Secure API & AWS Developer (Python) — ESOP & Benefits

IDR, Inc.; Malvern (Chester County); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Dental Insurance

Full Benefits

Job summary

IDR, Inc. in Malvern, PA is seeking a Python/AWS Developer to design and maintain secure API solutions in a fast-paced tech environment.

You will build secure APIs using AWS API Gateway and Python, implementing OAuth and IAM-based access controls while enforcing best security practices. The role emphasizes collaboration with security teams, automation of security checks in the API lifecycle, and monitoring using AWS tools.

Qualifications

• 5-7 years of experience designing, developing, and maintaining secure API solutions using AWS API Gateway and Python in an agile environment.
• Strong knowledge of AWS API Gateway, Lambda, IAM, with security best practices (OAuth, TLS, rate limiting, WAF).
• Experience with CI/CD pipelines (GitHub workflows) and infrastructure-as-code (CloudFormation/Terraform).
• Background supporting a security or platform engineering team is preferred.

Responsibilities

• Build, harden, and maintain secure API integrations using AWS API Gateway and Python.
• Implement authentication and authorization controls (OAuth, API keys, IAM policies).
• Automate security checks within the API lifecycle to ensure compliance and security standards.
• Collaborate with security or platform engineering teams to enhance API security and performance.

Skills

Python

AWS

API Development

OAuth

IAM

Security Best Practices

CI/CD

GitHub Workflows

Terraform

CloudFormation

CloudWatch

Tools

Terraform

CloudFormation

GitHub Actions

Job description

IDR, Inc. in Malvern, PA is seeking a Python/AWS Developer to design and maintain secure API solutions in a fast-paced tech environment.

You will build secure APIs using AWS API Gateway and Python, implementing OAuth and IAM-based access controls while enforcing best security practices. The role emphasizes collaboration with security teams, automation of security checks in the API lifecycle, and monitoring using AWS tools.