We are looking for a Senior Node.js Engineer specializing in identity, API security, and cloud-native architectures to lead secure system design and deployment. You will architect authentication flows, ensure compliance with enterprise security policies, and guide teams in building resilient, secure microservices in multi-cloud and containerized environments.

Key Responsibilities:

• Lead the architecture and design of secure, scalable Node.js/TypeScript microservices.
• Define API security standards and enforce across the organization.
• Architect and implement OAuth 2.0, OIDC, SAML, WebAuthn flows for complex systems.
• Manage containerized workloads with Kubernetes, including network policies and pod security.
• Implement Zero Trust principles and fine-grained IAM.
• Oversee API gateway configurations (access control, WAF, rate limiting, JWT validation).
• Champion DevSecOps by embedding SAST, DAST, dependency scanning into CI/CD. 
• Ensure TLS, mTLS, key rotation, and encryption-at-rest/in-transit are enforced.
• Integrate security monitoring with SIEM platforms (Splunk, ELK, Datadog, Dynatrace).
• Lead incident response for security events and perform root cause analysis.
• Mentor engineers on secure coding, cloud security, and container security.
• Collaborate with compliance teams on PCI-DSS, GDPR, and ISO 27001 adherence.

Requirements

• 7+ years backend development experience, 5+ years in Node.js/TypeScript.
• Expert in identity and access management solutions and standards.
• Proven experience deploying secure workloads in AWS, Azure, or GCP.
• Strong Kubernetes knowledge, including RBAC, secrets, network policies, and ingress controllers.
• In-depth understanding of OAuth 2.0, OIDC, SAML, JWT, and token security.
• Proficient with Terraform or other IaC tools for automated provisioning.
• Strong grasp of Zero Trust and micro segmentation strategies.
• Experience with serverless security (AWS Lambda, Azure Functions).
• Skilled in security logging, monitoring, and alerting using cloud-native and SIEM tools. 
• Experience with chaos engineering for resilience and security testing.