What are the responsibilities and job description for the Lead Platform Engineer with Java position at ClifyX?
Hello,
Greetings from Clifyx.
**************************Visa Independent*******************
Title: Lead Platform Engineer with Java
Location: Cedar Rapids, Lowa (Hybrid-Onsite)
12 Month Contract
Job details
Relevant Experience*
7 – 10 Years Have played a lead role and have deep technical understanding
Mandatory skills*
Java, Springboot, Angular, NodeJS, AWS
Desired skills*
AI , Python
About the Role
We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting — it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.
What You'll Do
- Remediate library vulnerabilities across platform services on a twice-weekly cycle
- Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies)
- Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes
- Validate upgrades don't introduce regressions (build, test, deploy)
- Maintain compatibility across shared libraries consumed by multiple services
- Work with AI-assisted remediation tooling to accelerate upgrade workflows
- Coordinate with security and release teams on vulnerability SLAs
- Occasionally remediate Python dependencies (pip/requirements.txt) in platform services
Required Skills
Primary (Must-Have)
- Java 17/21
- Maven
- Spring / Spring Boot
- GitHub
- Jenkins pipelines
Secondary
- Python 3.x
- pip / requirements.txt / Poetry
- React
- Node.js / NPM
Cloud & Infrastructure
- AWS (ECS, Lambda, IAM)
- Docker
- Terraform
- Git
AI & Automation
- AI-assisted coding (AWS Kiro or similar)
- Familiarity with LLM-driven workflows
- Automation mindset
Security & Compliance
- SCA tools (Mythos, Snyk, or similar)
- Vulnerability lifecycle management
- CVSS scoring & risk assessment
- Compliance awareness
Nice to Have
- Strong experience with SDLC, DevOps, and CI/CD pipelines
- Experience managing upgrades at scale across 10 microservices
- Familiarity with Apache Camel or integration-heavy Spring services
- Background in financial services / insurance (regulated environment)
- Experience with OpenSearch or Elasticsearch library upgrades
- Comfort with NestJS/Node.js (some platform tooling uses this)
Thanks & Best Regards,
Vishal Swami – Clifyx (US IT Recruiter)
Contact Number- 908-279-1295
LinkedIn: linkedin.com/in/vishal-swami-790a72179
Headquarters: South Plainfield, NJ – 07080