Role purpose
Own the back-end microservices layer and all API integrations across every channel — 5 websites, Super App (iOS/Android/Huawei), kiosks, signage — consumes services through this layer. You design and lead the Node.js/NestJS microservices exposed via Azure APIM, and are the technical authority for ~18 integrations with airport systems. Integration is the single biggest delivery risk on this program.
What you will do
- Microservices and API gateway: Design the stateless, modular microservices layer on Node.js/NestJS hosted in Azure. Define service boundaries, API contracts (REST, OpenAPI/Swagger), and data models. Configure Azure APIM as the central gateway: rate limiting, OAuth 2.0, caching, logging, RBAC, and centralised documentation for all consumers.
- Integration delivery (~18 systems): Own the integration layer connecting to FIDS, BHS, AODB, CRM, Pointr wayfinding, payment gateways, booking engines (hotels, lounges, meet & greet, parking), loyalty, weather/currency, feedback systems, and identity providers (OAuth 2.0/SAML/OpenID). Define real-time vs. batch patterns; use Azure Service Bus and Event Grid for async flows, WebSockets for real-time.
- Content and data APIs: Build the headless content delivery layer from Optimizely CMS (GraphQL) to all channels, supporting SSG/ISR in Next.js with back-end caching and Cloudflare CDN. Design APIs feeding guest data into Snowflake (CDP/Single Customer View) and the activation layer syncing segments back into Optimizely for personalisations.
- Performance and resilience: Architect for contractual load targets (300 users at 10 req/s spike). Implement auto-scaling (Azure App Service), multi-region failover, database geo-replication, load balancing, and circuit-breaker patterns.
- Security and DevOps: Implement OAuth 2.0/SAML/OpenID authentication, RBAC, and OWASP API Top 10 protections. Support VAPT remediation and audit log requirements. Work with DevOps to build CI/CD pipelines (Azure DevOps/GitLab), enforce SonarQube code quality, and enable zero-downtime deployments.
- Team leadership: Lead the back-end / integration engineering chapter (integration developers ramping from 2 to 5+ across the program). Set coding standards, conduct code reviews, mentor junior engineers, and drive technical decision-making within the chapter.
- L4 support readiness: Produce technical documentation, API runbooks, and handover materials for the client’s L1–L3 support teams. Maintain APIs against the 99.999% uptime SLA and P1–4 incident restore times post go-live.
Required experience
- 8+ years back-end engineering, 3+ as a lead on a multi-channel digital platform program with complex third-party integrations
- Node.js / NestJS: deep hands-on experience building production microservices at scale. Not a .NET or Java developer who has “used Node”; Node.js is the primary stack
- Azure: strong experience with Azure APIM, App Service, Service Bus, Event Grid, Azure SQL, Traffic Manager, and Azure Monitor. This is an Azure-native program
- API design: expert-level RESTful API design; OpenAPI/Swagger documentation; experience with GraphQL a strong plus (Optimizely headless uses it)
- Integration: proven track record connecting to complex third-party systems (operational, payment, booking, identity). Comfortable designing real-time, event-driven, and batch patterns across heterogeneous system landscapes
- Security and DevOps: OAuth 2.0/SAML/OpenID, RBAC, OWASP API Top 10. CI/CD pipeline design (Azure DevOps or GitLab); SonarQube; containerisations a plus
- Team leadership: has led or grown a back-end/integration team (4+) in a distributed model; strong code review and mentoring culture
