Senior Backend / Platform Engineer
Causa Prima
2 days ago
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
English Experience level
IntermediateJob location
Tech stack
API
Artificial Intelligence
User Authentication
Code Review
Databases
Data Stores
Digital Signature
Python
Key Management
PostgreSQL
Performance Tuning
TypeScript
Management of Software Versions
Large Language Models
Software Security
Indexer
Backend
Kafka
Event Store
Event Sourcing
Job description
- Event store - Append-only PostgreSQL with tamper-evident hash chaining, real-time event distribution, agent replay and recovery, schema versioning.
- Cryptographic signature infrastructure - Key management, signature verification on all agent events, approval chains for external actions.
- Workflow Constraint Engine - The gateway that verifies authorization before any external action (email, payment, API call) proceeds.
- PII Vault & GDPR compliance - Isolated, encrypted storage for personal data. Right to erasure. Data residency per region.
- Multi-tenancy - Row-level security, tenant isolation across all data stores, tenant-scoped LLM API keys.
- Authorization (Cerbos) - Attribute-based access control for agents and humans. Deterministic policy evaluation - LLMs never make auth decisions.
- MCP security layer - Authentication, capability-based scoping per partner, and rate limiting for the Model Context Protocol endpoint.
- Database architecture - PostgreSQL schema design, indexing strategy, performance tuning, read replica topology.
Requirements
Do you have experience in SoC?, Do you have a Master's degree?, * 3+ years experience with Python and/or TypeScript in production.
- 5+ years designing backend platforms for production systems.
- Strong systems design skills - this is the primary requirement. You think in boundaries, contracts, failure modes, and scaling characteristics.
- Deep PostgreSQL knowledge - RLS, indexing tradeoffs, event sourcing patterns, schema evolution.
- Strong application security architecture skills: encryption models, key management, auth patterns.
- Experience with policy-as-code authorization (Cerbos, OPA, Cedar, or similar).
- Strong code review skills for security-sensitive AI-generated code.
- Nice to have:
- Cryptographic primitives in production (digital signatures, hash chaining, application-layer encryption).
- Event streaming platforms (Kurrent, Redpanda, Kafka).
- SOC 2 or GDPR compliance engineering.
- Fintech or regulated-environment background.