Design, develop, and maintain features across Eclipse Foundation platforms and services, including Open VSX, APIs, community platforms, and internal applications.
Build and operate secure and reliable services using Java, Spring Boot, PostgreSQL, MariaDB, Redis, React, and TypeScript.
Contribute to backend architecture, API design, data models, and integration patterns.
Apply security best practices throughout the development lifecycle, including authentication, authorisation, dependency management, secrets management, input validation, and secure configuration.
Improve platform resilience through safeguards such as rate limiting, abuse prevention, monitoring, and operational controls.
Support the maintenance and evolution of Open VSX and related services.
Write automated tests and contribute to reliable CI/CD pipelines.
Participate in code reviews and collaborate with team members to maintain code quality.
Troubleshoot production issues and contribute to monitoring, logging, and observability.
Write and maintain technical documentation for internal users, contributors, and open source communities.
Work constructively with internal stakeholders, external contributors, and the broader open source community.
Requirements
Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience
Solid experience with Java, ideally JDK 17 or later
Strong experience building and maintaining backend applications with Spring Boot
Experience designing and maintaining REST APIs and service integrations
Experience working with relational databases such as PostgreSQL or MariaDB
Experience working on open source projects or with open source communities
Good understanding of secure software development practices
Experience with dependency management, vulnerability mitigation, authentication, authorisation, and secure configuration
Experience with automated testing, code reviews, and maintainable development practices
Familiarity with CI/CD pipelines, such as GitHub Actions, Jenkins, or similar tools
Working knowledge of Docker
Experience with GitHub or GitLab workflows
Comfort working in a distributed, remote-first team
Ability to communicate clearly with technical and non-technical stakeholders
Experience with TypeScript and React, or another modern frontend framework (Nice to Have)
Experience with Redis or similar caching technologies (Nice to Have)
Experience with Elasticsearch or search platforms (Nice to Have)
Experience with Quarkus (Nice to Have)
Basic familiarity with Kubernetes or similar orchestration platforms (Nice to Have)
Familiarity with monitoring and observability tools such as Prometheus and Grafana (Nice to Have)
Experience with rate limiting, abuse prevention, or platform security controls (Nice to Have)
Interest in software supply-chain security (Nice to Have)
Experience with extension marketplaces, developer tooling, or package registries (Nice to Have)
Experience analysing suspicious software behaviour, malware risks, or detection systems (Nice to Have)
Familiarity with YARA or similar detection-rule systems (Nice to Have)