Senior Backend/API Security Developer

UST; Chicago (IL); On-site; USD 82,000 - 123,000; Full time

Job summary

UST is seeking a Senior Backend/API Security Developer to design, build, and secure enterprise APIs handling highly sensitive data. You will lead security practices across RESTful and GraphQL APIs on AWS, enforcing strong authentication and compliance with HIPAA, GDPR, and PCI-DSS.

This role emphasizes encryption, automated scanning, logging, and collaboration with DevOps on CI/CD pipelines. The position is remote within the US, offering a competitive compensation range and comprehensive

Qualifications

• Design secure architectures for RESTful and GraphQL APIs on AWS.
• Implement OAuth 2.0 and OIDC-based authentication and authorization.
• Maintain data protection standards (HIPAA, GDPR, PCI-DSS) through masking, tokenization, and auditing.
• Encrypt data in transit with TLS 1.3 and at rest using AWS KMS with customer-managed keys.
• Perform automated security scans and vulnerability assessments.
• Protect backend systems with rate limiting and WAF protections.
• Establish centralized logging and monitoring with CloudWatch, CloudTrail, and GuardDuty.

Responsibilities

• Design secure architectures for RESTful and GraphQL APIs on AWS.
• Enforce authentication using OAuth 2.0, OIDC, IAM, and Cognito.
• Ensure regulatory compliance with HIPAA, GDPR, PCI-DSS.
• Manage encryption in transit and at rest with TLS 1.3 and KMS.
• Conduct security audits and vulnerability assessments.
• Implement rate limiting and WAF protections.
• Establish centralized logging and monitoring with AWS services.
• Collaborate with DevOps to design CI/CD pipelines.

Skills

Python

Node.js

Java

AWS

OAuth 2.0

OpenID Connect

PostgreSQL

Education

Bachelor's degree in Computer Science or equivalent

Tools

Amazon API Gateway

AWS Lambda

Amazon Cognito

AWS IAM

KMS

CloudWatch

Job description

Who We Are

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

Role Description

Senior Backend/API Security Developer

Lead II - Software Engineering

You Are

UST is searching for a Senior Backend/API Security Developer (B2) with strong expertise in Python, Node.js, or Java and AWS, responsible for designing, developing, and securing enterprise-grade APIs that handle highly sensitive data.

The Opportunity

• Design Secure Architectures: Build scalable RESTful and GraphQL APIs using AWS services like Amazon API Gateway, AWS Lambda, and Amazon VPC while applying the principle of least privilege.
• Enforce Strict Authentication: Implement robust identity and access management using OAuth 2.0, OpenID Connect (OIDC), AWS IAM, and Amazon Cognito.
• Ensure Regulatory Compliance: Maintain data protection standards required by regulations like HIPAA, GDPR, or PCI-DSS through proper data masking, tokenization, and auditing.
• Manage Encryption Standards: Ensure all data in transit uses TLS 1.3 and data at rest is encrypted using AWS Key Management Service (KMS) with customer-managed keys.
• Conduct Security Audits: Perform automated security scans, static code analysis, and vulnerability assessments using tools like Amazon Inspector and AWS Security Hub.
• Implement Rate Limiting and WAF: Protect backend systems from distributed denial-of-service (DDoS) attacks and injection flaws using AWS WAF and API Gateway throttling controls.
• Establish Comprehensive Logging: Configure centralized monitoring and threat detection using Amazon CloudWatch, AWS CloudTrail, and Amazon GuardDuty for complete audit trails.
• Collaborate with DevOps engineers in designing and developing CI/CD pipeline using Codepipeline

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What You Need

• The ideal candidate will drive API security standards, implement secure architecture patterns, and serve as a key technical leader in building a world-class API engineering practice.
• Experience with cloud-native development, OWASP API Security standards, OAuth2/OIDC, and large-scale microservices architectures is required.
• Skills: AWS, OAuth 2.0, Node.js, PostgreSQL

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Remote-US

Compensation Range

$82,000-$123,000

Benefits

• Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty.
• They are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.
• They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits.
• Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines.
• Benefits offerings vary in Puerto Rico.
• Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.
• Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company’s 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.
• Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
• All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

What We Believe

We proudly embrace the values that have shaped UST since day one. We build our culture of Humility, Humanity, and Integrity. These values inspire us to nurture a people-first, human centric culture that fosters diversity, prioritizes sustainable solutions, and keeps our people and clients at the forefront of all decisions.

Humility

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity

Through business, we will better the lives of those less fortunate than ourselves.

Integrity

We honor our commitments and act with responsibility in all our relationships.

Equal Employment Opportunity Statement

UST is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other applicable characteristics protected by law. We will consider qualified applicants with arrest or conviction records in accordance with state and local laws and “fair chance” ordinances.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#UST

#CB