Back to search result
09 June 2021 ... min. read Listen

Senior Java Developer – Touchpoint One Connect – API Gateway @ING Tech

Employee | Information Technology | Professional | Romania | Bucharest | 2020-11-15 | 060300


Discover ING Tech


ING Tech Romania is ING’s global hub for technology established in 2015. Focused on building strategic key capabilities, the hub provides approximately 121 services for 24 ING units globally. These services are grouped in the following main categories: software development; data management; non-financial risk & compliance and audit.

Now, in 2021, our fast-growing organization gathers more than 1000 high-performing engineers and non-financial risk & compliance specialists that work together in global tribes.



Area of responsibility

Touchpoint Platform is part of ING’s “Think Forward” strategy to become a truly global bank. It is a strategic program that that aims to provide a globally scalable banking platform by simplifying and standardizing our banking applications and creating a modularly built system.

The Touchpoint Architecture Platform uses an API Gateway for 'external' client applications to access the TPA platform API's. API Security defines how the APIs of the Touchpoint Architecture are protected and can communicate between each other in a secure and scalable way.

The target state for the Touchpoint Architecture is that all APIs within ING across all countries, can communicate with each other with little restrictions within the platform.

Systems which are outside of the Touchpoint Platform (Security Boundary) will use the API Gateway to access APIs within the platform.

The API Gateway will handle all Client Application-specific security measures (like CORS, CSRF, JSON Busting for browsers and SRP channel for Mobile, etc) to avoid APIs to have to implement these themselves.


Your day-to-day

  • Design and develop new functionality for multiple Java applications
  • Add new functionality to the framework components based on Token technology
  • Design and develop new functionality for the endpoint configuration request application
  • Contribute in the code base of NGINX modules, used for access control and security on the edge
  • Support more junior developers in creating better applications
  • Occasional travel abroad (Amsterdam) is required.


Who we are looking for?

We are currently looking for a senior developer for our NGINX Squad within Touchpoint. The squad currently consists of 6 developers, 2 OPS and a PO, all located in Amsterdam.

The products our team delivers are not only the authentication proxy for all internet channels in the Netherlands and Belgium, but also various authentication components. These are the target TokenAPI and legacy authenticating applications.  Furthermore, we deliver security components, which are reused in the ING developer frameworks to verify users, extract user information and provide secure API to API communication.

We are looking for the following characteristics:

  • A strong interest in Continuous Delivery and Agile / SCRUM ways of working
  • Understanding of what operational excellence means in a DevOps environment and how to contribute.
  • Deliver on promises while keeping good communication lines with clients and partners
  • “Can do" mentality, flexibility and ability to take ownership
  • A collaborative approach to solving problems while bringing positive energy to the team
  • Ability to give and receive professional feedback
  • Relentlessly learn and think in solutions, considering short and long-term value and impact
  • Excellent team player in an international team, quality focused, service oriented, eager to learn.


What you bring to the team

  • Academic education: Bachelor or Master in Computer Science, Cybernetics or equivalent.
  • At least 5 years of experience as an dev/ops engineer, exposure to financial industry is a plus.
  • Experience as a Java developer, especially in the usage of common frameworks like Spring/SpringBoot
  • Preferably experience in C and Python
  • Knowledge about TLS, Crypto, OAuth and SAML
  • A good understanding of the most common security threats (OWASP)
  • Practice in the usage of common developer tools (Git, Docker, Jenkins and Maven)
  • Practice in delivering high-performance and zero downtime applications
  • Knowledge of Agile Methodologies
  • An excellent spoken and written command of English
  • Bonus: Experience in Front-end development (esp. Polymer, Angular)



Back to top

Please be aware that the recruitment procedures, (labour) regulations and labour agreements of Romania apply.

Yes No