Software Engineer

Location: Praha, Czechia
Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.
Thales in the Czech Republic employs over 400 people from 45 different nationalities. A total of 15 teams work on projects for government agencies, banking, mobile services and the Internet Of Things (IoT) technology. At the core of our business is the development of software which we configure and embed in a multitude of different devices and form factors. These include many kinds of payment cards, SIM cards, travel passes, secure eBanking devices, authentication tokens, machine identification modules (MIM), and secure ID documents including ePassports, eID and eHealth cards, as well as eDriving licenses. Because of the international environment surrounding us every day, it comes as no surprise that English is our official corporate language.
Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.
Thales in the Czech Republic employs over 400 people from 45 different nationalities. A total of 15 teams work on projects for government agencies, banking, mobile services and the Internet Of Things (IoT) technology. At the core of our business is the development of software which we configure and embed in a multitude of different devices and form factors. These include many kinds of payment cards, SIM cards, travel passes, secure eBanking devices, authentication tokens, machine identification modules (MIM), and secure ID documents including ePassports, eID and eHealth cards, as well as eDriving licenses. Because of the international environment surrounding us every day, it comes as no surprise that English is our official corporate language.
Build security-critical backend systems that millions of users rely on — with modern Java, modern Spring, and a team that ships, owns, and continuously improves the platform. We’re a product company in the cybersecurity/identity space. That means real engineering problems (security, scale, correctness, reliability), real ownership (you build it, you run it), and real influence (strong partnership with Product, not ticket-taking).
✨ Why This Role Is Different
Modern stack, by design: We stay on the newest Java LTS and the newest Spring Framework (security expectations make this non-negotiable — and it’s a great side effect for engineers).
Pragmatic testing: We value confidence over coverage. Integration-first where it matters. Minimal mocking. Tests that catch real issues.
Strong CI/CD culture: Automated pipelines, multiple test layers, fast feedback, high signal.
True ownership: We deploy to production ourselves and own the full lifecycle.
AI-enabled engineering (for real): Company-backed initiative with tooling, guidelines, and people driving adoption — great opportunity to level up how you use AI effectively.
Voice and influence: Engineers are expected to speak up, challenge solutions, and improve the platform, even beyond our team boundaries.
🚀 What You’ll Do
Design and deliver backend services where security, correctness, and maintainability are first-class requirements.
Break down ambiguous, high-impact problems into a clear plan and ship iteratively.
Collaborate closely with Product to craft solutions that are both technically sound and user-aware.
Improve platform-wide concerns: reliability, observability, performance, developer experience, and deployment safety.
Raise the bar through thoughtful code reviews, pragmatic architecture decisions, and knowledge sharing.
🛠️ Our Tech Stack (High-Level)
Java (latest LTS), Spring Framework (latest)
Kubernetes, Helm, Skaffold, GitOps
AWS
CI/CD with extensive automated testing
Strong automation mindset across build, deploy, and operations
📋 What We’re Looking For
Must-Haves
8+ years of professional software engineering experience
Deep expertise in Java and strong hands-on experience with Spring
Excellent communication and collaboration skills
Fluent English (spoken and written)
Ability to work autonomously: you can take a big problem, de-risk it, and drive it to completion, while pulling others in when needed
Strong engineering intuition: you challenge weak solutions, avoid “bare minimum,” and care about long-term quality
How You Work
You like clarity, but you’re not blocked by ambiguity
You optimize for outcomes, not just activity
You enjoy improving shared foundations (platform, tooling, patterns), not only “your” service
Bonus Points (Nice to Have, Not Required)
If you don’t have these yet — curiosity and the willingness to learn matter more. We’ll help you grow through hands-on work with experienced engineers.
AuthN/AuthZ flows: OIDC, OAuth2, MFA, WebAuthn, SAML, SCIM
CIAM/IAM concepts: consent, identity lifecycle, federation, credential management, RBAC, token-based security
Distributed systems / event-driven experience where scale, availability, and consistency matter
Observability & performance tuning: metrics/tracing, JVM optimization, load testing
Cryptography fundamentals: key management, secure hashing, TLS, JWT signing
Multi-tenant architectures: data isolation, secure configuration management
IaC / DevOps: Terraform, CloudFormation, GitOps workflows
Balanced testing strategy: contract tests, integration-first, minimal mocking, maintainable test suites
🎁 What You Get
High-impact work in a security domain that genuinely matters
Modern Java + Spring, with a team that actively keeps tech current
A culture of ownership: build, ship, operate, improve
Strong DevEx focus and automation mindset
Free access to Udemy