Node Js Lead

Must Have

Key Responsibilities

• Design, develop, test, and maintain microservices and backend systems using Node.js.
• Build robust RESTful and/or GraphQL APIs with clear versioning and documentation.
• Architect and implement scalable systems using best practices for performance, reliability, and observability.
• Collaborate with frontend teams, product managers, and DevOps to deliver features end-to-end.
• Drive and participate in code reviews, technical design reviews, and architecture discussions.
• Automate testing (unit, integration, contract), CI/CD pipelines, and deployment workflows.
• Optimize application performance, memory usage, and startup time; profile and resolve bottlenecks.
• Implement secure coding practices (authentication, authorization, input validation, encryption, secrets management).
• Mentor junior engineers and contribute to team capability growth.
• Troubleshoot and resolve production incidents, perform root-cause analysis, and implement preventative measures.
  

Required Technical Skills

• Primary: Strong experience in Node.js (8+ years total development experience; 4+ years backend with Node.js preferred).
• Deep knowledge of JavaScript (ES6+) and TypeScript.
• Experience in at least one major web framework: Express, Koa, Hapi, NestJS, or similar.
• API design: REST, GraphQL, or both. Familiarity with OpenAPI/Swagger.
• Databases: Strong experience with relational DBs (PostgreSQL, MySQL) and NoSQL (MongoDB, Redis). Comfortable designing schemas, indexing, and query optimization.
• Asynchronous programming: Promises, async/await, event-driven architectures, message brokers (RabbitMQ, Kafka, AWS SQS).
• Microservices patterns: Service discovery, circuit breakers, distributed tracing, idempotency, transactions or compensating transactions.
• Containerization and orchestration: Docker, Kubernetes (or cloud-native equivalents).
• Cloud platforms: AWS, GCP, or Azure — experience with core services (compute, storage, networking, managed DBs, IAM).
• Security: JWT/OAuth2, role-based access, common web vulnerabilities (OWASP Top 10) and mitigations.
• Observability: Logging, metrics (Prometheus / CloudWatch), distributed tracing (Jaeger, Zipkin), and alerting.
• Testing: Unit tests (Jest/Mocha), integration tests, test doubles, and familiarity with TDD/BDD practices.
• CI/CD: GitHub Actions, GitLab CI, Jenkins, or similar; blue/green or canary deployments.