> Markdown version of [/jobs/ext/1265432-engineer-security-products-backend-apis](https://www.wearedevelopers.com/jobs/ext/1265432-engineer-security-products-backend-apis). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Engineer (Security Products, Backend APIs) - **Company:** Fastly, Inc. - **Location:** San Francisco, CA, United States (Remote available) - **Experience:** Expert - **Salary:** $181,200.0 - $217,500.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Code Review, Continuous Integration, DDoS Mitigation, Software Debugging, Software Design Documents, OAuth, Role-Based Access Control, JSON Web Token, Security Assertion Markup Language (SAML), Management of Software Versions, Openapi, Backend, Front End Software Development, Restful APIs, Terraform, Ddos, Pagination - **Published:** July 14, 2026 - **Apply:** https://www.fastly.com/about/jobs/apply?gh_jid=8011076 ## About the Role * Testing and observability as subtraction, not addition. You can name a metric you added that paid off - and one you'd delete now, * 3+ years on public APIs with external consumers. You've shipped a breaking change to customers who'd already integrated against your API. You've written a deprecation notice that actually went out * 5+ years shipping production Go as your primary language * Good judgement on RESTful API design: resource modeling, versioning, idempotency, error semantics, pagination, OpenAPI. You've made one of these calls wrong in production and remember what it cost to clean up * Hands-on experience designing and building reliable, large-scale backend systems - most Senior Engineers at Fastly have at least 5 years of relevant experience * Coding agents as a daily driver, not reluctantly. This team uses them heavily * You drive projects, not just tasks. You've owned a multi-week effort end-to-end: design doc through post-launch * Working knowledge of auth at API scale (RBAC, OAuth, JWT, SAML) * Built or operated security products (WAF, bot, DDoS, app security) ## Description * Some of the largest sites on the internet trust Fastly to keep them safe. The Security Products Console team owns the public-facing interface they use to do it - configuring Next-Gen WAF, DDoS protection, Bot Management, and the products we're building next * Our APIs meet critical business needs. Customers deploy them during active attacks, automate them through Terraform and CI/CD, and build entire security workflows on top of them * When the threat landscape moves, our APIs are how customers move with it. A bad release here leaves them exposed when they need us most: a great one is invisible, and that's the bar * We're hiring as the API surface scales for new product launches and a growing developer ecosystem. You'll be one of the engineers shaping what that surface looks like for the next several years * Design, ship, and own public-facing APIs and backend services in Go -from technical proposal & design docs through implementation, testing, and production rollout and on-call support * Use AI coding agents as part of your daily workflow * Partner with frontend engineers, product managers, and security researchers to ship the customer experience end-to-end * Take ambiguous or broadly-scoped problems and turn them into well-defined technical plans that the team can execute on * Author design and architectural documents and use them to drive alignment across engineering and product teams * Collaborate with internal platform teams, product managers, and stakeholders across the organization the understand needs and deliver impactful solutions * Consider stability, performance, and scalability in your designs and in the guidance you provide to the team * Mentor and grow other engineers on the team through code review, pairing, and technical leadership * Participate in an on-call rotation, * You design for the people downstream of your API. The customer hitting your endpoint at 3am, the support engineer debugging their escalation, the frontend teammate integrating against your contract. You've watched a vague error message of yours confuse someone and changed how you write them since ## Related Videos - [Throwing off the burdens of scale in engineering](https://www.wearedevelopers.com/videos/608-throwing-off-the-burdens-of-scale-in-engineering) - [For the REST of us: API First and Conway’s Law](https://www.wearedevelopers.com/videos/1932-for-the-rest-of-us-api-first-and-conway-s-law) - [WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking](https://www.wearedevelopers.com/videos/1331-wearedevelopers-live-chrome-for-sale-comet-the-upcoming-perplexity-browser-stealing-and-leaking) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/videos/1574-lessons-learned-from-observing-a-billion-api-requests) - [Contract-First Frontend: Scaling Reliable UIs with OpenAPI and AI](https://www.wearedevelopers.com/videos/1995-contract-first-frontend-scaling-reliable-uis-with-openapi-and-ai) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The 7 Most Popular Backend Frameworks for Developers](https://www.wearedevelopers.com/magazine/403-the-7-most-popular-backend-frameworks-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 103 - Superb Owl Trafficking](https://www.wearedevelopers.com/magazine/388-dev-digest-103-superb-owl-trafficking) - [Dev Digest 139 - Soft and hard queries](https://www.wearedevelopers.com/magazine/487-dev-digest-139-soft-and-hard-queries)