Senior Full Stack Engineer

HDFC Securities Ltd.; Mumbai; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

HDFC Securities Ltd. is building a modern, headless web platform and seeks a senior engineer to design and implement the content layer (Strapi) and the React frontend.

You will shape technical decisions, mentor peers, and collaborate with product, design and compliance to meet editorial and security requirements. You will own deployments with DevOps, optimize for performance and accessibility, and integrate with various services using REST and GraphQL.

Qualifications

• 6–9 years of software dev experience with 4+ years in Node.js and React.js.
• Hands-on with ES6+ JavaScript and TypeScript.
• 2+ years with a headless CMS (Strapi preferred).
• Strong REST and GraphQL API design and integration skills.
• Experience with relational DBs (PostgreSQL/MySQL) and indexing.
• Familiar with Redux, React Query, hooks and modern React patterns.
• GIT, CI/CD, Docker, and at least one cloud (AWS).
• Experience in BFSI/fintech or regulated sectors preferred.
• Knowledge of web security, SSO, and audit-friendly workflows.

Responsibilities

• Design, build and maintain scalable web apps with React.js and Node.js.
• Model content and APIs in a headless CMS (Strapi) and ensure production readiness.
• Develop Strapi plugins and ensure smooth upgrades across versions.
• Configure roles, i18n, media handling and publish workflows for compliance.
• Create REST and GraphQL APIs and integrate with internal and external services.
• Optimize for Core Web Vitals, SSR/SSG/ISR, caching and CDN usage.
• Write clean, tested code; participate in reviews and architecture discussions.
• Own deployments with DevOps: CI/CD, containers, environments, monitoring.
• Uphold secure coding practices and support security reviews/audits.
• Mentor junior/mid engineers and document technical decisions.

Skills

Node.js

React.js

TypeScript

JavaScript ES6+

Headless CMS

REST API design

GraphQL API design

SEO & performance

Security practices

Git & CI/CD

Docker

AWS / cloud

Testing (Jest, RTL, Cypress)

Team mentoring

Strong communicator

Tools

Strapi

Next.js

PostgreSQL

MySQL

Redux

React Query

Docker

AWS

CI/CD tooling

SSO/SAML/OAuth2

Job description

About the Role

: - We are rebuilding our public-facing web platform on a modern, headless architecture. You will design and build the content layer (Strapi) and the React front end that consumes it. The work is performance-sensitive, security-conscious and subject to regulatory and compliance requirements. You will be a hands-on senior engineer who shapes technical decisions and mentors others.

Key Responsibilities

• Design, build and maintain scalable web applications using React.js (Next.js preferred) and Node.js.


• Architect and implement content models, APIs and workflows in Strapi headless CMS (Contentful, Sanity, Directus, Payload, etc.).


• Build custom Strapi plugins, controllers, services, lifecycle hooks, middleware and policies, and handle upgrades across major versions.


• Configure roles and permissions, i18n, media handling, and draft/publish and review workflows to meet editorial and compliance needs.


• Build REST and GraphQL APIs and integrate the CMS with internal services, third-party APIs and authentication systems (SSO/SAML/OAuth2).


• Optimize for performance, SEO and accessibility (Core Web Vitals, SSR/SSG/ISR, caching, CDN).


• Write clean, tested, maintainable code, and take part in code reviews and architecture discussions.


• Own deployments with the DevOps team: CI/CD, containerization, environment management and monitoring.


• Apply secure coding practices (OWASP Top 10, input validation, secrets management, dependency hygiene) and support security reviews and audits.


• Mentor junior and mid-level engineers, and document technical designs and decisions

Required Skills and Experience

• 6 to 9 years of professional software development, including 4+ years of strong hands-on Node.js (Express, NestJS or Koa) and React.js.


• Proficiency in JavaScript (ES6+) and TypeScript


• At least 2 years of hands-on experience with a headless CMS, preferably Strapi (v4/v5), covering content modeling, custom extensions and production deployment.


• Solid understanding of REST and GraphQL API design.


• Experience with relational databases (PostgreSQL, MySQL), including schema design and query optimization.


• Experience with state management (Redux, Zustand or React Query) and modern React patterns (hooks, context, code splitting).


• Familiarity with Git workflows, CI/CD pipelines, Docker, and at least one cloud platform (AWS).


• Experience writing unit, integration and end-to‑end tests (Jest, React Testing Library, Cypress or Playwright).


• Good understanding of web security, authentication and authorization.


• Strong communication skills and the ability to work with product, design, content and compliance stakeholders.


• Experience in BFSI, fintech or other regulated industries, including audit trails, maker checker approval flows and data-privacy requirements.


• Familiarity with SSO integrations (Okta, Azure AD) and role-based access control at scale.


• Contributions to open-source projects, or authored Strapi plugins.