Senior Backend & Platform Security Engineer (Node.js)

SustainGRC is an AI-native Sustainability & GRC platform, unifying sustainability, audit, risk, and governance into a single enterprise intelligence layer. We help global organisations turn fragmented ESG, risk, and compliance data into trusted, decision-grade insights.

We are hiring a Senior Backend & Platform Security Engineer (Node.js) to take technical ownership of critical backend services, platform security, and production reliability.

This is not a junior or feature-only backend role.

You will work on core platform services, security architecture, and deployment pipelines that support enterprise-grade, regulated workloads.

This role is suited for engineers who:

• Have owned backend systems in production
• Think in terms of platforms, not endpoints
• Care deeply about security, reliability, and operational excellence
  

• Design, build, and own scalable backend services using Node.js (TypeScript)
• Architect and maintain REST APIs and microservices used across the platform
• Take end-to-end ownership: design implementation deployment monitoring
• Identify architectural risks, edge cases, and scalability concerns early
• Enforce clean architecture, SOLID principles, and long-term maintainability

• Design and maintain authentication & authorisation systems (JWT, OAuth2, RBAC)
• Implement secure API patterns, permission models, and data access controls
• Collaborate on security best practices for enterprise and regulated environments
• Ensure secure integrations with third-party services and internal components

• Design and optimise PostgreSQL schemas, queries, and indexing
• Use Redis for caching, queues, and performance optimisation
• Integrate external services (APIs, messaging, email) with reliability and traceability
• Support real-time features where applicable (e.g. Socket.io)
• Work with object storage (S3-compatible)

• Contribute to Docker-based containerisation and environment parity
• Improve and maintain CI/CD pipelines (GitHub Actions or similar)
• Support cloud deployments with a GCP-first mindset
• (GKE, Cloud Run, Cloud SQL, IAM, Cloud Storage)
• Promote best practices in monitoring, logging, alerting, and error tracking
• Help ensure safe deployments, high availability, and predictable releases
  

• 5+ years of professional backend engineering experience
• Strong expertise in Node.js, TypeScript
• Production experience with Express, Fastify, or NestJS
• Strong SQL skills and deep experience with PostgreSQL
• Hands-on experience with Redis
• Understanding of microservices and distributed systems
• Experience with Docker and CI/CD pipelines
• Strong grasp of API security, authentication, and RBAC
• Experience owning systems in production (not just implementing tickets)
• Comfortable making architectural decisions and trade-offs

• Hands-on experience with Google Cloud Platform
• Exposure to Kubernetes (GKE) or managed container platforms
• Experience with observability tools (Prometheus, Grafana, Sentry, GCP Monitoring)
• Background in enterprise SaaS, compliance, or regulated platforms
  

• Work on a global, AI-native enterprise platform
• Fully remote role
• Competitive contract-based compensation and/or equity
• High ownership, low bureaucracy engineering culture
• Opportunity to grow into platform or technical leadership roles
  

At SustainGRC, you'll help build the intelligence layer behind global sustainability and governance powering better decisions for enterprises worldwide.

Apply only if you have senior-level backend experience and have worked on production platforms.