Senior Software Backend Developer

About the Role

Role Overview We are looking for a strong **Senior Backend Developer** with hands\-on experience in designing and developing **enterprise\-grade backend systems, APIs and scalable application architectures** . The ideal candidate should have strong expertise in **React** , **Node.js and SQL,** excellent understanding of API development and backend architecture, and a strong focus on **application and API security** . The candidate should be capable of taking ownership of backend components from architecture and design through development, testing, deployment and ongoing improvement. Experience with **React and modern frontend development** is preferred, as the role will involve working closely with frontend applications and understanding the complete application architecture. This is a hands\-on engineering role for someone who can **design robust systems, write high\-quality code, identify architectural risks and build security into applications from the beginning** . Key Responsibilities Backend Engineering \& Architecture * Design and develop scalable, maintainable and high\-performance backend applications. * Build enterprise\-grade REST APIs and backend services using **Node.js** . * Define backend architecture, application structure, service boundaries and integration patterns. * Design APIs that are reliable, versioned, well documented and easy to consume. * Work with databases, caching, queues and external systems to build robust backend solutions. * Handle complex business logic and high\-volume data processing. * Identify and resolve performance, scalability and reliability issues. * Participate in architectural decisions and technical design discussions. * Conduct code reviews and establish engineering best practices. API Development * Design and implement secure RESTful APIs and integrations. * Implement appropriate authentication and authorization mechanisms. * Design role\-based and object\-level access controls. * Handle API validation, error handling, rate limiting and abuse prevention. * Integrate with third\-party APIs and enterprise systems. * Ensure APIs follow consistent standards for security, logging, monitoring and documentation. * Design APIs considering backward compatibility and future scalability. Application \& API Security The candidate should have practical experience in building secure applications and APIs and should understand concepts such as: * OWASP Top 10 and **OWASP API Security Top 10** * Authentication and authorization * JWT, OAuth 2\.0 and secure token management * Role\-Based Access Control (RBAC) * Object\-level and function\-level authorization * Input validation and output encoding * SQL Injection and NoSQL Injection * Cross\-Site Scripting (XSS) * CSRF * Server\-Side Request Forgery (SSRF) * Secure file upload and download mechanisms * API abuse and rate limiting * Sensitive data protection * Secure password handling * Secrets and credential management * Secure session management * HTTP security headers * Secure configuration and environment management * Dependency and package security * Logging, monitoring and audit trails Secure error handling and prevention of information leakage * Technical Skills Mandatory * **Node.js** * JavaScript / TypeScript * REST API development * Backend architecture and system design * API authentication and authorization * SQL and database design * Git * Secure coding practices * Application/API security * Debugging and performance optimization * Enterprise application development Preferred * **React** * TypeScript * Microservices architecture * Redis / caching * Message queues * CI/CD * API gateways * OAuth 2\.0 / OpenID Connect SAST / DAST / SCA tools * What We Are Looking For The ideal candidate should be someone who: * Has **5\+ years of serious software development experience** . * Has built and maintained **production\-grade enterprise backend systems** . * Has strong hands\-on Node.js experience. * Can design backend architecture rather than simply implement predefined tasks. * Has built APIs consumed by web, mobile or other enterprise applications. * Understands scalability, performance, reliability and maintainability. * Has a **strong security mindset** and understands secure application development. * Can identify security weaknesses during design and code review. * Understands how authentication and authorization should be implemented correctly. * Is comfortable working across backend, database, API and deployment layers. * Can understand frontend architecture and work effectively with React developers. * Writes clean, maintainable and testable code. * Is comfortable taking ownership of technically complex modules. * Node.ja * React * MySQL * API Development * OWASP