Contract type: B2B
Rate: PLN 120–165 net/hour
Commitment: Full-time
Work model: Remote or from the VM.PL office in Wrocław
Project start: August 2026
Duration: 11–15 weeks
About the project
You will join a project delivered for a client from the DACH region that is developing a compliance services platform for telecommunications companies.
We are building a multi-tenant, cloud-native SaaS platform from the ground up. It will support the handling of data production and preservation orders in accordance with the EU e-Evidence Regulation. The system will process sensitive data related to criminal proceedings, which means it must meet strict requirements concerning security, data isolation, document immutability and data residency within the European Union.
Your main responsibility will be to implement the key backend components: a Flowable BPMN engine embedded as a library within Spring Boot, a multi-tenant data access layer and a REST API integrating the platform with telecommunications operators’ systems.
The backend will handle EPOC and EPOC-PR orders, including cases with a legally binding processing deadline of only eight hours. This is not a standard CRUD application. We are looking for people who can design and develop complex business processes, tenant isolation mechanisms and solutions requiring high levels of consistency and reliability.
Technologies
Java 21, Spring Boot 3, Spring Security, Spring Data JPA, Flowable 6, BPMN, PostgreSQL, Row-Level Security, REST, OpenAPI 3, Keycloak, OIDC, JWT, S3 Object Lock, JUnit 5, Testcontainers, ArchUnit, GitLab CI, GitHub Actions, Semgrep, CodeQL, Snyk, Trivy, Claude Code, GitHub Copilot, CodeRabbit
Responsibilities
- Implementing BPMN processes in Flowable for the complete EPOC and EPOC-PR case lifecycle
- Configuring the Flowable engine as a library embedded within the Spring Boot application, using shared database transactions
- Building a multi-tenant data access layer and enforcing tenant isolation at the repository and PostgreSQL Row-Level Security levels
- Creating ArchUnit tests to verify that the code does not allow access to data belonging to other tenants
- Developing REST APIs for case creation, status queries and document uploads
- Designing API contracts using an OpenAPI specification-first approach
- Integrating the platform with external telecommunications operators’ CRM systems using the adapter pattern
- Implementing JWT validation and role-based access control through Keycloak and OIDC integration
- Handling document storage in S3 Object Lock and conflicts between GDPR-based deletion requests and active legal preservation holds
- Creating integration tests with JUnit 5 and Testcontainers for PostgreSQL, Keycloak and S3-compatible storage
- Participating in architecture reviews and documenting significant technical decisions in the form of Architecture Decision Records
- Using AI-assisted coding tools while ensuring that all code undergoes mandatory human review and automated security checks
Requirements
- At least five years of commercial Java development experience
- Very good knowledge of Java and Spring Boot 3
- Hands-on knowledge of Spring Security and Spring Data JPA
- Experience with BPMN workflow engines such as Flowable or Camunda
- Experience embedding a workflow engine within an application or a good understanding of the embedded deployment model and shared transactions
- Very good knowledge of PostgreSQL, including query optimisation, indexing strategies and connection pool management
- Experience designing and developing REST APIs
- Practical knowledge of OpenAPI or Swagger and the specification-first approach
- Experience creating integration tests with Testcontainers
- Knowledge of architectural patterns used in multi-tenant SaaS platforms
- Understanding of tenant context propagation, data isolation and query-scoping mechanisms
- Experience working with pull requests, code reviews and CI-based development processes
- Very good written and spoken English and Polish
- Independence, ownership of implemented solutions and readiness to work in close partnership with the Lead Software Architect
Additional advantages
- Hands-on knowledge of Flowable, including BPMN or CMMN
- Experience with PostgreSQL Row-Level Security
- Knowledge of ArchUnit and architectural rule testing
- Experience with Keycloak, OIDC and JWT
- Knowledge of S3 Object Lock or other WORM storage mechanisms
- Experience with Java 21 and virtual threads
- Knowledge of GDPR, compliance or systems processing legally protected data
- Experience in telecommunications, LegalTech or GovTech projects
- Knowledge of ETSI TS 103 120 or ETSI TS 104 144 standards
- Practical experience using Claude Code, GitHub Copilot or other AI-powered coding assistants
- Fluency in German
What we offer
- Remote work with the option to use the VM.PL office in Wrocław
- Participation in a greenfield project with a high level of technical complexity and real legal significance
- The opportunity to implement BPMN processes, multi-tenant architecture and secure data storage mechanisms from the ground up
- Access to AI tools and opportunities to develop practical AI-assisted engineering skills
- Close collaboration with the Lead Software Architect on the design of the platform’s key components
- A working model based on the Flow Driven Framework, with no daily stand-ups, two or three short coordination meetings per week and protected time for focused work
- Clear communication, a flat organisational structure and a team built on openness, mutual support and trust
- The possibility of joining further projects delivered for clients from different industries
- Work in an international team with daily communication in English
- Company-funded English and German language lessons, including classes with native speakers