Senior Backend Engineer

We’re looking for a Senior Backend Engineer to own that foundation. You’ll set the technical standards for the backend, make the architectural calls, and work closely with two full-stack developers and a UX designer. This is an individual contributor role with real ownership - the decisions you make will shape how the system scales and how well it holds up under real business load., * Database design and administration - schema design, query optimization, index strategy, and maintaining PostgreSQL performance as data and tenant volume grow. You understand what slow queries cost and how to fix them before they become a problem.

• Multi-tenant data isolation - ensuring clean boundaries between tenant data at every layer, including AI context assembly. In a financial product, a data leak between tenants is not a minor bug.
• Secrets and key management - owning how API keys, LLM provider credentials, webhook secrets, and other sensitive credentials are stored, rotated, and scoped. Security here is not UI-driven; it lives in the infrastructure and the code.
• API and integration security - authentication, authorization, rate limiting, input validation, and the controls that protect an application that is heavily API- and AI-dependent. You think about attack surface as a first-class concern.
• Infrastructure readiness and migration planning - we currently run on Vercel and Supabase (both AWS-hosted). As the platform grows, we’ll need to evaluate when and how to migrate to a more robust hyperscaler stack (AWS or GCP). You’ll help us recognize that inflection point, plan the migration, and execute it.
• Backend standards - setting patterns for how the backend is structured, tested, and maintained. The full-stack developers write backend code too; your job is to make sure the standards are clear and the bar is consistent.
• Performance and scalability - identifying bottlenecks before they surface in production, and building with growth in mind from the start.
• Local-first storage and sync architecture - designing and maintaining a sync engine that supports offline-first operation, realtime updates, and conflict resolution across a multi-tenant environment. You’ve evaluated or worked with approaches like Replicache, ElectricSQL, or PowerSync and can make a reasoned call about the right fit for our stack.
• Integration standards - establishing the patterns the whole team follows for connecting external services (Stripe, Shopify, webhooks, and a growing list beyond): auth flows, rate limiting, retry logic, error handling, and managing schema drift. Implementation is shared across the team; the standards are yours.

Do you have experience in TypeScript?, * Strong PostgreSQL depth - not just read-level comfort, but real experience optimizing schemas, writing complex queries, managing indexes, and understanding how the database behaves under load.

• TypeScript fluency and experience on the Node.js / Next.js backend stack.
• Hands-on experience with Supabase or a comparable managed Postgres platform, including Row Level Security, edge functions, and the operational realities of running on a hosted stack.
• Hyperscaler experience - AWS or GCP. You’ve built and operated production workloads on at least one, and you understand the tradeoffs involved in migrating to and operating on them versus a managed platform like Supabase/Vercel.
• Security as a practice, not a checklist - API security, auth/authz design, secrets management, and the specific risks that come with AI-dependent and API-dependent architectures (prompt injection, data isolation, credential exposure).
• Experience building or operating multi-tenant SaaS systems where tenant isolation and data integrity are non-negotiable.
• Ownership mindset - you identify problems before they become critical, come with a point of view on how to fix them, and raise them early with context.
• Hands-on experience with a local-first or sync engine - Replicache, ElectricSQL, PowerSync, or comparable. You understand the tradeoffs involved in offline-first design, conflict resolution strategies, and what it takes to make realtime sync reliable at scale.

Nice to have

• Accounting or ERP domain knowledge.
• Experience with AI context pipelines - retrieval, embedding storage, and grounding LLM calls in structured application data.
• Familiarity with Drizzle ORM or similar TypeScript-native ORMs.
• Experience with GitHub Actions and CI/CD pipeline design.
• Background in compliance-adjacent environments (SOC 2, financial data handling, audit logging).
• Familiarity with LLM output validation and guardrails - understanding how to verify AI-generated content before it touches financial records, and how to build logging and fallback logic into AI-dependent workflows.

Pulled from the full job description

• Health insurance
• 401(k) matching
• Paid time off, * 401(k) matching
• Health insurance
• Paid time off

Round 2 AI is an AI-first business management consultancy serving small and mid-sized businesses that have outgrown the patchwork of disconnected tools holding their operations together. We work across accounting, operations, and AI - building proprietary systems tailored to each client’s environment rather than selling a one-size-fits-all product.