Remote Lead Java Developer/Solution Architect (6-month contract) in Alloa

gravity9 is recruiting Java engineers and architects for a portfolio of engagements across UK central government. These are large-scale, data-intensive modernisation programmes: replacing legacy systems that carry statutory weight, decomposing monoliths that serve millions of users, and building secure data platforms where access control and auditability are first-class architectural concerns rather than late additions.
We are hiring across two overlapping profiles — Senior Java Developer and Application / Migration Architect — and expect most people to move between programmes as engagements start and complete. Several of these are hands-on architect roles: you will own design decisions and also write production code

Individual roles will draw on some of this, not all of it — we are more interested in engineers who can work confidently at the intersection of Java and data than in a checklist match against any one programme.
Secure data catalogue and access-control platform
A greenfield metadata catalogue acting as a federated index over data held across independent domains, so that authorised parties can locate and retrieve data the catalogue itself never holds. The work includes designing an attribute-based access control model over attributes such as clearance, nationality, organisational unit and compartment; enforcing those policies inside the database query path rather than filtering results afterwards; hybrid lexical and semantic search with access filtering applied before candidate retrieval rather than after it; and a tamper-evident audit trail that can reconstruct why a given record was returned, redacted or withheld.
Real-time decision-support data architecture
Replacing point-to-point integration across a multi-vendor estate with a microservices architecture and a common data layer, so that operational data flows in near real time instead of over days. The work includes target-state architecture and decision records, change-data-capture ingest pipelines from upstream data services, ontology and mapping-layer design across suppliers with competing data models, separation of system, reference and insight data classes including time-series, and deployment topologies spanning cloud-hosted services down to constrained edge hardware.
Migrating hundreds of millions of records and tens of terabytes of XML out of a legacy relational platform into a sharded document store, in support of a COBOL-to-Java microservices rewrite. The work includes a configuration-driven XML-to-JSON transformation framework backed by a versioned schema registry — twenty years of history, multiple record types and continual schema and semantic drift; a field-level mapping validation and reconciliation framework robust enough to stand up to audit; Monolith decomposition and data-ownership migration
Breaking a distributed monolith of well over a hundred Java services sharing a handful of database clusters into domain-owned services — moving from borrowed data to owned data without reintroducing hidden coupling. The work includes bounded-context analysis to establish which domain genuinely owns which collections, in-place data remodelling ahead of any physical move, a data-access facade with feature-flagged per-request routing between old and new stores, dual-write / backfill / reconcile / read-switch cutover lifecycles with a defined rollback at every step, cluster-to-cluster streaming and live migration tooling, and automated parallel-run and diff-on-read testing.

Every one of these engagements involves modelling for it, migrating onto it, or building on top of it, and genuine depth here is what most differentiates candidates.
Produce high- and low-level designs, security and data architectures, and architecture decision records — and take them through client design authorities and formal governance gates

• Build production Java services and RESTful APIs (Spring Boot or similar), designed for integration by multiple consuming systems and documented to OpenAPI
• Design and implement MongoDB document models, aggregation pipelines, indexing and sharding strategies, and integrate them cleanly into Java service layers rather than through a leaky abstraction
• Build data pipelines: CDC and streaming ingest, transformation frameworks, checkpointed batch extract workers, and MongoDB sink configuration and tuning at terabyte scale
• Implement access control, encryption and audit within the application and data layer, including enforcement inside the MongoDB query path, rather than bolted on around it
• Write the tests: unit, integration, golden-record fixtures, parallel-run reconciliation, and load and stress harnesses that prove performance under realistic volumes
• Work across both MongoDB Atlas and Enterprise Advanced, including Kubernetes-hosted deployments, and with the migration and sync tooling around them

Data modernisation and migration

• Model relational, XML or other legacy schemas onto MongoDB document models, handling schema and semantic drift through versioned, configuration-driven mappings rather than forked code
• Build validation and reconciliation tooling that satisfies audit: completeness, field-level fidelity, and query-level equivalence between old and new

Design and implement attribute- or role-based access control models, including enforcement at the data layer and policy administration

• Work with application-layer and field-level encryption — MongoDB client-side field level and queryable encryption, and externally managed key material
• Run workshops, playbacks and sprint demonstrations; Use AI-assisted engineering tooling as part of normal delivery, within the constraints client security policy sets

Strong hands-on Java — building and running production services and RESTful APIs with Spring Boot or an equivalent framework

• MongoDB — solid working experience covering document modelling, querying, aggregation pipelines and indexing, and integrating MongoDB into Java application layers. Data-intensive systems — demonstrable experience of pipelines, migrations or integrations at meaningful scale, and sound reasoning about throughput, ordering, idempotency and failure recovery
• Testing — genuine automated testing discipline, plus practical experience of load and stress testing against realistic volumes
• Infrastructure and deployment — Terraform or equivalent infrastructure as code, containerised deployment on Kubernetes, and AWS or a comparable cloud
• UK resident, and either holding current UK SC clearance or clearly eligible to obtain it

Kafka and change-data-capture tooling such as Debezium; Legacy modernisation patterns — strangler fig, operational data layers, dual running and phased cutover

• Domain-driven design and bounded-context analysis; Attribute-based access control and policy-as-code frameworks (OPA, Casbin, XACML-based systems)
• Field-level or client-side encryption, key management, HSM/KMS and KMIP integration
• Search — Lucene-based or Atlas Search, vector search, hybrid retrieval and RAG patterns
• data cataloguing, data mesh and federated data architecture concepts
• Oracle, COBOL or other mainframe and legacy platform familiarity
• Time-series or geospatial data; deployment to constrained or edge hardware
• AI-assisted development workflows and agentic coding tools

Engagement Contract. Some roles begin part-time through a design phase before going full-time for build.
Working model Predominantly remote with periodic onsite attendance. Locations vary by programme — expect occasional travel to client sites including London, Manchester and Leeds.
others are in contract negotiation with expected start dates in the coming months. We are building the bench now so that we can mobilise quickly, and clearance lead times mean early conversations are worthwhile even where a start date is not yet fixed.