Job Description

Location: Praha, CzechiaThales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.Thales in the Czech Republic employs over 400 people from 45 different nationalities. A total of 15 teams work on projects for government agencies, banking, mobile services and the Internet Of Things (IoT) technology. At the core of our business is the development of software which we configure and embed in a multitude of different devices and form factors. These include many kinds of payment cards, SIM cards, travel passes, secure eBanking devices, authentication tokens, machine identification modules (MIM), and secure ID documents including ePassports, eID and eHealth cards, as well as eDriving licenses. Because of the international environment surrounding us every day, it comes as no surprise that English is our official corporate language.

Build security-critical backend system that millions of users rely on - with modern Java, modern Spring, and a team that ships, owns, and continuously improves the platform.

We’re a product company in the cybersecurity/identity space That means real engineering problems (security, scale, correctness, reliability), real ownership (you build it, you run it), and real influence (strong partnership with Product, not ticket-taking).

Why this role is different

• Modern stack, by design We stay on the newest Java LTS and the newest Spring Framework (security expectations make this non-negotiable - and it’s a great side effect for engineers).
• Pragmatic testing We value confidence over coverage Integration-first where it matters. Minimal mocking. Tests that catch real issues.
• Strong CI/CD culture Automated pipelines, multiple test layers, fast feedback, high signal.
• True ownership We deploy to production ourselves and own the full lifecycle.
• AI-enabled engineering (for real) Company-backed initiative with tooling, guidelines, and people driving adoption - great opportunity to level up how you use AI effectively.
• Voice and influence Engineers are expected to speak up, challenge solutions, and improve the platform, even beyond our team boundaries.

What you’ll do

• Design and deliver backend services where security, correctness, and maintainability are first-class requirements.
• Break down ambiguous, high-impact problems into a clear plan and ship iteratively.
• Collaborate closely with Product to craft solutions that are both technically sound and user-aware.
• Improve platform-wide concerns: reliability, observability, performance, developer experience, and deployment safety.
• Raise the bar through thoughtful code reviews, pragmatic architecture decisions, and knowledge sharing.

Our tech stack (high-level)

• Java (latest LTS), Spring Framework (latest)
• Kubernetes, Helm, Skaffold, GitOps
• AWS
• CI/CD with extensive automated testing
• Strong automation mindset across build, deploy, and operations

What we’re looking for

Must-haves

• 8+ years of professional software engineering experience
• Deep expertise in Java and strong hands-on experience with Spring
• Excellent communication and collaboration skills
• Fluent English (spoken and written)
• Ability to work autonomously: you can take a big problem, de-risk it, and drive it to completion, while pulling others in when needed
• Strong engineering intuition: you challenge weak solutions, avoid “bare minimum,” and care about long-term quality

How you work

• You like clarity, but you’re not blocked by ambiguity
• You optimize for outcomes, not just activity
• You enjoy improving shared foundations (platform, tooling, patterns), not only “your” service

Bonus points (nice to have, not required)

If you don’t have these yet - curiosity and the willingness to learn matter more. We’ll help you grow through hands-on work with experienced engineers.

• AuthN/AuthZ flows: OIDC, OAuth2, MFA, WebAuthn, SAML, SCIM
• Interest in CIAM/IAM concepts: consent, identity lifecycle, federation, credential management, RBAC, token-based security
• Distributed systems / event-driven experience where scale, availability, and consistency matter
• Observability & performance tuning: metrics/tracing, JVM optimization, load testing
• Cryptography fundamentals: key management, secure hashing, TLS, JWT signing
• Multi-tenant architectures, data isolation, secure configuration management
• IaC / DevOps: Terraform, CloudFormation, GitOps workflows
• Balanced testing strategy: contract tests, integration-first, minimal mocking, maintainable test suites

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!