRUD layer — it's a rich domain with multi-tenant configurations, eligibility rules that vary by company, country, tax compliance requirements and real-time state that must always be consistent. Getting it right means hundreds of thousands of employees get their benefits seamlessly. Getting it wrong is visible immediately. 🚀 Key Responsibilities • Own the Core Domain Model: Design and evolve the backend services that define how benefits work — plans, entitlements, limits, and eligibility — ensuring the model stays clean, consistent, and extensible as we grow into new markets and product lines., • Tame Business Complexity: Translate intricate, multi-country regulatory and business rules into robust, maintainable code. You'll work closely with Product and Operations to model edge cases that matter in the real world., • Build for Consistency at Scale: Design systems where data integrity is non-negotiable across multi-tenant configurations, concurrent transactions, and distributed state — even as traffic and product scope grow., • Drive Product Velocity Without Cutting Corners: Deliver new benefit types, configurations, and market expansions at speed, without accumulating technical debt that slows down future iterations. You understand that clean domain design is the fastest path to sustainable velocity., • Quality as a Product Requirement: Write tests that encode business rules, not just code paths. In a domain where a misconfigured eligibility rule affects thousands of employees, comprehensive test coverage is a feature, not a hygiene task., • Operational Excellence & Observability: Monitor domain health in production. Build the dashboards and alerts that let the team detect when a benefit isn't being applied correctly before an employee notices., • Technical Leadership: Raise the bar through deep code reviews, clear technical documentation, and mentoring. Help the squad develop shared vocabulary for the domain — the kind of codebase where new engineers become productive fast., • AI-Driven Execution: Actively leverage AI tools and coding assistants on a daily basis to accelerate development cycles, automate repetitive tasks, and optimize overall team processes and delivery speed. Our daily stack is: • TypeScript, Node.js,React, React Native, Auth0, MongoDB (Atlas)., • We add tests to everything. Also, we log what's going on internally using Sentry., • We have our CI/CD with GitlabCI and we deploy several times each day., • Code collaboration: GitHub, Gitlab, Docker, K8, • AI & Productivity: GitHub Copilot, Claude Sonnet, ChatGPT, and other GenAI assistants., • Project management and knowledge: JIRA, Confluence, • Communication: Teams 🌟 You are a match • Proven Senior Expertise: 5+ years of experience developing production-grade applications. Experience within the Node.js ecosystem will be a plus., • Distributed Systems Mastery: Deep understanding of race conditions, eventual consistency, idempotency, and message brokers is a must., • Experience in developing medium/large-scale web applications and distributed systems., • Experience operating your services in a production environment., • Experience with unit, integration, functional, and e2e testing, • AI-Empowered Developer: A strong inclination to lean on AI tools for problem-solving, code generation, and workflow optimization, always looking for ways to work smarter and improve team efficiency., • Problem-Solving DNA: A systematic approach to troubleshooting complex issues in high-concurrency environments., • Quality First: Extensive experience with automated testing patterns and a "shift-left" security mindset., • Growth Mindset: A passion for continuous learning, open to feedback, and a drive to help others improve their craft., • Spanish & English fluency. ☀️ Happy at work 1) A meaningful job: Be the change! Help us build the future of employee benefits by bringing to life sustainable and personalized experiences and contribute to make a real impact on millions of lives. Our business model delivers not just for individuals but their communities too, by supporting local businesses and economies. 2) A great culture: People matter – a lot! Be part of a multicultural team that moves as one in a fast paced and innovative environment. We respect and care authentically about our people, we embrace wellbeing and work-life balance, new ideas and we have a lot of fun! 3) An empowering environment: Be yourself! At Pluxee we proudly embrace diversity and value the uniqueness of our talents, fostering an inclusive workplace where all abilities are celebrated, and equal learning and growing opportunities are a given.

Senior IT Systems Engineer - San Sebastian, Spain (On-site) - SaaS Own and continuously improve the technology ecosystem that powers our employees' daily work. You will design, implement, and support secure, scalable, and reliable IT infrastructure, identity platforms, endpoint management solutions, and SaaS applications. Key Requirements: • 7+ years of experience in IT Engineering, Systems Engineering, Workplace Technology, or similar roles., • Strong hands-on JAMF administration experience in a macOS-heavy environment., • Proven experience managing Identity & Access Management (IAM) platforms, particularly Microsoft Entra ID., • Expertise in endpoint management, including device compliance, software deployment, patch management, and lifecycle management., • Strong knowledge of SSO integrations, SCIM provisioning, identity lifecycle management, and access governance., • Experience implementing and supporting Zero Trust principles, least-privilege access, and secure authentication practices., • Advanced scripting and automation skills, with a track record of building scalable IT automation solutions., • Ability to independently troubleshoot and resolve complex technical issues, performing root cause analysis when needed., • Experience managing and optimizing macOS endpoints through enterprise MDM solutions., • Strong understanding of SaaS administration, collaboration platforms, and enterprise IT infrastructure., • Demonstrated ability to improve IT processes, workflows, documentation, and operational efficiency., • Excellent stakeholder management and communication skills, with the ability to support both technical and non-technical audiences., • Strong customer-service mindset and experience supporting senior stakeholders and business-critical teams., • Fluency in Spanish and English. Preferred Qualifications: • Experience working in a technology company or engineering-led environment., • Experience managing SaaS ecosystems, including SSO, SCIM, MDM, and SaaS access governance., • Familiarity with security and compliance frameworks, audit processes, and risk remediation initiatives., • Knowledge of endpoint security controls and secure-by-design IT operations., • Experience with automation platforms and/or configuration management solutions at scale., • Previous experience mentoring colleagues and serving as a senior technical reference within an IT team., • Relevant certifications in JAMF, Microsoft Entra ID, Identity & Access Management, Endpoint Management, IT Service Management (ITIL), or Security and Compliance frameworks.

Are you a software developer with experience in Java, C++, and Linux and an interest in Market Risk? Do you enjoy working close to the engine, investigating complex calculations, debugging technical issues, and contributing to targeted developments? At Qaracter, we're looking for a Java / C++ Developer to join a technology team working on financial risk solutions. You will combine Java development with C++ debugging and troubleshooting, helping ensure the reliability, performance, and security of critical risk applications. This is an excellent opportunity for developers who enjoy solving complex technical problems, working with financial systems, and gaining deeper exposure to Market Risk environments. 🔍 What You'll Do • Develop and maintain Java applications, implementing targeted developments and addressing identified vulnerabilities., • Debug and analyze C++ engine traces to investigate calculation discrepancies, unexpected behavior, and technical errors., • Perform small-scale developments and adjustments in C++ when required., • Analyze and troubleshoot issues across both Java and C++ components., • Use Git for version control and collaborate with other developers throughout the development lifecycle., • Work in Linux environments, performing basic administration, troubleshooting, and application support tasks., • Investigate technical incidents and help identify the root cause of calculation or application errors., • Apply knowledge of Market Risk concepts to understand and troubleshoot business and technical requirements., • Participate in code reviews, technical discussions, testing, and maintenance activities., • Work with AI-powered development tools such as Devin to support development and problem-solving activities. ✔️ What We're Looking For • 2+ years of professional experience in software development., • Strong knowledge of Java., • Experience with C++, particularly for debugging and troubleshooting., • Basic to intermediate knowledge of Linux environments., • Experience with Git and version control workflows., • Strong debugging and problem-solving skills across Java and C++ applications., • Knowledge or experience in Market Risk or financial risk systems., • Ability to investigate application behavior through logs, traces, and debugging tools., • Comfortable working on both development and maintenance tasks., • English level B2 or higher is highly valued. ⭐ Nice to Have • Previous experience working with Market Risk engines or financial risk platforms., • Experience troubleshooting complex numerical calculations or financial models., • Familiarity with security practices and vulnerability remediation in Java applications., • Experience with CI/CD environments and automated testing., • Experience working with AI-assisted development tools such as Devin, GitHub Copilot, Claude Code, or similar., • Knowledge of Agile methodologies such as Scrum or Kanban., • Experience in banking, financial services, or consulting environments. 🌟 What We Offer • Opportunity to work on financial technology and Market Risk projects using Java and C++., • Exposure to complex risk engines and critical financial systems., • Remote work model., • Competitive salary and comprehensive benefits package., • Training, certifications, and continuous learning opportunities., • Flexible retribution options, including meal vouchers, transportation, childcare, and private health insurance., • Collaborative, international, and technology-driven environment., • Access to modern AI development tools and engineering practices., • Opportunities for professional growth within an international consulting environment. 🌍 About Qaracter Qaracter is an international consulting firm providing business, financial, risk, technology, and operations advisory services. We combine deep industry knowledge with hands-on execution to deliver high-impact solutions tailored to our clients' needs. With offices in Spain, Argentina, Mexico, Brazil, and the United States, and projects across Europe and the UK, we partner with leading organizations to solve complex business and technology challenges while fostering the professional growth of our teams. 🟦 Equal Opportunity Statement At QARACTER Group, we are committed to ensuring equal opportunities and non-discrimination in all our processes, promoting an inclusive and diverse work environment. All applications are welcome regardless of sex, gender, gender identity or expression, sexual orientation, origin, ethnicity, age, disability, or any other personal or social condition, in line with our Plan de Igualdad and our commitment to equity.

🚀 UST is looking for the very Top Talent…and we would be delighted if you were to join our family! More in detail, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and a presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies. 🔍 What are we looking for? We are currently looking for a Fullstack Developer to join one of our biggest clients in the banking sector. 👩🏼 💻✅ Key Skills • Java, Spring Boot, Hibernate/JPA, • Angular, HTML, CSS, JavaScript, TypeScript, • Oracle, PostgreSQL, SQL, • REST API design and integration, • Microservices Architecture, • Git, GitHub, Jenkins, CI/CD, • Scrum, Agile methodologies, • Docker, OpenShift, DevOps & Cloud technologies 🤖 AI-Native Engineering • Hands-on experience with AI-powered development tools, • Prompt Engineering, • AI-assisted software development practices, • AI integration within engineering processes and delivery pipelines 🌟 Nice to Have • Kubernetes, • Event-driven architectures & messaging systems, • Automated testing frameworks, • GenAI and AI/ML platform integrations, • Software security & secure coding practices, • AWS, • Monitoring, logging, and observability tools 🌎 Languages: • English C1 💰 What can we offer? ✈️ 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! ❤️ Numerous benefits (Heath Care Plan, Internet Connectivity, Life and Accident Insurances). 🍴 `Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Heath Care Plan…) 🎓 Free access to several training platforms 🚀 Professional stability and career plans 🚶 UST also, compensates referrals from which you could benefit when you refer professionals. 🔗 The option to pick between 12 or 14 payments along the year. 🏡 Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…) 🎁 UST Club Platform discounts and gym Access discounts 📧 If you would like to know more, do not hesitate to apply and we’ll get in touch to fill you in details. UST is waiting for you! In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate.

🚀 We are still looking for the very Top Talent…and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35,000 employees all over the world and presence in more than 35 countries. We are leaders in digital technology services, and we provide large-scale technological solutions to big companies. 🔎 What we look for? We are looking for a Java Developer to join a highly innovative team working within a microservice-based cloud environment in the utility technology sector. You will play a key role in designing, developing, and supporting secure, scalable, and maintainable Java services, APIs, and integrations that connect critical business systems and internal tools. ⚙ Key Responsibilities: • Design and implement Java services, REST APIs, integration adapters, and extension components using Java and the Spring ecosystem., • Translate business requirements, user stories, and interface specifications into clean, maintainable, and scalable code., • Develop RESTful APIs with proper validation, versioning, pagination, security, and error-handling mechanisms., • Implement reliable event-driven and asynchronous integrations, ensuring resiliency through retry, timeout, correlation, idempotency, and dead-letter patterns., • Build and optimize persistence layers using Hibernate/JPA and SQL best practices., • Integrate microservices and internal tools with CRM, finance, payment, analytics, web, and mobile platforms., • Create and maintain unit, integration, component, and contract tests to ensure high-quality software delivery., • Participate in code reviews, technical design sessions, backlog refinement, and secure development practices., • Troubleshoot production incidents using logs, metrics, traces, and database analysis, providing sustainable root-cause solutions., • Support CI/CD pipelines, automated quality controls, deployment processes, and cloud-native engineering practices., • Contribute to technical documentation, operational procedures, and service supportability improvements., • Ensure solutions meet performance, reliability, scalability, and security standards. 💡 Mandatory Requirements: • Strong professional experience developing enterprise applications with Java., • Hands-on experience with Spring Framework and Spring Boot., • Solid knowledge of Hibernate/JPA, relational databases, and SQL optimization., • Experience designing and consuming REST APIs and working with OpenAPI/Swagger specifications., • Experience with event-driven architectures, asynchronous messaging, or distributed systems., • Strong testing experience using JUnit, Mockito, and integration/contract testing frameworks., • Experience working with Git, Maven/Gradle, CI/CD pipelines, and code review practices., • Understanding of secure coding principles, authentication, authorization, observability, logging, and monitoring., • Strong analytical, problem-solving, and debugging skills., • Excellent communication skills and fluent English. 🎩 Nice to have: • Experience in utility, customer information, billing, payment, or energy-sector platforms., • Knowledge of platforms such as SAP Utilities, Oracle Utilities, Kraken Technologies, or Hansen. Experience with AWS, including: • API Gateway, • Lambda, • Fargate, • EventBridge, • SQS/SNS, • Aurora, • CloudWatch, • IAM, • Secrets Manager, • Experience with containers, infrastructure-as-code, and cloud-native deployment patterns., • Knowledge of distributed tracing, performance testing, and production support for high-volume systems., • Understanding of customer, metering, usage, tariff, billing, payment, and debt-management processes within utilities. 💰 What can we offer? • ✈️ 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!, • ❤️ Numerous benefits (Health Care Plan, Internet Connectivity, Life and Accident Insurances)., • 🍴 Retribución Flexible Program: (Meals, Kindergarten, Transport, Online English Lessons, Health Care Plan…), • 🎓 Free access to several training platforms., • 🚀 Professional stability and career plans., • 🚶 UST also compensates referrals, from which you could benefit when you refer professionals., • 🔗 The option to pick between 12 or 14 payments along the year., • 🏡 Real Work-Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)., • 🎁 UST Club Platform discounts and gym access discounts. 📧 If you would like to know more, do not hesitate to apply and we’ll get in touch to fill you in details. UST is waiting for you! At UST, we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation, or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with a disability certificate.

Platform Engineer (Semantic Discovery & Credentials) Location: Remote from Spain (an indefinite Spanish employment contract) We are looking for a Platform Engineer to build secure discovery and credential management capabilities for enterprise AI platforms. The role focuses on semantic search, vector-based discovery, secrets management, credential access services, and AI tool classification. The ideal candidate has hands-on experience with Python backend development, secrets management solutions, and modern semantic search technologies. Project Overview: Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. Requirements: • 4+ years platform or backend engineering, • Secrets management (Vault or AWS Secrets Manager), • Vector search or semantic search implementation, • Semantic discovery implementation (vector embeddings, OpenSearch or pgvector), • Vault (HashiCorp) integration for credential management, • AWS Secrets Manager as an alternative, • Python credential retrieval API, • MCP server capability and semantic domain taxonomy Will be a plus: • AWS Bedrock embedding models for semantic indexing, • OpenSearch Service or pgvector on RDS, • OAuth token lifecycle management Responsibilities: • Design and implement semantic discovery capabilities for MCP servers, tools, and agent ecosystems., • Build and maintain vector-based search solutions using embeddings, OpenSearch, pgvector, or similar technologies., • Develop metadata taxonomies and capability classification models for MCP services and AI tools., • Design and implement secure credential retrieval services using Python and cloud-native architectures., • Integrate HashiCorp Vault and AWS Secrets Manager to support secure secret storage and access management., • Build APIs for credential retrieval, access validation, and secure secret consumption., • Implement governance controls for credentials, service identities, and tool access policies., • Design semantic indexing pipelines and relevance-ranking strategies for discovery services., • Collaborate with platform, security, and AI engineering teams to establish discovery and credential management standards., • Implement observability, auditability, and monitoring for secret access and discovery workflows., • Support lifecycle management of credentials, service identities, and access tokens across distributed systems., • Produce technical documentation, architecture guidelines, and operational playbooks.

Senior Data Engineer (Metadata & Lineage Integration) Location: Remote from Spain (an indefinite Spanish employment contract) Our client is a leading global investment management company headquartered in London. It manages over $228 billion in assets and serves institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide. The firm specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science, machine learning, and AI are core components of its investment and research processes. As part of our collaboration we will focus on two foundational capabilities required to enable safe and scalable AI adoption across the enterprise: Agentic Security and AI-Ready Data Foundations. Project Overview: We build the data foundations that make AI useful and safe inside regulated financial firms. The value of AI is capped by the data its agents can reach: if an agent cannot find, interpret, trace or be correctly permissioned against data, the capability is useless, or worse, unsafe. Your job is to close that gap. This is a hands-on senior role for an excellent Python engineer with strong data-engineering skills who is genuinely comfortable building with AI agents. You will design and build the catalogue, semantic, entitlement and analytical layers that turn large on-premise data estates into something agents can use. Requirements: • 5+ years building production data systems in Python, with strong engineering fundamentals (testing, code review, performance) and solid SQL., • Experience building crawlers, harvesters or connector frameworks that extract inventories, schemas, field dictionaries and lineage from databases, filesystems, message platforms and API surfaces, in addition to conventional data pipelines., • Event-driven integration with Kafka or similar, including secure producer patterns (mTLS or equivalent) and schema-managed topics., • Experience with search and document stores that back catalogue platforms (e.g. Elasticsearch, OpenSearch, MongoDB or similar)., • Working knowledge of lineage capture and modelling, with OpenLineage or similar as a reference, and readiness to work with proprietary in-house event models., • Experience applying LLMs to metadata work, such as drafting descriptions and classifications for human review, including quality evaluation of the generated output., • Readiness to work inside another team's codebase, complete components that the team has designed, and contribute through its review process., • Fluent English for written and spoken communication with client teams. Will be a plus • Time-series and tick stores (e.g. kdb+ or similar columnar time-series databases), market-data vendor schema APIs, symbology and asset-class concepts (market-data opening)., • MS SQL Server estates, reporting and BI systems, inventory extraction from application metadata tables (reporting opening)., • Columnar and lake formats (Parquet or similar), large object stores, orchestration platforms (Airflow or similar)., • Working-level knowledge of graph databases; data contracts and data quality frameworks; catalogue platforms (DataHub or similar) on the ingestion side., • Day-to-day use of AI coding agents; building data services consumed by AI agents., • Experience in financial services or other regulated on-premise environments. Responsibilities: • Build extraction, enrichment and registration paths that populate domain catalogues from live estates (databases, time-series stores, streaming platforms, filesystems, internal and vendor APIs) and connect them to the client's central catalogue through its existing mechanisms., • Extend an existing scraping capability from bare dataset and symbol inventories to full metadata: descriptions, field-level dictionaries, date ranges, asset-class and cadence tags, vendor provenance., • Load vendor schema metadata at scale, through vendor APIs, into a persistent internal knowledge base designed for step-by-step disclosure to humans and LLMs., • Seed report and dataset inventories from existing application metadata tables and ETL sources; combine them with LLM-drafted descriptions approved by stewards., • Integrate lineage into the client's lineage backend across batch, streaming and cross-system report chains, completing the client's existing registration designs., • Implement the federation contract defined by the architect: stable identities, ownership, hierarchy, links and availability state exposed by each local catalogue to the central layer., • Keep metadata current through scheduled and event-driven refresh, with explicit staleness detection and quality signals. Why this position: This role sits at the intersection of data engineering, AI, and financial services, solving one of the most important challenges in enterprise AI: enabling agents to securely access and reason over trusted data. You'll have the opportunity to design and build foundational platforms that combine large-scale data systems, governance, and AI technologies in highly regulated environments. It offers significant technical ownership, exposure to cutting-edge AI agent architectures, and the chance to shape how organisations safely unlock value from their data.

Staff Interoperability Engineer (healthcare solution) Location: Remote from Spain (an indefinite Spanish employment contract) Intellias is looking for a Staff Interoperability Engineer to join a large-scale digital healthcare initiative focused on designing, building, and scaling healthcare interoperability solutions that enable secure, standards-compliant health data exchange across the U.S. healthcare ecosystem. This is a Staff-level Individual Contributor role for an experienced engineer who combines deep expertise in healthcare interoperability, distributed backend systems, API architecture, and cloud-native engineering. You will define technical direction, solve the platform’s most complex interoperability challenges, and establish engineering standards that enable teams to build reliable, scalable, and compliant healthcare integrations. The role combines deep hands-on engineering with broad technical influence across interoperability architecture, FHIR implementation, API security, healthcare standards, and AI-enabled engineering practices. Project Overview: The project is building a FHIR-based healthcare data platform that enables secure interoperability across EHR systems, healthcare providers, payers, national healthcare exchange networks, laboratories, pharmacies, wearable devices, and digital health applications. The platform processes healthcare data at national scale, supporting Patient Access APIs, Bulk FHIR APIs, Provider Directory APIs, SMART on FHIR, and real-time healthcare integration services while maintaining compliance with U.S. healthcare interoperability standards and regulations. The engineering environment combines Python, Apache Spark, Kafka, Kubernetes, cloud-native infrastructure, FHIR R4, HL7, REST APIs, OAuth2/OIDC, SMART on FHIR, distributed event-driven architectures, and AI-assisted engineering. This is an AI-native engineering environment, where coding agents and reusable AI capabilities are used to accelerate implementation, testing, validation, documentation, and interoperability engineering without compromising correctness, security, or PHI safety. Requirements: • 8+ years of professional experience in healthcare interoperability, Health IT, backend engineering, or distributed integration platforms., • Proven Staff-level technical ownership of complex interoperability platforms and production healthcare integration solutions., • 4+ years of hands-on experience implementing FHIR-based solutions, including production FHIR R4 implementations., • Extensive experience integrating multiple EHR/EMR platforms, including systems such as Epic, Oracle Health (Cerner), Allscripts, athenahealth, eClinicalWorks, Meditech, NextGen, or comparable platforms., • Proven experience implementing Patient Access APIs, Provider Directory APIs, Bulk FHIR APIs, and other FHIR-based interoperability services., • Production experience integrating with HIE/HIN ecosystems, including Carequality, CommonWell, eHealth Exchange, TEFCA, or comparable national interoperability frameworks., • Expert knowledge of FHIR R4, including resources, profiles, extensions, search parameters, Bundles, validation, and implementation patterns., • Deep understanding of US Core Implementation Guides, USCDI, and U.S. healthcare interoperability requirements., • Strong knowledge of SMART on FHIR, OAuth 2.0, OpenID Connect, SMART scopes, backend services, and healthcare authorization models., • Strong understanding of HL7 v2.x, C-CDA, and healthcare data transformation patterns., • Experience with healthcare terminology standards including SNOMED CT, LOINC, RxNorm, ICD-10, CPT, and CVX., • Strong hands-on programming skills in Python, plus experience with at least one additional language such as Java, TypeScript/JavaScript, Go, or C#., • Experience designing and building RESTful APIs, FHIR APIs, event-driven architectures, and distributed backend services., • Strong knowledge of API security, including OAuth 2.0, JWT, mTLS, rate limiting, audit logging, and consent management., • Experience with messaging technologies such as Kafka, RabbitMQ, or comparable event-driven systems., • Experience building distributed systems using Spark, Kubernetes, Docker, and cloud-native infrastructure., • Strong knowledge of ETL/ELT, CDC, streaming, and asynchronous processing patterns., • Proven experience establishing reusable interoperability frameworks, engineering standards, implementation guides, and technical documentation., • Practical experience using AI coding agents such as Claude Code or comparable AI-assisted engineering tools., • Strong engineering judgment regarding deterministic processing versus AI-assisted implementation., • Professional English sufficient for direct collaboration with U.S.-based engineering, product, and clinical stakeholders. Nice to Have: • Experience with MPI (Master Patient Index), patient matching, identity resolution, or probabilistic matching algorithms., • Experience with advanced clinical data-quality profiling and anomaly detection., • Experience implementing healthcare consent frameworks such as FHIR Consent, XACML, DS4P., • Experience with payer interoperability standards including CARIN Blue Button and Da Vinci Implementation Guides (PDex, CDex, HRex, DTR, PAS)., • Experience integrating healthcare wearable ecosystems such as Apple HealthKit, Google Fit, Fitbit, or comparable platforms., • Experience integrating pharmacy standards such as NCPDP SCRIPT and Surescripts., • Experience with laboratory interoperability including ORU/ORM messaging, LOINC mapping, DiagnosticReport., • Experience building AI/LLM capabilities for clinical data extraction, terminology normalization, entity resolution, or healthcare interoperability., • Contributions to HL7/FHIR communities, healthcare interoperability working groups, or open-source healthcare projects., • Hands-on experience with HAPI FHIR, Synthea, or comparable interoperability frameworks., • Responsibilities:, • Design, build, and scale large-scale healthcare interoperability solutions supporting secure, standards-based health data exchange., • Define technical direction for FHIR implementation, API architecture, interoperability frameworks, and distributed integration services., • Design and implement Patient Access APIs, Provider Directory APIs, Bulk FHIR APIs, and related interoperability services., • Build integrations with EHR/EMR platforms, HIE/HIN networks, healthcare providers, payers, laboratories, pharmacies, wearables, and digital health ecosystems., • Develop robust FHIR resource mappings, validation rules, transformation pipelines, and interoperability tooling., • Design and implement HL7 v2.x to FHIR and C-CDA to FHIR transformation engines., • Build automated frameworks for FHIR conformance testing, interoperability validation, data quality, and integration testing., • Design secure healthcare APIs using SMART on FHIR, OAuth2/OIDC, JWT, mTLS, consent management, and modern API security practices., • Solve complex interoperability issues involving API failures, patient matching, terminology normalization, data mapping conflicts, and compliance requirements., • Define engineering standards, implementation frameworks, and reusable interoperability capabilities adopted across engineering teams., • Make AI-assisted engineering a practical part of interoperability development, testing, documentation, mapping, and validation workflows., • Mentor engineers through architecture reviews, technical guidance, pairing, and knowledge sharing., • Represent interoperability best practices in architecture discussions and industry standards initiatives. Why this position: This role offers the opportunity to shape the technical direction of healthcare interoperability for a modern FHIR-based platform operating at national scale. As a Staff-level Individual Contributor, you will solve some of the most challenging interoperability problems in digital healthcare, including real-time data exchange, standards implementation, patient identity resolution, API security, healthcare compliance, and integration across thousands of healthcare organizations. The position combines deep healthcare interoperability expertise, distributed backend engineering, cloud-native architecture, API platform design, and AI-native engineering. Beyond building production systems, you will establish reusable engineering frameworks, define interoperability standards, mentor experienced engineers, and help shape how healthcare integrations are designed, implemented, validated, and operated across the platform.

Platform Engineer (Semantic Discovery & Credentials) Location: Remote from Spain (an indefinite Spanish employment contract) We are looking for a Platform Engineer to build secure discovery and credential management capabilities for enterprise AI platforms. The role focuses on semantic search, vector-based discovery, secrets management, credential access services, and AI tool classification. The ideal candidate has hands-on experience with Python backend development, secrets management solutions, and modern semantic search technologies. Project Overview: Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. Requirements: • 4+ years platform or backend engineering, • Secrets management (Vault or AWS Secrets Manager), • Vector search or semantic search implementation, • Semantic discovery implementation (vector embeddings, OpenSearch or pgvector), • Vault (HashiCorp) integration for credential management, • AWS Secrets Manager as an alternative, • Python credential retrieval API, • MCP server capability and semantic domain taxonomy Will be a plus: • AWS Bedrock embedding models for semantic indexing, • OpenSearch Service or pgvector on RDS, • OAuth token lifecycle management Responsibilities: • Design and implement semantic discovery capabilities for MCP servers, tools, and agent ecosystems., • Build and maintain vector-based search solutions using embeddings, OpenSearch, pgvector, or similar technologies., • Develop metadata taxonomies and capability classification models for MCP services and AI tools., • Design and implement secure credential retrieval services using Python and cloud-native architectures., • Integrate HashiCorp Vault and AWS Secrets Manager to support secure secret storage and access management., • Build APIs for credential retrieval, access validation, and secure secret consumption., • Implement governance controls for credentials, service identities, and tool access policies., • Design semantic indexing pipelines and relevance-ranking strategies for discovery services., • Collaborate with platform, security, and AI engineering teams to establish discovery and credential management standards., • Implement observability, auditability, and monitoring for secret access and discovery workflows., • Support lifecycle management of credentials, service identities, and access tokens across distributed systems., • Produce technical documentation, architecture guidelines, and operational playbooks.

Change the World, Bit by Byte At T4G Lab, we are more than just a tech consultancy. We are partners in impact. We build technology that matters. We work with startups, non-profits, universities and United Nations to solve real-world problems in Health, Climate Change, Education, Research or Financial Access. We are looking for a seasoned Full Stack Engineer with deep experience to join our global team. You will build scalable, high-impact solutions that empower organisations to move faster and do more good. The Role As a Senior Member of our engineering team, you will be hands-on in designing, building, and deploying robust applications. You won't just be writing code. You will be crafting solutions for complex challenges, ensuring our partners get world-class, secure, and sustainable products. This is a pure Full Stack role where you will own features from the database to the UI, but with a heavy emphasis on architectural soundness and infrastructure security. What You’ll Do • Build & Scale: Develop high-quality, maintainable software across the full stack (Frontend + Backend)., • Secure Infrastructure: Take ownership of cloud architecture. You will ensure our systems are not just functional but are secure by design and optimised for performance., • Impactful Work: Work on diverse projects ranging from AI integration to lean product adjustments for startups and non-profits., • Mentor & Lead: Use your experience to set coding standards and mentor other developers in the team., • Collaborate: Work directly with founders, product managers, and non-technical stakeholders to translate "vision" into "shipped code." Who You Are • Experienced: You have 8+ years of professional experience in software engineering. You have seen it all, including legacy code, greenfield projects, and complex migrations., • Fluent in English: You have excellent written and verbal communication skills in English. As a global consultancy, clear communication with international partners is essential., • Tech Versatile & Secure: You go beyond just writing features., • Strong Backend & Frontend skills (Python/Django and React preferred, but we value solid engineering fundamentals)., • Infrastructure Mastery: You have strong knowledge of cloud infrastructure (AWS), DevOps, and deployment pipelines., • Security First: You understand OWASP top 10, data encryption, and secure authentication practices. You build systems that protect user data., • AI/LLM Proficiency: Experience with AI coding tools and techniques for integrating LLMs into the development process is highly desirable., • Problem Solver: You care about solving the problem rather than just using the flashiest new tool. You understand how to build lean and efficient solutions. Nice to Have (But Not Required) • Language Skills: Proficiency in Spanish or other UN official languages is a great asset., • Accessibility Expert: You know how to build inclusive web experiences that meet WCAG standards., • Sustainable Tech: You have knowledge or interest in "Green IT" and sustainable hosting practices to minimise carbon footprint. Why Apply? • Meaningful Work: Your code will directly support impactful projects in sectors that change lives., • Global Mindset: Work with a diverse, international team and partners worldwide., • Senior Impact: At your level, your voice matters. You will help shape technical strategy and team culture., • Remote/Flexible Culture: We focus on output and impact rather than hours in a chair. Ready to join us in changing the world, bit by byte? Click Easy Apply today.

Senior Solution Architect | 100% Remote | Contract role A global leader in technology is looking for a Senior Solution Architect to define and lead the architecture of a new internal workflow-orchestration platform, supporting critical business and workforce transformation processes. The project: You will design the target architecture, from the ground up, of a secure, role-based, reusable platform that supports several business transformation products. The core challenge: enabling multiple products to share foundational technical services while keeping strict separation of data, permissions, workflows, business rules, and user experiences. This is primarily an architecture and technical-direction role, with selective hands-on contribution when the project calls for it. Responsibilities: • Define the end-to-end architecture: frontend applications, backend services, databases, workflow-control layer, identity and access, audit, integration adapters, reporting, export, and deployment, • Design the reusable workflow foundation: role permissions, stage gates, approval routing, scenario and version management, change ledger, validation, reporting, exports, and reconciliation, • Establish data-isolation and access-control patterns so multiple products can reuse shared components without compromising security, data models, or processes, • Set the nonfunctional requirements: scale, availability, recoverability, observability, performance, maintainability, and disaster recovery, • Lead technical design reviews, architectural decisions, risk management, engineering standards, and documentation, • Provide technical direction to the full-stack engineering team, ensuring build decisions align with the approved architecture and security model Requirements: • 10+ years in enterprise software engineering, including 4+ in systems, solution, platform, or enterprise architecture, • Proven experience building scalable solutions within the AWS ecosystem, • Experience architecting secure workflow, case-management, planning, or orchestration platforms with automation and human-in-the-loop processes, • Strong knowledge of domain-driven design, API architecture, relational and event-driven data models, IAM, and enterprise integration, • Experience with systems handling sensitive data (employee, financial, legal, or regulated), • Role-based access control (RBAC), ideally also attribute- or field-level authorization, • Full-stack fluency (React/TypeScript; Python/FastAPI, Java/Spring, Node.js, .NET or similar), able to go hands-on when needed, • Cloud architecture, CI/CD, observability, disaster recovery, and production support, • Strong communication skills to bridge business, security, data, and engineering Nice to have: • Integrations with HR, finance, or workforce-planning systems (Workday HCM, Workday Adaptive Planning, or similar), • Workforce planning, org design, hierarchical data, scenario modeling, or highly governed people-transformation processes, • AI-assisted workflow patterns, with a clear sense of where deterministic rules and human approval must stay authoritative, • Regulated global environments with strict audit and governance requirements

Change the World, Bit by Byte At T4G Lab, we are more than just a tech consultancy. We are partners in impact. We build technology that matters. We work with startups, non-profits, universities and United Nations to solve real-world problems in Health, Climate Change, Education, Research or Financial Access. We are looking for a seasoned Full Stack Engineer with deep experience to join our global team. You will build scalable, high-impact solutions that empower organisations to move faster and do more good. The Role As a Senior Member of our engineering team, you will be hands-on in designing, building, and deploying robust applications. You won't just be writing code. You will be crafting solutions for complex challenges, ensuring our partners get world-class, secure, and sustainable products. This is a pure Full Stack role where you will own features from the database to the UI, but with a heavy emphasis on architectural soundness and infrastructure security. What You’ll Do • Build & Scale: Develop high-quality, maintainable software across the full stack (Frontend + Backend)., • Secure Infrastructure: Take ownership of cloud architecture. You will ensure our systems are not just functional but are secure by design and optimised for performance., • Impactful Work: Work on diverse projects ranging from AI integration to lean product adjustments for startups and non-profits., • Mentor & Lead: Use your experience to set coding standards and mentor other developers in the team., • Collaborate: Work directly with founders, product managers, and non-technical stakeholders to translate "vision" into "shipped code." Who You Are • Experienced: You have 8+ years of professional experience in software engineering. You have seen it all, including legacy code, greenfield projects, and complex migrations., • Fluent in English: You have excellent written and verbal communication skills in English. As a global consultancy, clear communication with international partners is essential., • Tech Versatile & Secure: You go beyond just writing features., • Strong Backend & Frontend skills (Python/Django and React preferred, but we value solid engineering fundamentals)., • Infrastructure Mastery: You have strong knowledge of cloud infrastructure (AWS), DevOps, and deployment pipelines., • Security First: You understand OWASP top 10, data encryption, and secure authentication practices. You build systems that protect user data., • AI/LLM Proficiency: Experience with AI coding tools and techniques for integrating LLMs into the development process is highly desirable., • Problem Solver: You care about solving the problem rather than just using the flashiest new tool. You understand how to build lean and efficient solutions. Nice to Have (But Not Required) • Language Skills: Proficiency in Spanish or other UN official languages is a great asset., • Accessibility Expert: You know how to build inclusive web experiences that meet WCAG standards., • Sustainable Tech: You have knowledge or interest in "Green IT" and sustainable hosting practices to minimise carbon footprint. Why Apply? • Meaningful Work: Your code will directly support impactful projects in sectors that change lives., • Global Mindset: Work with a diverse, international team and partners worldwide., • Senior Impact: At your level, your voice matters. You will help shape technical strategy and team culture., • Remote/Flexible Culture: We focus on output and impact rather than hours in a chair. Ready to join us in changing the world, bit by byte? Click Easy Apply today.

We are looking for the very Top Talent…and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies. What we look for? We are looking for a QA / Test Engineer with solid experience in enterprise software quality assurance, preferably within utility, billing, financial, CRM, ERP, or other high-volume customer platforms. The ideal candidate combines strong functional testing expertise with API, integration, data validation, automation, and regression testing skills. You should have a risk-based testing mindset, strong analytical capabilities, and a focus on ensuring billing accuracy, financial reconciliation, and high-quality releases. Experience with test automation, SQL, CI/CD practices, and modern testing frameworks is highly valued. Main tasks and accountabilities will be: Define and execute test strategies, plans, estimates, coverage models, and quality gates aligned with project risks and delivery milestones. Design and execute functional, integration, end-to-end, API, regression, exploratory, and data validation test scenarios. Validate customer, contract, tariff, billing, invoicing, payments, refunds, collections, and financial processes across the platform. Perform complex billing verification, including proration, effective dating, taxes, discounts, adjustments, reversals, rebilling, and exception handling. Test APIs and event-driven integrations, ensuring reliability, sequencing, idempotency, error handling, and operational visibility. Develop and maintain automated tests and regression suites for APIs, services, and critical business journeys. Use SQL for data setup, validation, comparison, migration verification, and reconciliation activities. Prepare and manage test environments, test data, customer accounts, meters, tariffs, and usage scenarios. Log, track, analyze, and retest defects while collaborating with developers, analysts, and business stakeholders. Support User Acceptance Testing (UAT) through scenario preparation, execution monitoring, evidence collection, and defect management. Contribute to performance, resilience, security, and operational readiness testing activities. Support cutover rehearsals, production validation, smoke testing, reconciliation controls, and hypercare activities. What do we expect from you? 4+ years of experience in software testing and quality assurance within enterprise environments. Strong knowledge of: Functional Testing End-to-End Testing Integration Testing Regression Testing Risk-Based Testing Defect Management Hands-on experience with API testing tools such as Postman, REST Assured, or similar. Strong SQL skills for data validation, reconciliation, and migration testing. Experience building and maintaining automated test frameworks and automated regression suites. Familiarity with CI/CD pipelines, source control systems, and automated test execution. Ability to analyze complex business rules, pricing structures, effective-dated logic, financial calculations, and exception flows. Experience with automation technologies such as: Cucumber JUnit REST Assured Selenium Strong communication skills and the ability to produce clear test evidence and defect documentation. Good spoken and written English. Nice to have Utility industry experience, especially customer information and billing platforms. Knowledge of platforms such as SAP Utilities, Oracle Utilities, Kraken Technologies, or Hansen. Experience with meter-to-cash, customer-to-cash, market operations, and debt management processes. Performance and resilience testing using JMeter, k6, or Gatling. Experience with AWS integrations, event-driven architectures, and cloud observability. ISTQB or equivalent testing certification. Key skills End-to-End Testing Functional Testing Integration Testing CI/CD Cucumber API Testing SQL Test Automation Regression Testing Defect Management Risk-Based Testing Financial & Billing Validation Agile Delivery Practices Work Location Full remote with travel occasionally to London, UK. Work Schedule Business hours. What can we offer? 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances). `Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan…) Free access to several training platforms Professional stability and career plans UST also, compensates referrals from which you could benefit when you refer professionals. The option to pick between 12 or 14 payments along the year. Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…) UST Club Platform discounts and gym Access discounts If you would like to know more, don’t hesitate to apply and we’ll get in touch to fill you in detail. We are waiting for you! In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate. Skills End-to-End Testing, Functional Testing, Integration Testing, CI/CD, Cucumber

⚡ Empowering people. Unlocking innovation. With 1,000+ professionals and over a decade of experience, we’ve built an environment where talent is trusted, supported and continuously challenged to grow. 🤝 People-first culture built on trust and real proximity. 📉 Stable environment with turnover clearly below industry average. 💻 International, high-impact projects powered by modern tech stacks. 📚 €1,200 annual training budget per employee. 🕓 Real flexibility, not just a promise. 💬 Continuous feedback culture with monthly follow-ups and annual 360º reviews. 🏥 Private health insurance, flexible compensation and Wellhub. 💡 Active tech communities where knowledge is shared and innovation evolves. 🎉 A team that delivers and celebrates together. Ready to grow with us? Take a look at this opportunity 👇 At Capitole, we are looking for an AI Engineer to join an exciting international project within a leading German automotive company. You will play a key role in the evolution of conversational and agentic AI solutions, driving the adoption of cutting-edge technologies and ensuring their successful integration into a global enterprise environment. What will you do? • Collaborate closely with Product Owners and business stakeholders to define and deliver AI-driven solutions., • Design and evolve the conversational AI platform strategy in alignment with enterprise architecture and IT guidelines., • Lead proof of concepts (PoCs) and pilot initiatives to validate technologies, platforms, and architectural approaches., • Identify and develop new conversational and agentic AI use cases with global business teams., • Drive platform adoption and promote AI best practices across the organization., • Manage relationships with technology providers and delivery partners., • Ensure quality standards, technical governance, security compliance, and operational excellence., • Lead integrations between AI solutions and the enterprise ecosystem., • Guide architectural decisions and technology evolution initiatives., • Evaluate emerging AI technologies, foundation models, and LLM-based solutions to drive innovation and business value., • Ensure all developments align with corporate AI governance and responsible AI principles., • Support security, administration, and operational processes related to AI platforms. What are we looking for? • 5+ years of experience in AI Engineering, Conversational AI, Software Engineering, or similar roles., • Strong experience working with cloud platforms such as Azure and/or Google Cloud Platform (GCP)., • Hands-on experience with Agentic AI architectures, Agent2Agent (A2A) frameworks, and Google Agent Development Kit (ADK)., • Experience designing and developing conversational AI solutions, including chatbots and voicebots., • Solid understanding of Large Language Models (LLMs) and Generative AI technologies., • Experience integrating AI solutions within complex enterprise environments., • Strong communication and stakeholder management skills., • Fluent English communication skills. Nice to have • Experience with AI governance, security, and responsible AI frameworks., • Knowledge of MLOps, AI platform operations, and monitoring., • Experience in the automotive sector or other international enterprise environments., • Exposure to multi-agent systems and advanced orchestration frameworks. Location: 100% Remote Schedule: 40h/week. Flexible, with reduced hours on Fridays Language: English (C1), Spanish (B2) Want to know more? Click here 🖱️ and find out! See what people say about us 🕵️ Glassdoor Reviews Feel free to send us your profile, we are excited to meet you! 💙 The employee will adhere to information security policies: -Will have access to confidential information related to Capitole and the project they are working on. -Must comply with the security policies and internal policies of the company and the client. -Must sign an NDA.

Senior Security & Governance Engineer Location: Remote from Spain (an indefinite Spanish employment contract) We are looking for a Security & Governance Engineer to establish and enforce security controls, governance standards, and compliance requirements across AI platforms, APIs, and cloud-native services. The role focuses on authentication, authorization, data protection, network isolation, and security validation of enterprise integrations. The ideal candidate has strong cloud security expertise, deep knowledge of identity management, and experience participating in enterprise security review processes. Project Overview: Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications. Intellias mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. Requirements: • 4+ years application security or cloud security engineering, • Identity and access management (OAuth 2.0 / SigV4 / JWT security, OIDC), • TLS/mTLS configuration in cloud environments( TLS 1.3 enforcement), • Participation in InfoSec reviews for enterprise APIs, • IT-STD-317 / enterprise security standards, • Data classification for tool payloads, • Security testing (OWASP, pen-test methodology), • Network isolation (VPC, PrivateLink) Will be a plus: • MCP or tool-protocol security experience, • AWS WAF, Security Hub, Macie, • Prior work on enterprise AI platform governance Responsibilities: • Design and implement security controls for cloud-native applications, APIs, and AI platform integrations., • Define and enforce OAuth 2.0, JWT, OIDC, and SigV4 authentication and authorization standards., • Configure and maintain TLS 1.3 and secure communication channels across distributed systems., • Establish governance requirements for tool integrations, API interactions, and AI platform workloads., • Define and maintain data classification policies for tool payloads, metadata, and sensitive business information., • Design and implement network isolation strategies using VPCs, PrivateLink, and cloud-native security controls., • Perform security reviews, threat assessments, and architecture evaluations for enterprise services., • Conduct security testing activities, including penetration testing, OWASP-based assessments, and vulnerability validation., • Support InfoSec reviews, architecture review boards, and enterprise governance processes., • Develop security standards, implementation guidance, and compliance documentation., • Collaborate with engineering teams to embed security requirements into development and deployment workflows., • Monitor security posture and recommend improvements across cloud and AI platform environments., • Partner with stakeholders to ensure compliance with enterprise security policies and standards.

Senior Data Engineer (Metadata & Lineage Integration) Location: Remote from Spain (an indefinite Spanish employment contract) Our client is a leading global investment management company headquartered in London. It manages over $228 billion in assets and serves institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide. The firm specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science, machine learning, and AI are core components of its investment and research processes. As part of our collaboration we will focus on two foundational capabilities required to enable safe and scalable AI adoption across the enterprise: Agentic Security and AI-Ready Data Foundations. Project Overview: We build the data foundations that make AI useful and safe inside regulated financial firms. The value of AI is capped by the data its agents can reach: if an agent cannot find, interpret, trace or be correctly permissioned against data, the capability is useless, or worse, unsafe. Your job is to close that gap. This is a hands-on senior role for an excellent Python engineer with strong data-engineering skills who is genuinely comfortable building with AI agents. You will design and build the catalogue, semantic, entitlement and analytical layers that turn large on-premise data estates into something agents can use. Requirements: • 5+ years building production data systems in Python, with strong engineering fundamentals (testing, code review, performance) and solid SQL., • Experience building crawlers, harvesters or connector frameworks that extract inventories, schemas, field dictionaries and lineage from databases, filesystems, message platforms and API surfaces, in addition to conventional data pipelines., • Event-driven integration with Kafka or similar, including secure producer patterns (mTLS or equivalent) and schema-managed topics., • Experience with search and document stores that back catalogue platforms (e.g. Elasticsearch, OpenSearch, MongoDB or similar)., • Working knowledge of lineage capture and modelling, with OpenLineage or similar as a reference, and readiness to work with proprietary in-house event models., • Experience applying LLMs to metadata work, such as drafting descriptions and classifications for human review, including quality evaluation of the generated output., • Readiness to work inside another team's codebase, complete components that the team has designed, and contribute through its review process., • Fluent English for written and spoken communication with client teams. Will be a plus • Time-series and tick stores (e.g. kdb+ or similar columnar time-series databases), market-data vendor schema APIs, symbology and asset-class concepts (market-data opening)., • MS SQL Server estates, reporting and BI systems, inventory extraction from application metadata tables (reporting opening)., • Columnar and lake formats (Parquet or similar), large object stores, orchestration platforms (Airflow or similar)., • Working-level knowledge of graph databases; data contracts and data quality frameworks; catalogue platforms (DataHub or similar) on the ingestion side., • Day-to-day use of AI coding agents; building data services consumed by AI agents., • Experience in financial services or other regulated on-premise environments. Responsibilities: • Build extraction, enrichment and registration paths that populate domain catalogues from live estates (databases, time-series stores, streaming platforms, filesystems, internal and vendor APIs) and connect them to the client's central catalogue through its existing mechanisms., • Extend an existing scraping capability from bare dataset and symbol inventories to full metadata: descriptions, field-level dictionaries, date ranges, asset-class and cadence tags, vendor provenance., • Load vendor schema metadata at scale, through vendor APIs, into a persistent internal knowledge base designed for step-by-step disclosure to humans and LLMs., • Seed report and dataset inventories from existing application metadata tables and ETL sources; combine them with LLM-drafted descriptions approved by stewards., • Integrate lineage into the client's lineage backend across batch, streaming and cross-system report chains, completing the client's existing registration designs., • Implement the federation contract defined by the architect: stable identities, ownership, hierarchy, links and availability state exposed by each local catalogue to the central layer., • Keep metadata current through scheduled and event-driven refresh, with explicit staleness detection and quality signals. Why this position: This role sits at the intersection of data engineering, AI, and financial services, solving one of the most important challenges in enterprise AI: enabling agents to securely access and reason over trusted data. You'll have the opportunity to design and build foundational platforms that combine large-scale data systems, governance, and AI technologies in highly regulated environments. It offers significant technical ownership, exposure to cutting-edge AI agent architectures, and the chance to shape how organisations safely unlock value from their data.

🚀 We are looking for top talent... and we would be delighted if you joined our team! More in detail, UST is a multinational company headquartered in North America, certified as a Top Employer, with more than 35,000 employees worldwide and a presence in over 30 countries. We are leaders in digital technology services, delivering large-scale technology solutions to global organizations. 🔎 What are we looking for? We are looking for a Senior Python Developer to join our team and contribute to the design, development, optimization, and support of critical backend systems. The ideal candidate will have extensive experience building enterprise-grade applications in Python, strong expertise in relational databases, and a proven track record of troubleshooting complex distributed environments. 📍 Location: 100% Remote (Spain-based candidates only) 🗣️ Language: Advanced English (C1) required 🔧 Key Responsibilities • Design, develop, maintain, and optimize backend applications using Python., • Develop and manage database solutions using SQL Server, Oracle, and PostgreSQL., • Build and maintain CI/CD pipelines using GitHub Actions, Jenkins, or equivalent tools., • Troubleshoot, debug, and resolve issues in complex distributed systems., • Collaborate with cross-functional teams to deliver scalable and high-quality solutions., • Participate in code reviews, technical design discussions, and architecture decisions., • Ensure software reliability, performance, security, and maintainability., • Support deployment, monitoring, and continuous improvement initiatives. 🛠️ Key Requirements Mandatory Skills • 7+ years of professional experience with Python., • Strong experience with relational databases: SQL Server / Oracle / PostgreSQL, • Hands-on experience with CI/CD tools: GitHub Actions / Jenkins / Or equivalent platforms, • Strong troubleshooting and debugging skills in distributed systems., • Advanced English level (C1)., • Bachelor's degree in Computer Science, Software Engineering, or a related discipline. Nice to Have • Java and Spring Boot (microservices development)., • Financial services domain knowledge: Trading / Market Risk / FRTB / IMA, • Integration middleware experience: TIBCO / MQ / Kafka, • Cloud platforms: AWS / Azure / GCP, • Docker and Kubernetes., • Scheduling tools (Control-M, Autosys)., • Scripting and automation: PowerShell / Bash What can we offer? ✈️ 23 days of Annual Leave plus December 24th and 31st as discretionary days. ❤️ Comprehensive benefits package (Health Care Plan, teleworking compensation, Life and Accident Insurance). 🍴 Flexible Benefits Program (Meals, Kindergarten, Transport, Online English Lessons, Health Plan). 🎓 Free access to multiple learning and training platforms. 🚀 Professional stability and career development plans. 🚶 Referral Program with attractive rewards. 🔗 Option to choose between 12 or 14 salary payments per year. 🏡 Real Work-Life Balance measures, including flexibility and remote work policies. 🎁 UST Club platform discounts and gym membership discounts. 📧 If you would like to know more, don't hesitate to apply. We'd love to tell you more about the opportunity! At UST, we are committed to equal opportunities and do not discriminate on the basis of race, gender, disability, age, religion, sexual orientation, or nationality. We actively promote Diversity, Equity & Inclusion and encourage applications from people with disabilities.

PayXpert is a pioneer in omnichannel payments and a subsidiary of the Société Générale group. We serve a diverse array of local and international brands both online and in-store, spanning various sectors. At the heart of our vision is the creation of a payment ecosystem that fosters an inclusive commerce experience for all. We have developed services that focus on revenue optimisation, performance enhancement, fraud prevention, and seamless payment orchestration. Our expertise extends to cross-border payments and alternative payment methods such as Alipay+ and WeChat Pay. Furthermore, our solutions are designed with accessibility in mind, offering features that cater to the visually impaired, ensuring everyone can engage in the modern commerce landscape. The Senior Backend Developer is responsible for designing, building and evolving the backend services that support PayXpert's Payment Gateway, Secure Store and other security‑sensitive components within the core payments platform The role spans mainly on the PHP‑based e‑commerce gateway but also on the Java/Kotlin payments platform components, working across these stacks to deliver and maintain secure transaction services The role operates with advanced technical expertise and high autonomy, developing complex backend features, maintaining service integrity and ensuring the protection of sensitive transactional data within a regulated and compliance‑driven environment. Key Responsibilities Backend Development & Secure Domain Ownership • Design, develop, and maintain payment-oriented backend services across both PHP (e‑commerce gateway) and Java/Kotlin (core payments platform) codebases, • Contribute to core payment backend applications with a strong focus on security-sensitive transaction flows., • Identify gaps or limitations in core backend services and propose technical solutions aligned with business needs., • Analyze business and technical requirements to assess feasibility and implementation impact., • Own backend components end-to-end, from design and implementation through production support. Act as a co‑owner of the PHP e‑commerce gateway, sharing accountability for its evolution, security and reliability. Security, Reliability & Performance • Apply secure coding practices appropriate for transaction-critical and sensitive data environments., • Support the implementation of payment protocols and security-related service interactions., • Participate in incident analysis and troubleshooting related to payment services., • Ensure backend services meet reliability, performance, and data integrity requirements., • Critically review AI-assisted code for security, correctness and compliance before it reaches production, treating AI output as a draft to be validated rather than trusted by default. Ensure no sensitive transactional data, secrets or regulated information is exposed to AI tooling. Testing, Quality & Continuous Integration • Design and perform unit and integration testing for payment services., • Debug and resolve defects identified during CI pipelines and iterative builds., • Maintain and continuously improve test coverage and backend quality standards., • Participate actively in code reviews to ensure consistency, quality, and security standards., • Use AI coding assistants to accelerate test authoring, refactoring and debugging, while retaining full ownership and accountability for the quality of the delivered code. Collaboration & Delivery • Work closely with Product Managers to design and deliver backend solutions using agile methodologies., • Collaborate with peer developers, QA engineers, and release teams across the Core Business Domain., • Provide technical support for complex production issues and internal problem-solving when required. Continuous Improvement • Contribute to improving backend architecture, service interactions, and development practices., • Support documentation and knowledge sharing related to Secure Store services., • Actively contribute to improving system robustness and long-term maintainability., • Help mature the team's practices for effective and responsible AI-assisted development, sharing prompts, patterns and guardrails that improve productivity without compromising security. Requirements • Bachelor’s degree in Computer Science, Engineering, or related fields., • 7–10 years of total backend development experience, including secure, high‑risk backend systems., • 4–6 years in similar senior PHP/Java/Kotlin backend roles, owning production services and developing secure backend features., • Experience working with REST-based backend architectures and service-oriented systems., • Strong familiarity with development and delivery tools: Git, GitLab, Docker, CI/CD pipelines, and issue-tracking tools., • Hands-on experience using AI coding assistants in a professional software development workflow, with an understanding of their security and data-confidentiality implications., • Experience working in payments, fintech, or other regulated and security-sensitive environments is a strong plus., • Exposure to or ability to collaborate on systems built with Java / Spring Boot is a great plus., • Fluent English is mandatory., • French and/or Spanish are a plus. Our Culture & Ways of Working Our culture is built around people, ownership and continuous progress. We strive to create an environment where individuals feel trusted, supported and challenged to grow, with regular feedback and meaningful follow-up. We value collaboration over hierarchy. Ideas can come from anywhere, and every voice matters; we expect our teams to contribute, challenge and shape the way we work. We are strongly product-oriented, with a hands-on mindset and a genuine openness to new ideas. Innovation is not limited to specific teams; it is a shared responsibility. We believe in continuous improvement over perfection. Each quarter, we actively look for ways to optimise our processes, enhance our solutions and raise the bar as an organisation. At PayXpert, we want you to grow, feel valued and enjoy your work experience. Here’s what we bring to the table: Compensation & Stability • Competitive salary package with a permanent contract, • Flexible working hours and a wellbeing-focused intensive summer schedule. Work Environment & Flexibility • International, diverse and collaborative teams across Spain, France & the UK, • Regular engagement events to build strong connections Growth & Career Development • Real ownership and visible impact on key HR initiatives, • Continuous learning opportunities tailored to your development plan, • Free language courses (Spanish, French, English) to support your global career, • Involvement in exciting and innovative fintech projects Recognition & Rewards • Employee referral bonus program Apply now and let’s build the future of payments together. In line with our commitment to equal opportunities and fair recruitment practices, candidates may submit a blind CV, excluding personal details that are not relevant to the assessment of their skills, experience and professional suitability for the role. We believe in equal employment opportunity, a culture built around gender-balanced development opportunities for our professionals, a flexible and healthy working environment, and general equality in the workplace. The personal data collected is intended for PAYXPERT and used to process your application with a view to possibly offering you an employment contract. It is intended for use by the departments responsible for recruitment. This information will be kept for a maximum of 2 years if your application is not successful. In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data, you have the right to access, rectify, delete, portability and limit the Processing of Data concerning you. You may also, for legitimate reasons, object to the Processing of your Data. You may exercise your rights by contacting our DPO at the following address or at the following postal address Av. Diagonal 440, 08037 BARCELONA,SPAIN. For more information on the Processing of your Personal Data by PAYXPERT, please consult our privacy policy available on our website at the following address: https://www.payxpert.com/privacy-policy/.

Senior Solution Architect | 100% Remote | Contract role A global leader in technology is looking for a Senior Solution Architect to define and lead the architecture of a new internal workflow-orchestration platform, supporting critical business and workforce transformation processes. The project: You will design the target architecture, from the ground up, of a secure, role-based, reusable platform that supports several business transformation products. The core challenge: enabling multiple products to share foundational technical services while keeping strict separation of data, permissions, workflows, business rules, and user experiences. This is primarily an architecture and technical-direction role, with selective hands-on contribution when the project calls for it. Responsibilities: • Define the end-to-end architecture: frontend applications, backend services, databases, workflow-control layer, identity and access, audit, integration adapters, reporting, export, and deployment, • Design the reusable workflow foundation: role permissions, stage gates, approval routing, scenario and version management, change ledger, validation, reporting, exports, and reconciliation, • Establish data-isolation and access-control patterns so multiple products can reuse shared components without compromising security, data models, or processes, • Set the nonfunctional requirements: scale, availability, recoverability, observability, performance, maintainability, and disaster recovery, • Lead technical design reviews, architectural decisions, risk management, engineering standards, and documentation, • Provide technical direction to the full-stack engineering team, ensuring build decisions align with the approved architecture and security model Requirements: • 10+ years in enterprise software engineering, including 4+ in systems, solution, platform, or enterprise architecture, • Proven experience building scalable solutions within the AWS ecosystem, • Experience architecting secure workflow, case-management, planning, or orchestration platforms with automation and human-in-the-loop processes, • Strong knowledge of domain-driven design, API architecture, relational and event-driven data models, IAM, and enterprise integration, • Experience with systems handling sensitive data (employee, financial, legal, or regulated), • Role-based access control (RBAC), ideally also attribute- or field-level authorization, • Full-stack fluency (React/TypeScript; Python/FastAPI, Java/Spring, Node.js, .NET or similar), able to go hands-on when needed, • Cloud architecture, CI/CD, observability, disaster recovery, and production support, • Strong communication skills to bridge business, security, data, and engineering Nice to have: • Integrations with HR, finance, or workforce-planning systems (Workday HCM, Workday Adaptive Planning, or similar), • Workforce planning, org design, hierarchical data, scenario modeling, or highly governed people-transformation processes, • AI-assisted workflow patterns, with a clear sense of where deterministic rules and human approval must stay authoritative, • Regulated global environments with strict audit and governance requirements