Backend/API Lead

About the role

You will own the back‑end microservices layer and all API integrations across multiple channels, including websites, a Super App, kiosks and digital signage. As the technical authority you will design, build and lead Node.js/NestJS services hosted on Azure and ensure seamless integration with roughly 18 airport‑related systems.

Key responsibilities

• Design and implement stateless, modular microservices using Node.js/NestJS on Azure App Service.
• Configure Azure API Management as the central gateway with rate limiting, OAuth 2.0, caching, logging and RBAC.
• Own integration delivery for systems such as FIDS, BHS, AODB, CRM, payment gateways, booking engines, loyalty platforms and identity providers.
• Build headless content APIs from Optimizely CMS (GraphQL) to feed Next.js front‑ends and Snowflake CDP.
• Architect for performance (300 users, 10 req/s spikes) and resilience with auto‑scaling, multi‑region failover and circuit‑breaker patterns.
• Implement security controls (OAuth 2.0, SAML, OpenID, OWASP API Top 10) and support VAPT remediation.
• Collaborate with DevOps to create CI/CD pipelines (Azure DevOps, GitLab) and enforce code quality via SonarQube.
• Lead a growing integration engineering chapter, set coding standards, conduct code reviews and mentor junior engineers.
• Produce technical documentation, runbooks and handover material for L1‑L3 support teams.

Required profile

• 6+ years of back‑end engineering experience, with at least 3 years leading multi‑channel digital platforms.
• Deep hands‑on expertise in Node.js and NestJS; Node.js must be the primary stack.
• Strong Azure experience, especially APIM, App Service, Service Bus, Event Grid, Azure SQL, Traffic Manager and Monitor.
• Proven track record delivering complex third‑party integrations at scale.

Required skills

• Node.js
• NestJS
• REST, OpenAPI/Swagger
• GraphQL
• Azure API Management
• Azure App Service
• Azure Service Bus
• Azure Event Grid
• Azure SQL
• Azure Traffic Manager
• Azure Monitor
• OAuth 2.0, SAML, OpenID Connect
• Optimizely CMS
• Next.js (SSG/ISR)
• Snowflake
• Cloudflare CDN
• CI/CD (Azure DevOps, GitLab)
• SonarQube
• Vulnerability assessment & penetration testing (VAPT)