Senior Backend Engineer – TypeScript, Nest.js, AWS
Posted 11hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Backend Engineer building a Nest.js/TypeScript multi-tenant policy gateway for a US insurance carrier. Delivering AWS integrations, policy mapping, observability, and tenant isolation.
Responsibilities:
- Design and build a greenfield multi-tenant policy gateway as a Nest.js/TypeScript service on the client's internal framework and AWS
- Propose infrastructure changes as Terraform PRs for the client's DevOps team to apply
- Implement webhook contracts with HMAC authentication, Vault-managed secrets, IP allowlisting, ISO-8601 date handling, and policy-version-at-date-of-loss selection
- Build the tenant router and registry with composite resolution and defined failure behavior
- Build source adapters with per-source authentication, timeouts, retries with backoff, and circuit breaking
- Build tenant-specific SFTP landing zones, file validation and quarantine, and idempotent PostgreSQL policy-store loads with snapshot retention and freshness monitoring
- Define the canonical policy model and shared canonical-to-target mapper
- Lead the first partner's field-mapping review with the client's claims expert
- Deliver per-tenant observability, including structured logs, metrics, Grafana dashboards, freshness alerts, and error-rate alerts
- Create an onboarding runbook for adding additional tenants
- Write isolation negative tests as a release gate
- Run failure-mode drills and end-to-end walkthroughs in the client's sandbox
- Support the client's security review and launch readiness
- Collaborate directly with client engineers and domain experts across time zones, largely asynchronously
Requirements:
- 5+ years of backend engineering experience with strong, recent TypeScript in production
- Experience with Nest.js or a comparable dependency-injection-based Node framework
- Experience building integration services or API gateways, including webhooks, signature-based authentication, retries, idempotency, circuit breakers, and third-party API adapters
- PostgreSQL and relational data modelling experience; comfortable designing schemas and writing migrations
- Experience with multi-tenant systems or another domain where data isolation is a hard requirement
- Hands-on AWS experience with ECS/EKS or Lambda, SQS, S3, IAM, Secrets Manager or Vault
- Ability to read and propose Terraform, even if another person applies it
- AI-native way of working using tools such as Claude Code and Codex while reviewing every shipped line
- Ability to scope ambiguous requests, write concise design notes, ask clients the right questions early, and deliver without heavy oversight
- Fluent English and clear, proactive communication with technical and non-technical stakeholders
- Some availability in PT timezone, not more than once a week
- Insurance domain exposure, batch or file-based integrations, regulated-data experience, Grafana/OpenTelemetry-style observability, and prior consulting or client-facing delivery are nice to have
Benefits:
- Fully paid licenses for Cursor, Claude Pro, etc.
- Remote-first work arrangement
- No filler meetings, no Jira bloat, and no micromanagement
- Total autonomy over the workflow
- Direct work with the CEO, CTO, VPs, and client leadership
- Continuous growth and a strong knowledge-sharing culture












