Software Engineer

Your role

This is a short-term position of up to one year.

You deliver, enhance and operate SAMA-driven regulatory and interactive technologies, building secure and resilient integrations between regulatory platforms (Watheeq, E-Invoicing) and UBS core banking, payments and data environments. You balance change delivery with production stability to ensure compliant outcomes, accurate data and uninterrupted regulatory submissions.

In this role, you will:

- Translate SAMA/Watheeq specifications into technical designs, service contracts, data mappings and deployment plans.

- Build and maintain microservices and integration components using event-driven patterns (Kafka/Zookeeper) and caching/persistence layers (Redis) to meet resilience and observability standards.

- Implement and enhance Watheeq message flows end-to-end (validation rules, acknowledgements, retries, idempotency, replay handling and exception management).

- Engineer ETL/data hand off pipelines and controls to ensure data lineage, reconciliation, auditability and timely regulatory outcomes.

- Deploy and operate services on Tomcat, ensuring secure configuration, dependency management, logging/monitoring integration and SDLC compliance.

- Provide L2/L3 production support: monitor services, triage alerts, supervise batches/ETL and ensure regulatory submission continuity within SLAs.

- Drive incident, problem and change execution end-to-end-root-cause analysis, permanent fixes, hot fixes, controlled releases, rollback planning and post-deploy validation.

- Maintain engineering artefacts (designs, runbooks, configuration baselines) and improve observability, automation and data-quality controls.

- Collaborate with product, operations, compliance, platform and external providers to clarify requirements, manage dependencies and resolve technical escalations.

Your team

You work in the Saudi Applications Solutions Engineering Team at the intersection of regulatory delivery, payments and technology-partnering with core banking, payments, integration, security and infrastructure teams, as well as risk/compliance and business owners. You also coordinate closely with Saudi regulatory platform providers and external parties to deliver changes against SAMA timelines and to keep services stable in production.

You have:

- Hands-on experience delivering changes for Saudi regulatory platforms (Watheeq and related interactive services), including end-to-end integration flows and production support.

- Strong engineering knowledge of message-driven and streaming patterns (Kafka, Zookeeper),including topic design, consumer groups, ordering, replay strategies and operational monitoring.

- Experience building ETL and data pipelines for controlled handoffs, transformations, reconciliations and lineage, with an audit and evidence mindset.

- Experience engineering and operating services on Tomcat and microservice stacks (including Red is persistence), with strong focus on secure configuration and runtime stability.

- Strong Oracle application and SQL capability to deliver performant queries, data validations and reconciliation controls to ensure data accuracy and traceability.

- Working knowledge of regulated delivery controls (secure SDLC, change management, CAB governance, segregation of duties) and how engineering artefacts support compliance.

- Experience with DevOps and CI/CD practices (release automation, configuration management, environment promotion) to deliver traceable changes in controlled environments.

- Experience using Azure DevOps (or equivalent) to manage backlogs, plan releases, trace requirements to delivery and report progress through dashboards and work item hygiene.

- Experience managing vendors and third parties-defining scope and SLAs, coordinating delivery milestones and handling technical escalations across regulated change timelines.

- Proven ability to write detailed functional and technical specifications (APIs, data mappings, non-functional requirements, operational runbooks) that enable reliable build, test and deployment.

- Experience conducting security and control reviews of deployment processes-validating least privilege, secrets handling, change approvals, evidence capture and adherence to secure SDLC and segregation-of-duties requirements.

- Experience monitoring service performance and throughput, identifying bottlenecks and efficiency opportunities to cope with high volumes of regulatory and payment messages while preserving SLAs.

- Proven ability to identify and implement automation opportunities for recovery protocols-automated retries, replay tooling, quarantine queues, and streamlined handling of misrouted or exceptional messages.

- Hands-on experience defining and tracking operational metrics (SLIs/SLOs), tuning alerts to reduce noise and using dashboards/logs to detect degradation early and prevent incidents.

- Experience with capacity planning and performance testing for integration workloads-forecasting peak volumes, validating queue/backlog behavior and ensuring safe scaling without compromising controls.

You are:

- Clear and structured in how you communicate-able to turn regulatory requirements into actionable designs, delivery plans and operational instructions.

- Analytical and pragmatic, comfortable navigating complex data flows, controls and integration dependencies to make sound technical decisions.

- Strong at collaboration and influence across engineering, operations, compliance and vendor teams-aligning on priorities and outcomes.

- Accountable and resilient-able to deliver under regulatory timelines while maintaining quality, controls and calm execution during incidents.

- Disciplined in delivery execution-comfortable using DevOps tooling to plan, prioritize and track work, while maintaining transparency on risks, dependencies and release readiness.

- Effective at vendor and third‑party coordination-setting clear expectations, ensuring timely inputs, and driving resolution when blockers or quality issues arise.

- Detail‑oriented and documentation‑driven-able to produce precise specifications that reduce ambiguity, support testing and audits and improve operational handover.

- Security‑minded in how you deliver change-proactively identifying deployment risks, validating controls, and partnering with security and platform teams to meet policy and regulatory expectations.

- Proactive about operational excellence-continuously monitoring performance, spotting efficiency opportunities, and driving improvements that keep message processing stable under load.

- Automation‑first in how you run production-designing repeatable recovery protocols, reducing manual touchpoints and improving how exceptional or misrouted messages are detected, reviewed and resolved.

- Data‑driven in trouble shooting and optimization-comfortable using metrics, logs and traces to isolate issues, validate hypotheses and measure the impact of changes.

- Dependable during incidents-able to execute recovery steps calmly, communicate clearly and convert learnings into better runbooks, guardrails and preventative controls.