Software Engineer

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Thales in the Czech Republic employs over 400 people from 45 different nationalities. A total of 15 teams work on projects for government agencies, banking, mobile services and the Internet Of Things (IoT) technology. At the core of our business is the development of software which we configure and embed in a multitude of different devices and form factors. These include many kinds of payment cards, SIM cards, travel passes, secure eBanking devices, authentication tokens, machine identification modules (MIM), and secure ID documents including ePassports, eID and eHealth cards, as well as eDriving licenses. Because of the international environment surrounding us every day, it comes as no surprise that English is our official corporate language.

Build security-critical backend systems that millions of users rely on — with modern Java, modern Spring, and a team that ships, owns, and continuously improves the platform. We’re a product company in the cybersecurity/identity space. That means real engineering problems (security, scale, correctness, reliability), real ownership (you build it, you run it), and real influence (strong partnership with Product, not ticket-taking).

✨ Why This Role Is Different

• Modern stack, by design: We stay on the newest Java LTS and the newest Spring Framework (security expectations make this non-negotiable — and it’s a great side effect for engineers).
• Pragmatic testing: We value confidence over coverage. Integration-first where it matters. Minimal mocking. Tests that catch real issues.
• Strong CI/CD culture: Automated pipelines, multiple test layers, fast feedback, high signal.
• True ownership: We deploy to production ourselves and own the full lifecycle.
• AI-enabled engineering (for real): Company-backed initiative with tooling, guidelines, and people driving adoption — great opportunity to level up how you use AI effectively.
• Voice and influence: Engineers are expected to speak up, challenge solutions, and improve the platform, even beyond our team boundaries.

🚀 What You’ll Do

• Design and deliver backend services where security, correctness, and maintainability are first-class requirements.
• Break down ambiguous, high-impact problems into a clear plan and ship iteratively.
• Collaborate closely with Product to craft solutions that are both technically sound and user-aware.
• Improve platform-wide concerns: reliability, observability, performance, developer experience, and deployment safety.
• Raise the bar through thoughtful code reviews, pragmatic architecture decisions, and knowledge sharing.

🛠️ Our Tech Stack (High-Level)

• Java (latest LTS), Spring Framework (latest)
• Kubernetes, Helm, Skaffold, GitOps
• AWS
• CI/CD with extensive automated testing
• Strong automation mindset across build, deploy, and operations

📋 What We’re Looking For

Must-Haves

• 8+ years of professional software engineering experience
• Deep expertise in Java and strong hands-on experience with Spring
• Excellent communication and collaboration skills
• Fluent English (spoken and written)
• Ability to work autonomously: you can take a big problem, de-risk it, and drive it to completion, while pulling others in when needed
• Strong engineering intuition: you challenge weak solutions, avoid “bare minimum,” and care about long-term quality
• How You Work
• You like clarity, but you’re not blocked by ambiguity
• You optimize for outcomes, not just activity
• You enjoy improving shared foundations (platform, tooling, patterns), not only “your” service

Bonus Points (Nice to Have, Not Required)

If you don’t have these yet — curiosity and the willingness to learn matter more. We’ll help you grow through hands-on work with experienced engineers.

• AuthN/AuthZ flows: OIDC, OAuth2, MFA, WebAuthn, SAML, SCIM
• CIAM/IAM concepts: consent, identity lifecycle, federation, credential management, RBAC, token-based security
• Distributed systems / event-driven experience where scale, availability, and consistency matter
• Observability & performance tuning: metrics/tracing, JVM optimization, load testing
• Cryptography fundamentals: key management, secure hashing, TLS, JWT signing
• Multi-tenant architectures: data isolation, secure configuration management
• IaC / DevOps: Terraform, CloudFormation, GitOps workflows
• Balanced testing strategy: contract tests, integration-first, minimal mocking, maintainable test suites

🎁 What You Get

• High-impact work in a security domain that genuinely matters
• Modern Java + Spring, with a team that actively keeps tech current
• A culture of ownership: build, ship, operate, improve
• Strong DevEx focus and automation mindset
• Free access to Udemy courses
• Mentorship, onboarding, and an environment where learning is expected and supported

🔍 Hiring Process (Transparent and Respectful)

• Step 1: Intro call (mutual fit, expectations)
• Step 2: Technical conversation focused on real-world backend engineering with practical exercise and deep-dive discussion (designed to be relevant, not “leetcode theatre”)
• Step 3: Final team / culture conversation

🌍 Ready to Build Secure, Modern Backend Systems in Prague?

Apply with your CV or LinkedIn profile.

You can also check out our company on Atmoskop - https://www.atmoskop.cz/nazory-na-zamestnavatele/3077450-thales-dis-czech-republic-s-r-o