Senior Backend Software Engineer

Role Overview

We are looking for a strong Senior Backend Developer with hands-on experience in designing and developing enterprise-grade backend systems, APIs and scalable application architectures.

The ideal candidate should have strong expertise in React, Node.js and SQL, excellent understanding of API development and backend architecture, and a strong focus on application and API security. The candidate should be capable of taking ownership of backend components from architecture and design through development, testing, deployment and ongoing improvement.

Experience with React and modern frontend development is preferred, as the role will involve working closely with frontend applications and understanding the complete application architecture.

This is a hands-on engineering role for someone who can design robust systems, write high-quality code, identify architectural risks and build security into applications from the beginning.

Key Responsibilities

Backend Engineering & Architecture

• Design and develop scalable, maintainable and high-performance backend applications.
• Build enterprise-grade REST APIs and backend services using Node.js.
• Define backend architecture, application structure, service boundaries and integration patterns.
• Design APIs that are reliable, versioned, well documented and easy to consume.
• Work with databases, caching, queues and external systems to build robust backend solutions.
• Handle complex business logic and high-volume data processing.
• Identify and resolve performance, scalability and reliability issues.
• Participate in architectural decisions and technical design discussions.
• Conduct code reviews and establish engineering best practices.

API Development

• Design and implement secure RESTful APIs and integrations.
• Implement appropriate authentication and authorization mechanisms.
• Design role-based and object-level access controls.
• Handle API validation, error handling, rate limiting and abuse prevention.
• Integrate with third-party APIs and enterprise systems.
• Ensure APIs follow consistent standards for security, logging, monitoring and documentation.
• Design APIs considering backward compatibility and future scalability.

Application & API Security

The candidate should have practical experience in building secure applications and APIs and should understand concepts such as:

• OWASP Top 10 and OWASP API Security Top 10
• Authentication and authorization
• JWT, OAuth 2.0 and secure token management
• Role-Based Access Control (RBAC)
• Object-level and function-level authorization
• Input validation and output encoding
• SQL Injection and NoSQL Injection
• Cross-Site Scripting (XSS)
• CSRF
• Server-Side Request Forgery (SSRF)
• Secure file upload and download mechanisms
• API abuse and rate limiting
• Sensitive data protection
• Secure password handling
• Secrets and credential management
• Secure session management
• HTTP security headers
• Secure configuration and environment management
• Dependency and package security
• Logging, monitoring and audit trails
• Secure error handling and prevention of information leakage

Technical Skills

Mandatory

• Node.js
• JavaScript / TypeScript
• REST API development
• Backend architecture and system design
• API authentication and authorization
• SQL and database design
• Git
• Secure coding practices
• Application/API security
• Debugging and performance optimization
• Enterprise application development

Preferred

• React
• TypeScript
• Microservices architecture
• Redis / caching
• Message queues
• CI/CD
• API gateways
• OAuth 2.0 / OpenID Connect
• SAST / DAST / SCA tools

What We Are Looking For

The ideal candidate should be someone who:

• Has 5+ years of serious software development experience.
• Has built and maintained production-grade enterprise backend systems.
• Has strong hands-on Node.js experience.
• Can design backend architecture rather than simply implement predefined tasks.
• Has built APIs consumed by web, mobile or other enterprise applications.
• Understands scalability, performance, reliability and maintainability.
• Has a strong security mindset and understands secure application development.
• Can identify security weaknesses during design and code review.
• Understands how authentication and authorization should be implemented correctly.
• Is comfortable working across backend, database, API and deployment layers.
• Can understand frontend architecture and work effectively with React developers.
• Writes clean, maintainable and testable code.
• Is comfortable taking ownership of technically complex modules.