Senior Full-Stack Software Engineer/Java Engineer (Market Risk) at Deloitte, London/Remote, 6 Months, £475 per day
£475 per day
- Contract Spy
- Hybrid (City Of London, England, United Kingdom)
- Nov 13, 2026
Contract Description
Role: Senior Full-stack Software Engineer / Java Engineer (Market Risk)
Location: London or Belfast - Hybrid Working Model
Start Date: ASAP
End Date: 6 Months
Daily Rate: £475 Per Day Inside IR35
Payroll provider – Rockford Payroll Info for Contingent Workers – Rockford Pay
Assignment Overview
Deloitte sets the requirements for the assignment. Rockford Resourcing acts as the agency on behalf of Deloitte and is responsible for sourcing candidates to fulfil the assignment. Successful candidates will be employed by Rockford Payroll. Rockford Payroll is responsible for the Associate’s employment, pay and applicable employment-related processes.
Deloitte is seeking a senior full-stack software engineer / Java Engineer with strong experience across Java back-end development and JavaScript front-end development to support a confidential engagement within a highly regulated enterprise environment. The role will focus on designing, building, and securing enterprise-grade applications and platforms, with a strong emphasis on DevSecOps, secure software supply chain practices, and embedding Secure Development Lifecycle (SDL) principles across the SDLC.
The successful consultants will contribute to the delivery of scalable, cloud-native solutions, support technical strategy and code quality, and help drive secure engineering practices across development and deployment pipelines.
Key Responsibilities
Design, develop, and maintain enterprise-grade applications using Java and JavaScript
Build scalable, secure solutions aligned to cloud-native and modern engineering principles
Lead and participate in code reviews, technical design discussions, and architecture decisions
Evaluate, adopt, and integrate open-source technologies where appropriate
Design, enhance, and maintain CI/CD pipelines with integrated security controls
Implement automated security testing such as code scanning and dependency analysis
Develop automation to support continuous integration, testing, and secure deployment practices
Promote and apply Infrastructure-as-Code best practices
Champion SDL practices across the software delivery lifecycle
Support threat modelling, security design reviews, and remediation of identified vulnerabilities
Help embed secure coding standards and supply chain security controls into engineering workflows
Experience & Skills Requirements
Java Spark experience
Market Risk or investment banking experience
Strong hands-on experience with Java and JavaScript
Architecture: Solid understanding of distributed systems, microservices, APIs, and software design patterns
CI/CD: Proven experience implementing and managing CI/CD pipelines using tools such as GitHub Actions, GitLab, or Jenkins
Strong knowledge of SDL and secure coding practices
Understanding of software supply chain security, including SBOMs, dependency management, and vulnerability management
Experience with Software Composition Analysis (SCA) tools and DevSecOps practices is preferred
Knowledge of Zero Trust architecture and policy-as-code is preferred
Containerisation experience with Docker and Kubernetes
Exposure to cloud platforms such as AWS, Azure, or Google Cloud
Location: London or Belfast - Hybrid Working Model
Start Date: ASAP
End Date: 6 Months
Daily Rate: £475 Per Day Inside IR35
Payroll provider – Rockford Payroll Info for Contingent Workers – Rockford Pay
Assignment Overview
Deloitte sets the requirements for the assignment. Rockford Resourcing acts as the agency on behalf of Deloitte and is responsible for sourcing candidates to fulfil the assignment. Successful candidates will be employed by Rockford Payroll. Rockford Payroll is responsible for the Associate’s employment, pay and applicable employment-related processes.
Deloitte is seeking a senior full-stack software engineer / Java Engineer with strong experience across Java back-end development and JavaScript front-end development to support a confidential engagement within a highly regulated enterprise environment. The role will focus on designing, building, and securing enterprise-grade applications and platforms, with a strong emphasis on DevSecOps, secure software supply chain practices, and embedding Secure Development Lifecycle (SDL) principles across the SDLC.
The successful consultants will contribute to the delivery of scalable, cloud-native solutions, support technical strategy and code quality, and help drive secure engineering practices across development and deployment pipelines.
Key Responsibilities
Design, develop, and maintain enterprise-grade applications using Java and JavaScript
Build scalable, secure solutions aligned to cloud-native and modern engineering principles
Lead and participate in code reviews, technical design discussions, and architecture decisions
Evaluate, adopt, and integrate open-source technologies where appropriate
Design, enhance, and maintain CI/CD pipelines with integrated security controls
Implement automated security testing such as code scanning and dependency analysis
Develop automation to support continuous integration, testing, and secure deployment practices
Promote and apply Infrastructure-as-Code best practices
Champion SDL practices across the software delivery lifecycle
Support threat modelling, security design reviews, and remediation of identified vulnerabilities
Help embed secure coding standards and supply chain security controls into engineering workflows
Experience & Skills Requirements
Java Spark experience
Market Risk or investment banking experience
Strong hands-on experience with Java and JavaScript
Architecture: Solid understanding of distributed systems, microservices, APIs, and software design patterns
CI/CD: Proven experience implementing and managing CI/CD pipelines using tools such as GitHub Actions, GitLab, or Jenkins
Strong knowledge of SDL and secure coding practices
Understanding of software supply chain security, including SBOMs, dependency management, and vulnerability management
Experience with Software Composition Analysis (SCA) tools and DevSecOps practices is preferred
Knowledge of Zero Trust architecture and policy-as-code is preferred
Containerisation experience with Docker and Kubernetes
Exposure to cloud platforms such as AWS, Azure, or Google Cloud
About Contract Spy
Discovering Direct IT Contract Opportunities for Contract Spy members.