CLOUD BACKEND ENGINEER

Kastech Software Solutions Group • Brea, CA

13d • $70 - $75

About The Position

We're looking for a Cloud Backend Engineer to design, build, and operate the backend services behind a multi-tenant, event-driven cloud platform. You'll work across cloud services and device/edge connectivity, building reliable, scalable systems and owning them end-to-end — from architecture and infrastructure-as-code through to production operations.
This is a hands-on, high-ownership role on a small, senior team. You'll write Go services, define your own AWS infrastructure in CDK, secure the API edge, and reason about the boundary between the device edge and the cloud.

Requirements

• Strong professional experience building backend services in Go and Node/Typescript (services, middleware, concurrency, testing).
• Hands-on experience with AWS — Lambda, API Gateway, SQS, DynamoDB, S3, IAM, Cognito, RDS/Aurora, CloudWatch — and comfort operating what you build.
• Experience writing infrastructure as code, ideally AWS CDK (TypeScript) (Terraform/CloudFormation experience translates).
• Solid understanding of distributed systems — event-driven architecture, message queues, retries/idempotency, dead-letter handling, eventual consistency, and fault tolerance.
• Experience designing and securing multi-tenant SaaS backends — tenant isolation, authn/authz (OAuth2, JWT), and API gateway patterns.
• Working knowledge of PostgreSQL — schema design, migrations, and query performance (Row-Level Security a strong plus).
• Comfort with CI/CD and containerization — Jenkins (or similar), Docker, and multi-environment promotion.
• Strong debugging and observability instincts, and clear technical communication.

Nice To Haves

• Experience with IoT / device-to-cloud systems — AWS IoT Greengrass, MQTT, device provisioning, fleet management, and telemetry pipelines.

Responsibilities

• Design, build, and maintain backend services and APIs in Go, with supporting code and infrastructure in TypeScript.
• Define and operate cloud infrastructure on AWS using CDK — API Gateway, Lambda, SQS (including dead-letter/redrive queues), DynamoDB, S3, RDS/Aurora PostgreSQL, Cognito, CloudFront, and WAF.
• Build and scale event-driven and device-to-cloud pipelines — telemetry and data ingestion, content/command delivery, retries, and offload/consolidation processing.
• Work across the cloud/edge boundary — services and agents running on edge/embedded Linux, using AWS IoT Greengrass and MQTT messaging.
• Strengthen multi-tenant isolation, identity, and security — PostgreSQL Row-Level Security, OAuth2/JWT, API gateway authorizers and middleware, edge protection (CloudFront/WAF/Lambda@Edge), and encryption in transit and at rest (KMS/Secrets Manager).
• Own reliability and observability — structured logging with secret redaction, retry/back-off and idempotency, latency tracing, and diagnosing concurrency and load problems in ingestion and delivery paths.
• Write and maintain CI/CD and security scanning — Jenkins pipelines, Docker, and remediation of dependency/container findings (e.g., BlackDuck, Sysdig) across multiple environments.
• Collaborate with architecture, firmware/edge, and product teams to define the API and data contracts between devices and the cloud.
• Contribute to design reviews, participate in on-call/incident response, and help with release engineering for production systems.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed