Role overview
We are seeking a Backend Engineer with strong experience in Node.js or Python, Azure services, REST APIs, SQL databases and cloud-native backend development to design and implement backend services for a self-service Data Analysis Platform.
The role will focus on developing the Portal Backend API, designing Azure SQL data models, implementing engagement-scoped role-based access control, building secure file ingestion and storage services, audit logging, automated environment provisioning and asynchronous processing workflows.
The ideal candidate will have strong backend engineering fundamentals combined with hands-on experience working with Microsoft Azure, secure API development, distributed systems and data-intensive applications. Experience with Azure Functions, Service Bus, Azure Blob Storage/ADLS Gen2, Power BI and Azure OpenAI will be highly valuable.
Key responsibilities
1. Backend API Development
Design and implement the Portal Backend API using Node.js or Python.
Develop secure and scalable REST endpoints for engagement management, file management, user and role management, and provisioning workflows.
Implement robust business logic, validation, error handling and API security.
Design APIs that support scalable integration with frontend applications and downstream services.
Maintain clear API documentation and development standards.
Troubleshoot and optimize backend services for reliability and performance.
2. Azure SQL and Data Modeling
Design and implement Azure SQL schemas for the shared Portal Metadata Database.
Develop data models for engagement registries, file catalogs and related platform metadata.
Design and maintain per-engagement Analytics SQL databases.
Write efficient SQL queries, stored procedures and data-access logic where appropriate.
Optimize database queries and schemas for performance and scalability.
Ensure appropriate data isolation between engagements.
3. Authentication, Authorization and RBAC
Implement engagement-scoped Role-Based Access Control (RBAC) middleware.
Integrate backend authentication and authorization with Azure Entra ID using OIDC/OAuth.
Implement and enforce the platform's three primary roles: admin, practitioner and client.
Ensure users can access only the engagements and resources for which they are authorized.
Secure REST APIs and backend services against unauthorized access.
Implement appropriate permission checks across engagement, file, user and administrative operations.
4. File Storage and Ingestion Services
Design and implement secure file upload and download services using Azure Blob Storage / ADLS Gen2.
Implement secure SAS token issuance for controlled file access.
Support large, multi-GB file uploads with appropriate validation and reliability mechanisms.
Implement checksum validation and file-integrity verification.
Design efficient file metadata and catalog management.
Handle upload failures, retries and other edge cases gracefully.
Ensure file access follows engagement-level authorization and security policies.
5. Audit Logging and Compliance
Design and implement a centralized audit logging system.
Capture data uploads, access events, downloads and administrative actions.
Ensure audit records contain sufficient information for compliance, security investigations and operational observability.
Implement secure and reliable storage of audit information.
Ensure audit logging is integrated consistently across relevant backend services and workflows.
6. Engagement Lifecycle Management
Implement backend workflows for engagement creation, provisioning, archival and decommissioning.
Develop provisioning request and approval workflows.
Trigger automated environment creation and provisioning processes.
Implement retention policies and lifecycle controls.
Support controlled teardown and decommissioning of engagement environments.
Ensure lifecycle operations are secure, auditable and appropriately authorized.
7. Power BI Integration
Implement backend integration with Power BI for secure client-facing report delivery.
Integrate with Power BI APIs and supporting services.
Ensure embedded reports and dashboards are accessible only to authorized users and engagements.
Implement appropriate authentication, authorization and access-control mechanisms for report delivery.
8. Azure Functions and Asynchronous Processing
Design and implement Azure Functions for asynchronous and event-driven operations.
Implement provisioning workflows triggered through Azure Service Bus.
Develop scheduled functions for lifecycle management and operational tasks.
Build serverless data-processing pipelines where appropriate.
Implement reliable processing, retry and error-handling mechanisms for asynchronous workflows.
Ensure serverless components are scalable, maintainable and observable.
9. AI-assisted Data Processing
Integrate backend services with Azure OpenAI inference endpoints.
Support AI-assisted data processing capabilities within the analytics workbench.
Develop secure API integrations for AI inference workflows.
Apply appropriate validation, error handling and security controls around AI-assisted processing.
Collaborate with data and application teams to integrate AI capabilities into backend workflows.
10. Testing and Quality Engineering
Write comprehensive unit and integration tests for backend services.
Test REST API endpoints, authentication and authorization middleware, business logic and data-access components.
Test file upload/download workflows and asynchronous processing.
Validate security and engagement-scoped access controls through automated tests.
Maintain adequate regression coverage as platform functionality evolves.
Identify and resolve defects before production deployment.
11. Code Review and Engineering Practices
Participate actively in peer code reviews.
Review pull requests for correctness, security, performance and maintainability.
Ensure code follows established coding standards and engineering best practices.
Provide constructive feedback and contribute to continuous improvement of backend development practices.
Maintain clean, readable, testable and maintainable production code.
Required technical skills and competencies
5+ years of professional backend/software development experience.
Strong hands-on experience with Node.js or Python.
Strong experience designing and developing RESTful APIs.
Experience with cloud-based backend application development.
Strong experience with Microsoft Azure services.
Hands-on experience with Azure SQL and relational database design.
Strong SQL and data-modeling skills.
Experience with authentication and authorization using OIDC/OAuth.
Experience implementing RBAC and secure API access controls.
Experience with Azure Blob Storage and/or ADLS Gen2.
Understanding of asynchronous processing and event-driven architectures.
Experience writing unit and integration tests.
Strong debugging and problem-solving skills.
Experience with Git and modern software development workflows.
Good understanding of application security and secure coding practices.
Must have skills
Strong Node.js or Python backend development experience.
Strong REST API development experience.
Hands-on experience with Azure.
Strong Azure SQL and SQL experience.
Experience with relational database design and data modeling.
Experience with Azure Blob Storage / ADLS Gen2.
Experience with authentication and authorization.
Understanding of OIDC/OAuth and RBAC.
Experience building secure and scalable backend services.
Experience with unit and integration testing.
Experience with Git and code-review practices.
Good to have skills
Experience with Azure App Service.
Experience with Azure Functions.
Experience with Azure Service Bus.
Experience with Azure SDKs.
Experience implementing SAS token-based file access.
Experience supporting multi-GB file uploads and data-ingestion workflows.
Experience with Power BI REST API and embedded reporting.
Experience with application logging, monitoring and observability.
Experience with Postman and API testing.
Experience with CI/CD and Azure DevOps.
Nice to have / preferred skills
Experience integrating with Azure OpenAI or other AI inference services.
Experience with event-driven and serverless architectures.
Experience with automated environment provisioning.
Experience with data analytics platforms or self-service data platforms.
Experience working with large-scale data ingestion and processing systems.
Knowledge of data retention, archival and compliance requirements.
Experience with enterprise identity and access-management solutions.
Experience working with cloud-native applications and distributed systems.
Desired attributes
Strong ownership mindset with the ability to take backend components from design through production.
Strong understanding of backend architecture, API design and cloud-native engineering.
Security-conscious approach to authentication, authorization and data access.
Excellent analytical, debugging and problem-solving skills.
Strong focus on scalability, reliability, performance and maintainability.
Ability to work effectively with frontend, data, QA, DevOps and product teams.
Strong communication and collaboration skills.
Comfortable working with evolving requirements and complex technical challenges.
Passion for clean, testable and maintainable backend engineering.
Commitment to continuous improvement and engineering excellence.
Tools & Technologies
Node.js / Python
REST APIs
Azure App Service
Azure Functions
Azure SQL
Azure Blob Storage
ADLS Gen2
Azure Entra ID
Azure SDK
Azure Service Bus
Power BI REST API
Azure OpenAI
Azure DevOps
Git
Postman
VS Code
Interview Process
2-3 rounds of discussion.
