backend developer for secure APIs

Описания нет

• Build, harden, and scale secure APIs
• Grow the API surface with new endpoints, webhooks/callbacks, and richer querying
• Improve developer experience through clear contracts, published API specs, integration documentation, and sandbox environments
• Harden APIs through rate limiting, secret rotation, contract testing, and pen-test remediation
• Scale repeatable multi-partner onboarding, tenant isolation, load/performance testing, and caching
• Improve platform quality through SLOs, alerting, and resilience patterns
• Take capabilities from specification and design through tested delivery independently
• Break down and sequence work, and drive it to completion
• Write and work from specifications, acceptance criteria, and decision records
• Direct and review AI-assisted development output
• Prioritize security, testing, and observability while favoring simple solutions

• Modern backend development in TypeScript/Node.js, including server-side HTTP services, networking fundamentals, and clean typed code
• REST/JSON API design, including versioning, consistent error contracts, idempotency, pagination, OpenAPI, and an API-as-contract mindset
• Relational data schema design, migrations, and data integrity
• Asynchronous and queue-driven systems, including background workers, job lifecycles, retries, and idempotent processing
• API security, including token-based authentication (OAuth/JWT), authorization, tenancy isolation, secure secret handling, fail-closed defaults, and awareness of OWASP API Security Top 10
• Test-forward development using unit, integration, and contract tests
• Hands-on AWS experience is mandatory, including containers/compute, queuing, managed databases, secrets, and load balancing
• Cloud-native delivery with containerized services, infrastructure as code, and CI/CD pipelines
• Observability through structured logging, metrics, tracing, and audit trails; ability to debug production using telemetry
• Must currently live in the Netherlands
• Будет плюсом: fintech or other regulated-domain experience, platform/API-gateway team background, independently leading a small delivery

• 36 Hours per week
• Start: asap
• End: 01 June 2027
• Possible extension: Yes
• ZZP is allowed
• Contract