Java Developer – Financial Credit Risk Control

About the role

We are looking for a Java Developer to join our financial credit risk control team in Abu Dhabi. The role focuses on designing, developing and maintaining Java‑based credit risk systems that support the full loan lifecycle, from pre‑loan approval to post‑loan monitoring.

Key responsibilities

• Build and enhance Java micro‑services for credit approval, anti‑fraud checks and post‑loan monitoring.
• Design high‑availability APIs with strict latency targets (≤300 ms pre‑loan, ≤500 ms post‑loan) handling thousands of concurrent requests.
• Translate regulatory risk rules and scoring models into executable Java code.
• Develop a dynamic rule platform with online editing and grayscale release, leveraging Redis caching and asynchronous processing.
• Integrate machine‑learning models (TensorFlow, PyTorch) via RESTful APIs for real‑time scoring.
• Connect to external financial data sources using MyBatis or Spring Data JPA and build risk data marts.
• Process batch data with Flink or Spark for monthly credit synchronization and repayment calculations.
• Implement data security measures (desensitization, RBAC, audit logs) to comply with personal data protection regulations.

Required profile

• Bachelor’s degree in Computer Science, Software Engineering or a related field.
• At least 3 years of backend Java development experience and 1.5 years in financial credit risk or fintech.
• Strong understanding of banking or consumer finance regulations (CBIRC, PBOC, AML).
• Experience with high‑availability micro‑service architectures and distributed transactions.

Required skills

• Java (JDK 11+), JVM tuning, concurrency, ThreadPool.
• Spring Boot, Spring Cloud Alibaba, Nacos, Apollo, Seata.
• MySQL (sharding), Redis (cluster), MyBatis, Spring Data JPA.
• Rule engines such as Drools or Easy Rules.
• Apache Flink or Apache Spark.
• RESTful API design, circuit breaking, distributed locks.
• Machine‑learning model integration (TensorFlow, PyTorch).
• Security protocols (API signature, SM4, SM2) and data protection best practices.