[LTA-ITCD] LEAD / PRINCIPAL / SENIOR FULL STACK DEVELOPER

We are seeking a capable Full Stack Developer to join our development team and build secure, scalable and resilient cloud-based digital solutions. The role covers traditional software development, low-code/no-code delivery, cloud services setup for leveraging cloud native solutions, system integration and application Security Operations. The successful candidate will contribute to the development of digital solutions that provide a central platform for engineering project information sharing and collaboration, enabling seamless coordination among LTA, contractors, and government agencies across rail and road infrastructure projects.

Software Development & AI Implementation

• →Develop, enhance and maintain scalable, resilient and secure low-code/no-code platforms using modern programming languages and frameworks.
• →Design and implement responsive web, workflow and mobile solutions with intuitive user interfaces that address business and user needs. 
• →Implement AI features by integrating machine learning models, APIs, and cloud AI services into production applications built on both traditional and low-code/no-code platforms
• →Write clean, maintainable and well-documented code in accordance with established coding standards and software engineering practices. 
• →Participate in code reviews, technical design discussions and architecture reviews, and contribute to continuous improvement of engineering practices. 
• →Develop automated tests and maintain technical documentation, configuration records and architecture decision records. 

Low-Code/No-Code Development 

• →Work with business analysts and stakeholders to translate business requirements into fit-for-purpose solutions using low-code/no-code platforms. 
• →Configure and develop workflows, forms, dashboards and business applications while ensuring maintainability, scalability, security and appropriate governance. 
• →Integrate low-code/no-code applications with external systems, databases, cloud services and APIs. 
• →Assess when to use low-code/no-code, custom development or a hybrid approach based on functional, security, performance and supportability needs. 
• →Troubleshoot application and platform issues and apply platform-agnostic development and governance best practices. 

Cloud Services Setup and Deployment 

• →Build applications leveraging cloud platforms such as AWS, Azure, or Google Cloud Platform, utilising their core & cloud-native services and AI capabilities.
• →Develop and deploy microservices, containerised applications and serverless functions as part of enterprise system architectures. 
• →Implement cloud services’ configuration and deployment practices that promote consistency, security and repeatability across development, test and production environments. 
• →Collaborate with DevSecOps and infrastructure teams to implement CI/CD pipelines, release applications and monitor application deployment governance process. 

Security Operations and Application Assurance

• →Support day-to-day security operations for applications and cloud environments, including security monitoring, vulnerability remediation and operational risk follow-up. 
• →Coordinate Vulnerability Assessment and Penetration Testing (VA/PT), review findings, track remediation actions and support closure validation. 
• →Plan and coordinate operating system, middleware, database, platform and application patch management, including impact assessment, testing, deployment and status tracking. 
• →Support cybersecurity incident management, including detection, triage, containment, investigation, recovery, evidence collection, root-cause analysis and post-incident improvement actions. 
• →Implement secure coding, access control, secrets management, and audit logging, while conducting monthly application log reviews, user account reviews, and privileged account activity reviews to ensure compliance and security governance

System Integration and APIs

• →Design, implement, test and maintain APIs for secure and reliable system-to-system integration. 
• →Develop integration solutions using REST and/or SOAP web services, event-driven patterns and suitable authentication and authorisation mechanisms. 
• →Prepare and maintain API specifications, interface documentation, error-handling standards and integration test cases. 
• →Work with internal teams, government agencies and vendors to troubleshoot interface issues and ensure data integrity across integrated systems. 

Agile Team Participation and Continuous Improvement

• →Experience working in agile development environments using Scrum or Kanban methods.
• →Participate actively in agile ceremonies, including daily stand-ups, sprint planning, sprint reviews and retrospectives. 
• →Collaborate with product owners, project teams and cross-functional stakeholders to deliver agreed features and outcomes. 
• →Contribute to estimation, task breakdown, sprint goals, proof-of-concept work and technical investigations. 
• →Stay current with developments in cloud engineering, cybersecurity, AI-enabled solutions, low-code/no-code platforms and software engineering practices. 

• Knowledge in Computer Science, Software Engineering, Information Technology or a related field, or equivalent practical experience. 
• At least 3 years of relevant experience in software development, cloud-based application delivery or application operations. 
• Good understanding of programming fundamentals, data structures, algorithms and object-oriented programming principles. 
• Proficiency in at least one modern programming language such as Python, JavaScript/TypeScript, Java, C# or equivalent. 
• Knowledge of relational and NoSQL databases, web technologies, version control, automated testing and CI/CD practices. 
• Preferably possess knowledge of the Building Information Modelling (BIM) lifecycle and a good understanding of Common Data Environment (CDE) concepts and practices.

Low-Code/No-Code and Cloud

• Knowledge of low-code/no-code concepts and experience developing or supporting solutions on one or more low-code/no-code platforms. 
• Hands-on experience setting up or configuring application environments on AWS, Microsoft Azure and/or Google Cloud Platform. 
• Understanding of cloud architecture, identity and access management, networking, compute, storage, logging, monitoring, containerisation and serverless services. 
• Relevant cloud or low-code/no-code certification is advantageous. 

Security Operations

• Knowledge or practical experience in application Security Operations, including VA/PT coordination, vulnerability remediation and patch management. 
• Understanding of cybersecurity incident management processes, secure coding practices and application security controls. 
• Ability to work with security, infrastructure, operations and vendor teams to track and close security risks and operational issues. 

API and Integration Experience 

• Experience in API design and implementation for system-to-system integration is preferred. 
• Familiarity with REST/SOAP APIs, API authentication and authorisation, interface specifications, integration testing and error handling is advantageous. 

Personal Qualities

• Strong analytical and critical-thinking skills with a systematic approach to problem solving.
• Attention to detail and ability to communicate effectively with technical and business stakeholders. 
• Ability to work independently and collaboratively, manage competing priorities and contribute to knowledge sharing within the team.
• Self-motivated, curious and willing to learn.
• Receptive to feedback and guidance from senior team members. 
• Collaborative, dependable and committed to delivering quality work within agreed timelines. 
• Detail-oriented, with a strong focus on secure, clean and maintainable solutions. 
• Reliable and committed to delivering quality work within established timelines.