- Temporary
- Quick Apply
Job Title: Senior Software Engineer
Location: Orlando, FL (Hybrid_ Onsite 2 days a week_ Local Only)
Duration: 12 months contract
Job Details: We are hiring a Senior Software Engineer to help build and ship the next-generation Children Discovery App (CDA) for client. CDA is a location-aware operational platform used by cast and youth programs across multiple ships and resort/island locations. It supports guest registration, check-in, guests-in-care workflows, messaging, reporting, real-time room/occupant visibility, and integrations with enterprise reservation and charging systems. You will work across a multi-repo system-Angular SPA, Node.js Web API, and Java core services-following Disney Reference Architecture (RA) patterns, CI/CD promotion through latest stage per-location production, and enterprise security (MyID/Keycloak OIDC, authz, Vault/Consul-style config).
About the Project
The CDA replacement program modernizes a legacy application into a modular stack:
- UI: Angular SPA, Express static server, Capacitor (iOS/Android), lazy-loaded feature modules (check-in, dashboard, guests-in-care, notifications, settings), i18n, Jest (80% coverage threshold).
- Web API: Node.js + Restify, TypeScript, OpenAPI/Swagger, authz token endpoints.
- Core API: Java 21, Spring Boot, embedded Jetty, CXF REST, Flyway/JPA, MariaDB, Redis, STOMP WebSocket relay with room-state aggregation.
Domain highlights:
- Per-location behavior - ships (Adventure, Destiny, Dream, Fantasy, Magic, Treasure, Wish, Wonder) and resorts/islands (Aulani, Castaway, LHP, etc.) with configurable flows, charging rules, and UI visibility.
- Real-time operations - reader pulses aggregated into room occupancy snapshots pushed to the UI via WebSocket/STOMP; inactivity ("fruit punch") alerting for guests in care.
- Enterprise integrations - reservation/guest data, OARS eligibility, Fidelio band charging (location-dependent).
- Observability - Grafana/Prometheus metrics, structured logging, correlation IDs.
What You'll Do:
- End-to-end feature delivery - design, implement, test, and deploy user-facing and API capabilities aligned with acceptance criteria and location-config requirements.
- Full-stack contribution - primary strength in Angular + TypeScript and/or Node.js Web APIs, with willingness to touch Java/Spring services (relay, children API, persistence) when the work spans layers.
- Location-aware design - implement and extend configuration-driven behavior so one codebase serves many deployment targets without hard-coded location logic.
- Real-time UX - integrate STOMP/WebSocket room state in the SPA; handle reconnect, replay on subscribe, and consistent UI state under multi-pod deployments.
- Security & compliance - OIDC/MyID login flows, role/claims enforcement (CDA_USER, CDA_ADMIN, cast/guest authz patterns), parameterized data access, no secrets in code, safe error handling.
- API quality - REST contract design, OpenAPI documentation, backward-compatible versioning, integration with existing RA auth interceptors and validators.
- Data & persistence - MariaDB schema/migrations (Flyway), JPA entities, and coordination with documented MongoDB/per-location persistence strategy where applicable.
- DevOps collaboration - Docker images, health checks, environment-specific config (Vault, mpropz), and CI pipeline fixes; promote artifacts through latest stage production locations.
- Code quality - unit/integration tests, lint gates, code review, and clear PR descriptions (including Jira mapping and test plans).
- Mentorship - unblock mid-level engineers, uphold RA and team conventions, and document non-obvious domain or integration behavior.
- Modern engineering practices - use approved tools (including AI-assisted development where permitted) to accelerate delivery while maintaining test coverage, code review standards, and compliance requirements; validate all generated or suggested code and never expose guest/PII, credentials, or secrets to unapproved external tools.
Required Qualifications:
- 8+ years professional software development, with 5+ years in senior or lead IC roles on production web applications.
- Strong TypeScript and Angular (modern standalone/module patterns, routing, HTTP interceptors, reactive forms, testing with Jest or similar).
- Production experience building Node.js REST APIs (TypeScript preferred); comfort with auth middleware, cookies/tokens, and API security basics.
- Solid SQL and relational modeling; experience with MariaDB/MySQL or equivalent.
- Experience with OAuth2/OIDC enterprise SSO, JWT validation, and role-based access control.
- Docker and cloud-style deployment (ECS/Kubernetes or similar); understanding of health checks, env-based config, and twelve-factor practices.
- Strong git workflow, code review culture, and ability to work in multi-repo codebases.
- Excellent communication: technical design notes, stakeholder updates, and clear written PR/Jira documentation.
Preferred Qualifications:
- Java 21 and Spring Boot (JPA, Flyway, embedded servlet containers, Micrometer metrics).
- WebSocket/STOMP or similar real-time messaging; Redis pub/sub for multi-instance fan-out.
- Capacitor or hybrid mobile delivery for operational tablet apps.
- Experience with enterprise integration (reservation, POS/charging, eligibility services).
- Familiarity with WDPR Reference Architecture blocks (MyID login, mpropz, logasaurus, authz filters)-or comparable large-org platform libraries.
- NGINX reverse proxy and local multi-service dev setups.
- Load/performance testing and operational runbooks for ship/resort deployments.
- Productive use of AI-assisted development tools (e.g. IDE agents, code review aids) with strong judgment-validating output, preserving security and quality standards, and following company policy on guest/PII and credentials.
| |||||||||||||