Software Engineer

Kunai builds full-stack technology solutions for banks, credit and payment networks, infrastructure providers, and their customers. Together, we are changing the world’s relationship with financial services. At Kunai, we help our clients modernize, capitalize on emerging trends, and evolve their business for the coming decades by remaining tech-agnostic and human-centered.

We are building a team of Senior Software Engineers to join a high-impact digital payments modernization program supporting the integration of a major card network into one of the largest financial institutions in the United States. This is a hands-on engineering role at the intersection of legacy and modern infrastructure, where you will contribute to both the reliability of mission-critical payment systems today and help shape the architecture that will power them tomorrow.

Some things you may work on

You will be embedded across one or more workstreams supporting digital payments engineering, with responsibilities that may include:

Domain & Service Architecture

• Apply domain-driven design to define bounded contexts, domain models, and aggregate boundaries for card-network reference data — establishing a ubiquitous language shared across engineering and business stakeholders.
• Develop and harden a Spring Boot / JPA / PostgreSQL Aurora service with Liquibase-managed schema migrations, a Drools-based business rules engine, and scheduled batch jobs — including designing authorization and data-access controls from the ground up where none exist today.
• Design and own integration workflows and routing using Apache Camel (or equivalent), orchestrating multi-step, stateful operations such as request intake, validation, approval, and publication pipelines.
• Develop an event-driven backbone using Kafka — topic/schema design, producer/consumer reliability patterns, and integration with the rules engine and workflow layer.

Frontend & Identity

• Develop a micro-frontend application (Next.js/React/TypeScript) as an independently deployable system, and design its convergence path into the card network's future shared micro-frontend shell.
• Own the OAuth2/OIDC identity architecture end-to-end — provider integration (Okta), JWT/token validation strategy, session/revocation design, and trust-boundary decisions across environments.

Cloud & Platform

• Design and govern AWS IAM policy, S3, and CloudFront architecture across multiple environments — this is not config-following; you're expected to set the standard.
• Lead deployment on the organization's internal static cloud hosting platform.
• Drive test-driven development practice across the team and build out continuous testing/automation pipelines (unit, contract, integration, and end-to-end) as part of CI/CD.