Software Developer

Job Description

\We seek an exceptional developer who goes beyond coding to manage and orchestrate a full "Build+Run" ecosystem. You will be a key driver in transforming our architecture from monolithic applications to a resilient, distributed, event-driven system on Google Cloud Platform (GCP). This role demands expertise in Apigee for robust API governance, Node.js for high-performance backend services, and Pub/Sub for asynchronous service decoupling. Success will be measured by continuous optimization of infrastructure for cost and performance using GKE/Cloud Run and automated delivery via Cloud Build and Terraform.Key Responsibilities

High-Performance Node.js Backend Engineering

• Asynchronous Architecture: Design and implement non-blocking, event-driven services using Promises and async/await to ensure high concurrency and prevent event loop blocking.
• Performance & Efficiency: Optimize for low latency by utilizing the Cluster module for multi-core processing and employing lazy loading of dependencies to minimize serverless cold starts (e.g., in Cloud Run).
• Security Implementation: Secure APIs against threats like SQL injection and XSS through strict input validation (e.g., express-validator) and implement rate limiting to mitigate DoS attacks.
• Data Transfer Optimization: Configure middleware for Gzip/Brotli compression of HTTP responses to significantly reduce payload size and improve transfer speed.

API Governance and Management (Apigee)

• API Proxy Design: Develop Apigee ProxyEndpoints and TargetEndpoints to decouple frontend client applications from underlying backend service implementations.
• Automated API Lifecycle: Integrate API proxy deployment, unit testing, and integration testing directly into the Continuous Integration/Continuous Deployment (CI/CD) pipeline.
• Traffic Control & Security: Implement advanced traffic management policies (SpikeArrest, Quotas) and enforce robust security protocols (OAuth 2.0, JWT, SAML) for authorization and authentication.
• Analytics & Monetization: Configure API Product bundles for potential monetization models and generate custom reports to monitor key metrics like traffic patterns, latency percentiles, and error rates.

Cloud-Native Architecture (GKE & Cloud Run)

• Resource Autoscaling: Strategically configure Horizontal Pod Autoscalers (HPA) for CPU-based scaling and Vertical Pod Autoscalers (VPA) for resource recommendation, ensuring configuration compatibility.
• Cost Optimization: Leverage Spot VMs for fault-tolerant, stateless services and batch workloads to achieve up to 90% savings on compute costs.
• Container Security: Prioritize building minimal, secure container images and maintain deterministic builds to enhance security posture and prevent vulnerability injection.

Event-Driven Architecture (Pub/Sub)

• System Resilience: Drive the adoption of asynchronous Pub/Sub messaging to replace synchronous service-to-service communication, thereby increasing overall system resilience.
• Message Reliability: Implement dead-letter topics to quarantine and facilitate debugging of unprocessable messages, and use exactly-once delivery where financial or state integrity is critical.
• Real-Time Processing: Design and build data pipelines that consume events from Pub/Sub and process them in real-time using Dataflow for analytics stored in BigQuery.

DevOps & Infrastructure as Code (Terraform)

• Modular IaC: Provision all necessary GCP resources (e.g., Pub/Sub subscriptions, GKE clusters, Apigee organizations) using reusable Terraform modules, managing state securely via remote GCS backends for collaborative development.
• GitOps CI/CD: Implement Cloud Build pipelines triggered by Git commits, integrating static analysis, vulnerability scanning (Container Analysis), and binary authorization checks before deployment.
• Credential Security: Eliminate hardcoded secrets by integrating Secret Manager into both Terraform