Full Stack Developer

Position

The Full Stack Developer is a full-time position within the IT team.

Location

The location for the role is within Auckland, New Zealand, or any other remote location upon notification by the Employer.

Overview

This role will report to the Director – Engineering and IT and play a critical role in designing, developing, deploying, maintaining, and supporting our diverse range of applications. This role will be closely aligned with the company’s IT strategy and product roadmap, ensuring our technological solutions remain at the forefront of industry standards.

The role also supports BW Digital’s Information Security Management System (ISMS) by ensuring that all development activities comply with internal information security policies, secure development practices, and ISO/IEC 27001 requirements.

Key Responsibilities

• Participate in strategic decision-making and contribute to the design of the IT Dev Roadmap
• Report to the manager on collaboration and projects, and proactively offer solutions
• Participate in designing and implementing software architecture and applications
• Review, identify, propose, and implement changes in our current application stacks, in collaboration with IT system team, to optimize costs and reduce maintenance
• ldentify, test, recommend, develop and deploy applications and tools including and not limited to Java related technologies and frameworks that are relevant to the business requirements of the company.
• ldentify, assess, advise on, develop and implement centralized software development tools and development guidelines and processes that are the state of the art in implementing front-end and back-end applications
• Maintain updated overview of the software stack and applications, their interactions and user documentation
• Participate in and facilitate code reviews with peers.

Information Security Responsibilities

• Comply with BW Digital’s Information Security Management System (ISMS), including all applicable policies, standards, and procedures.
• Ensure that all systems and applications developed or maintained preserve the confidentiality, integrity, and availability of information.
• Apply secure software development lifecycle (SDLC) practices, including secure design, coding standards, code reviews, and vulnerability management.
• Implement and maintain appropriate authentication, authorization, and access control mechanisms in line with the principle of least privilege.
• Ensure the protection of sensitive and business-critical information in accordance with data classification and handling requirements.
• Integrate security controls into applications, including logging, monitoring, and auditability, to support operational and security requirements.
• Proactively identify, assess, and remediate security vulnerabilities, including those related to third-party components, dependencies, and software libraries.
• Collaborate with IT and security teams to support risk assessments, security reviews, audits, and compliance activities.
• Promptly report any identified security weaknesses, vulnerabilities, or incidents in accordance with company incident management procedures.
• Protect company and customer information from unauthorized access, disclosure, alteration, or destruction, including during development, testing, and deployment activities.
• Participate in security awareness and training programs and contribute to the continuous improvement of secure development and operational practices.

Mandatory Qualifications & Experiences

• 2-3 years of professional experience in full-stack software development.
• Proven experience in building and deploying scalable applications and services.
• Frontend proficiency in JavaScript/TypeScript and modern frameworks such as Angular.
• Backend proficiency in server-side language like Java with framework Springboot.
• APIs experience in designing, building, and consuming RESTful APIs.
• ETL Tools to schedule and collect data, process and store them, such as Pentaho.
• Understanding of secure coding principles and common application security risks (e.g., OWASP Top 10).

 Desirable Requirements:

• DevOps experience with container tools such as Docker.
• Testing skills tests in automated testing framework (e.g., Selenium, BDD Cucumber).
• Familiarity with setting up CI/CD automated deployments via Jenkins or GitLab.
• Experience with problem-solving and analytical skills.
• Experience with debugging and optimization skills.
• Strong verbal and written communication skills for cross-functional teamwork.