We are seeking a skilled Senior IoT Backend Engineer to plan, develop, and maintain backend applications and cloud services while ensuring robust security across all systems. This role involves building secure, scalable APIs, managing AWS cloud infrastructure, and integrating with external platforms, with a strong focus on adhering to cloud security best practices particularly for IoT environments.

We are specifically seeking candidates with hands-on experience in IoT (Internet of Things) development, including working with embedded systems, sensor networks, and data processing from connected devices. Ideal candidates will have a strong background in developing backend systems that integrate with IoT platforms and manage large-scale data from smart devices.

Key Responsibilities:

Backend Development:
- Design, develop, and maintain scalable backend systems and APIs for various use cases (e.g., public, private, and partner-facing) utilising best practice approaches.
- Optimize backend performance for reliability and scalability under diverse workloads.
- Design, develop and maintain system that can process millions of data concurrently from both SQL and NonSQL based databases
- Design, develop and maintain IoT based systems, like monitoring IoT devices, data send and receive from devices, OTA update, etc.
Cloud Infrastructure Management:
- Develop and manage AWS cloud infrastructure with a focus on secure, cost-effective, and high-performance solutions.
- Configure and maintain AWS services such as Lambda, API Gateway, EC2, S3, RDS, DynamoDB, and CloudWatch IoT Core, IoT Events, MSK, and many more.
- Design, develop and manage micro-services based systems and create services that can plug into such systems.
Cloud Security Implementation:
- Establish and enforce security policies for cloud infrastructure, including Identity and Access Management (IAM) roles, least privilege access, and multi-factor authentication (MFA).
- Monitor and mitigate security risks using tools like AWS Security Hub, GuardDuty, and CloudTrail.
- Implement secure data storage, encryption (in-transit and at-rest), and backup strategies.
- Perform regular vulnerability assessments and penetration testing of APIs and cloud systems.
API Security and Integrations:
- Design and implement secure APIs with authentication, authorization, and rate-limiting mechanisms (OAuth2, JWT, API keys).
- Develop and maintain integrations with external platforms while ensuring data security and compliance.
- Harden APIs against potential threats, such as replay attacks and brute-force attempts.
Monitoring, Logging, and Incident Response:
- Set up comprehensive monitoring and logging systems to detect and respond to security and dropout events promptly.
- Develop and maintain incident response procedures, ensuring swift mitigation of breaches or anomalies.
- Use tools like AWS CloudWatch, Splunk, or ELK stack for real-time monitoring and analytics.
Working with internal and external stakeholders to assist with system-related technical issues and support the data infrastructure needs of other business areas
Other activities as determined by the Head of Product & Technology

QUALIFICATIONS AND EXPERIENCE

Tertiary degree in Computer Science, Engineering or a related field
Proficiency in backend programming (e.g., Python, Node.js, Java) with a focus on secure development practices.
Strong understanding of AWS services (e.g., IAM, Security Hub, GuardDuty, VPC).
Strong understanding of IoT software development (backend /cloud) and associated communication protocols (MQTT an advantage)
Hands-on experience with API security standards (e.g., OAuth2, JWT) and secure integration patterns
Experience with development and scaling of containerized environments (e.g. Docker, Kubernetes) and their security models
Solid understanding of encryption protocols, firewalls, and network security controls.
Experience in monitoring and securing production environments.
Awareness of DevSecOps principles and integrating security into CI/CD pipelines.
Strong communication skills and able to interact with technical and non technical stakeholders

PERSONAL ATTRIBUTES

Demonstrate your commitment to our values
Enjoy working in a fast paced and dispersed work environment
Open Source contributor a bonus
High attention to detail
Proactive approach, be visible and vocal, have an opinion
Excellent written and verbal communicator, with the ability to translate technical jargon into everyday language
Driven to help people and communities