Software Developer

\We seek an exceptional developer who goes beyond coding to manage and orchestrate a full "Build+Run" ecosystem. You will be a key driver in transforming our architecture from monolithic applications to a resilient, distributed, event-driven system on Google Cloud Platform (GCP). This role demands expertise in Apigee for robust API governance, Node.js for high-performance backend services, and Pub/Sub for asynchronous service decoupling. Success will be measured by continuous optimization of infrastructure for cost and performance using GKE/Cloud Run and automated delivery via Cloud Build and Terraform.

Key Responsibilities

High-Performance Node.js Backend Engineering

• Asynchronous Architecture: Design and implement non-blocking, event-driven services using Promises and async/await to ensure high concurrency and prevent event loop blocking.
• Performance & Efficiency: Optimize for low latency by utilizing the Cluster module for multi-core processing and employing lazy loading of dependencies to minimize serverless cold starts (e.g., in Cloud Run).
• Security Implementation: Secure APIs against threats like SQL injection and XSS through strict input validation (e.g., express-validator) and implement rate limiting to mitigate DoS attacks.
• Data Transfer Optimization: Configure middleware for Gzip/Brotli compression of HTTP responses to significantly reduce payload size and improve transfer speed.

• API Proxy Design: Develop Apigee ProxyEndpoints and TargetEndpoints to decouple frontend client applications from underlying backend service implementations.
• Automated API Lifecycle: Integrate API proxy deployment, unit testing, and integration testing directly into the Continuous Integration/Continuous Deployment (CI/CD) pipeline.
• Traffic Control & Security: Implement advanced traffic management policies (SpikeArrest, Quotas) and enforce robust security protocols (OAuth 2.0, JWT, SAML) for authorization and authentication.
• Analytics & Monetization: Configure API Product bundles for potential monetization models and generate custom reports to monitor key metrics like traffic patterns, latency percentiles, and error rates.

• Resource Autoscaling: Strategically configure Horizontal Pod Autoscalers (HPA) for CPU-based scaling and Vertical Pod Autoscalers (VPA) for resource recommendation, ensuring configuration compatibility.
• Cost Optimization: Leverage Spot VMs for fault-tolerant, stateless services and batch workloads to achieve up to 90% savings on compute costs.
• Container Security: Prioritize building minimal, secure container images and maintain deterministic builds to enhance security posture and prevent vulnerability injection.

• System Resilience: Drive the adoption of asynchronous Pub/Sub messaging to replace synchronous service-to-service communication, thereby increasing overall system resilience.
• Message Reliability: Implement dead-letter topics to quarantine and facilitate debugging of unprocessable messages, and use exactly-once delivery where financial or state integrity is critical.
• Real-Time Processing: Design and build data pipelines that consume events from Pub/Sub and process them in real-time using Dataflow for analytics stored in BigQuery.

• Modular IaC: Provision all necessary GCP resources (e.g., Pub/Sub subscriptions, GKE clusters, Apigee organizations) using reusable Terraform modules, managing state securely via remote GCS backends for collaborative development.
• GitOps CI/CD: Implement Cloud Build pipelines triggered by Git commits, integrating static analysis, vulnerability scanning (Container Analysis), and binary authorization checks before deployment.
• Credential Security: Eliminate hardcoded secrets by integrating Secret Manager into both Terraform provisioning and application runtime environments.

• Core Language: Expert proficiency in Node.js, with a deep, practical understanding of the event loop, streams, and memory management.
• API Platform: Extensive hands-on experience with Google Cloud Apigee, covering policy configuration, complex fault handling, and developer portal administration.
• Database & State Management (Stateless Focus):
• Proven ability to architect stateless applications, offloading session/state data to external, dedicated stores.
• Proficiency in using Memorystore (Redis) for high-speed, ephemeral caching and session storage.
• Experience with Firestore or Cloud SQL for durable, transactional data and user preferences, including the use of connection pooling.
• DevOps Tooling: Mastery of Cloud Build, Terraform, and Artifact Registry.
• Testing: Expertise in black-box API testing, comprehensive unit testing and load testing methodologies.

• Certification: Google Professional Cloud Developer or Professional Cloud Architect certification.
• Advanced Networking: Familiarity with VPC Service Controls, Private Service Connect, and Shared VPCs.
• Service Mesh: Experience with Istio or Cloud Service Mesh for managing traffic, security, and observability.
• Observability: Proficiency in instrumenting applications for Cloud Trace, Cloud Logging, and Cloud Monitoring to minimize Mean Time to Diagnosis (MTTD).
• Ownership Mentality: The ability to manage a feature's complete lifecycle, from initial design through to production deployment, monitoring, and incident response ("Build+Run").
• AI-Assisted Development: Comfortable with and actively uses AI tools (e.g., Gemini Code Assist) to accelerate boilerplate generation, allowing focus on complex architectural challenges.