Senior API & Backend Developer – Secure SaaS Platform

AppIQ Pty Ltd; Adelaide; On-site; AUD 120,000 - 180,000; Full time

Job summary

Neo is seeking a Senior API & Backend Developer to design and build a secure API layer for a Secure SaaS Platform. You will deliver production-ready services, with strong focus on authentication, policy-based access, and scalable architecture.

The role requires hands-on API engineering, cloud experience and collaboration with leadership to implement security controls and CI/CD pipelines. Applicants with full Australian working rights are preferred.

Qualifications

• At least five years' backend or API development experience.
• Strong Python experience with FastAPI, Flask or Django.
• Proven REST API design and delivery experience.
• Deep knowledge of OAuth 2.0, OIDC, JWT and RBAC.
• Experience with API gateways and service-to-service authentication.
• Docker container deployment experience; Kubernetes optional.
• Cloud security controls on Azure or AWS; CI/CD pipelines.
• Familiar with OWASP API Security Top 10 and monitoring.

Responsibilities

• Design and develop secure REST APIs for CoreShift services.
• Protect proprietary logic behind controlled interfaces.
• Implement authentication, authorization and RBAC.
• Set up API gateway, rate limiting and usage monitoring.
• Secure credential management for customers and services.
• Create API versioning, docs and lifecycle standards.
• Add logging, auditing, error handling and monitoring.
• Containerize services and automate CI/CD deployments.
• Perform security testing and address vulnerabilities.
• Collaborate with data engineers to integrate with Databricks and cloud storage.
• Produce deployment runbooks and technical documentation.
• Contribute to scalable architecture and tenant isolation.

Skills

Python

FastAPI

REST APIs

OAuth 2.0

OpenID Connect

JWT

RBAC

Docker

Kubernetes

Azure/AWS

CI/CD

OWASP API Security

Tools

Databricks

Azure API Management

AWS API Gateway

Kong

Job description

Senior API & Backend Developer – Secure SaaS Platform

You will design and build a secure API layer that enables authorised applications and customers to access CoreShift functionality without exposing its underlying source code or proprietary logic.

This is a hands‑on role requiring strong API engineering, security and cloud architecture skills. You will work closely with Neo’s technical leadership and data engineering team to define the architecture, establish development standards and deliver the first production‑ready services.

Key Responsibilities

Design and develop secure REST APIs for CoreShift services and processing capabilities.

Encapsulate proprietary business logic behind controlled service interfaces.

Implement authentication, authorisation and role‑based access controls.

Establish API gateway, rate‑limiting, request validation and usage‑monitoring capabilities.

Develop secure mechanisms for managing customer and service credentials.

Create API versioning, documentation and lifecycle‑management standards.

Implement logging, auditing, error handling and operational monitoring.

Package and deploy services using containers and automated CI/CD pipelines.

Conduct security testing and address vulnerabilities before production release.

Work with data engineers to integrate APIs with Databricks, cloud storage and data‑processing workflows.

Produce clear technical documentation, deployment instructions and operational runbooks.

Contribute to architectural decisions concerning scalability, tenant isolation and protection of intellectual property.

About You

You are an experienced backend developer who understands that building an enterprise API involves much more than exposing application endpoints. You have designed secure production services and are comfortable working with sensitive data and proprietary business logic.

You will ideally have:

At least five years’ experience in backend or API development.

Strong experience with Python and frameworks such as FastAPI, Flask or Django.

Demonstrated experience designing and delivering REST APIs.

Strong knowledge of OAuth 2.0, OpenID Connect, JWT and role‑based access control.

Experience with API gateways and service-to-service authentication.

Experience deploying containerised applications using Docker.

Knowledge of Azure or AWS cloud services and security controls.

Experience with automated testing and CI/CD pipelines.

Understanding of secure software development practices and the OWASP API Security Top 10.

Experience implementing monitoring, audit logging and operational alerting.

Strong documentation and communication skills.

Experience with any of the following would be highly regarded:

Databricks, Spark or enterprise data platforms.

Azure API Management, AWS API Gateway or Kong.

Kubernetes or other container‑orchestration platforms.

Financial services, banking or other regulated environments.

Secrets management, encryption and private networking.

SOC 2, ISO 27001, CPS 230 or related security frameworks.

What Success Looks Like

During the initial engagement, you will help Neo:

Define the target API and security architecture.

Build a production‑ready API framework.

Expose selected CoreShift capabilities through secure endpoints.

Implement identity, access, monitoring and audit controls.

Establish automated testing and deployment processes.

Produce documentation that enables ongoing development and support.

Why Join Neo?

Work on a proprietary platform solving complex, real‑world banking challenges.

Help shape the architecture of a growing Australian technology product.

Work directly with experienced data, cloud and banking specialists.

Take meaningful ownership of technical decisions and delivery.

Flexible engagement options for the right candidate.

Because of the nature of our client work, applicants must have full Australian working rights and may be required to complete background, police and financial‑services suitability checks.