Software Engineer, Java and Spring Boot

About the Eclipse Foundation The Eclipse Foundation is a globally recognized nonprofit organization that supports a vibrant community of open source projects and contributors. With a commitment to vendor neutrality and transparency, we provide a collaborative environment for innovation across industries including cloud, edge, AI, and developer tooling. Our team is remote-first, inclusive, and passionate about open source. Position Summary The Eclipse Foundation is seeking a Software Engineer to join our Software Development team. In this role, you will work on Open VSX, an open source registry for Visual Studio Code extensions and compatible editors, as well as other business-critical platforms and services. These include APIs, community platforms, and internal applications used by our staff and members. You will contribute to the design, development, and operation of secure, reliable, and maintainable software. The role has a strong focus on Java, Spring Boot, backend services, security fundamentals, and operational quality. You will work closely with other developers, contractors, and the open source community to deliver systems that are trusted and widely used. This role offers exposure to large-scale open source infrastructure, modern backend and frontend technologies, and real-world platform and security challenges. Responsibilities Design, develop, and maintain features across Eclipse Foundation platforms and services, including Open VSX, APIs, community platforms, and internal applications. Build and operate secure and reliable services using Java, Spring Boot, PostgreSQL, MariaDB, Redis, React, and TypeScript. Contribute to backend architecture, API design, data models, and integration patterns. Apply security best practices throughout the development lifecycle, including authentication, authorisation, dependency management, secrets management, input validation, and secure configuration. Improve platform resilience through safeguards such as rate limiting, abuse prevention, monitoring, and operational controls. Support the maintenance and evolution of Open VSX and related services. Write automated tests and contribute to reliable CI/CD pipelines. Participate in code reviews and collaborate with team members to maintain code quality. Troubleshoot production issues and contribute to monitoring, logging, and observability. Write and maintain technical documentation for internal users, contributors, and open source communities. Work constructively with internal stakeholders, external contributors, and the broader open source community. Education Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent professional experience. Desired Skills and Experience Solid experience with Java, ideally JDK 17 or later. Strong experience building and maintaining backend applications with Spring Boot. Experience designing and maintaining REST APIs and service integrations. Experience working with relational databases such as PostgreSQL or MariaDB. Experience working on open source projects or with open source communities. Good understanding of secure software development practices. Experience with dependency management, vulnerability mitigation, authentication, authorisation, and secure configuration. Experience with automated testing, code reviews, and maintainable development practices. Familiarity with CI/CD pipelines, such as GitHub Actions, Jenkins, or similar tools. Working knowledge of Docker. Experience with GitHub or GitLab workflows. Comfort working in a distributed, remote-first team. Ability to communicate clearly with technical and non-technical stakeholders. Nice to Have Experience with TypeScript and React, or another modern frontend framework. Experience with Redis or similar caching technologies. Experience with Elasticsearch or search platforms. Experience with Quarkus. Basic familiarity with Kubernetes or similar orchestration platforms. Familiarity with monitoring and observability tools such as Prometheus and Grafana. Experience with rate limiting, abuse prevention, or platform security controls. Interest in software supply-chain security. Experience with extension marketplaces, developer tooling, or package registries. Experience analysing suspicious software behaviour, malware risks, or detection systems. Familiarity with YARA or similar detection-rule systems. Work Skills Clear and direct communication. Ability to work independently in a distributed team. Pragmatic approach to problem solving. Attention to security, reliability, and maintainability. Willingness to learn and grow through feedback and collaboration. Habit of writing clear documentation. Constructive approach to code reviews and technical discussions. Location This is a remote position. The selected candidate will work from their home office. All qualified candidates will be considered, with preference for candidates based in Canada, France, Germany, Italy, Spain, Portugal, and Belgium. Why