Backend Developer (AWS/FedRAMP)

Role Summary
We are looking for a Backend Engineer to build core backend services for a predictive cybersecurity platform. The platform ingests telemetry, models enterprise control-plane state, simulates adversarial trajectories, validates defensive actions, and supports advisory, semi-autonomous, and autonomous security response workflows.

Key Responsibilities
Design and develop scalable backend services using Python/FastAPI or similar backend frameworks
Build APIs for telemetry ingestion, modelled state generation, trajectory simulation, bundle generation, validation, scoring, authorization, audit, and operator workflows
Develop graph-based control-plane models using PostgreSQL/RDS, including entity relationships, dependency edges, snapshots, traversal, and canonical serialization
Implement adversarial simulation logic for lateral movement, privilege escalation, identity compromise, routing manipulation, service disruption, malware evasion, botnet behavior, and insider threat scenarios
Build deterministic configuration bundle generation with conflict resolution, canonical serialization, cryptographic hashing, signing, and auditability
Integrate validation workflows covering operational invariants, safety checks, compliance rules, rollback readiness, and defensive action evaluation
Work with AWS services including ECS/Fargate, Lambda, Step Functions, EventBridge, S3, RDS PostgreSQL, Kinesis, Glue, Athena, KMS, Secrets Manager, CloudWatch, GuardDuty, and Security Hub
Ensure backend services are secure, deterministic, observable, testable, and suitable for cybersecurity-grade audit requirements

Required Skills
Strong experience in backend development using Python, FastAPI, REST APIs, async processing, and microservice architecture
Experience with PostgreSQL, graph-style data modeling, indexing, snapshots, transactions, and high-volume data processing
Good knowledge of AWS-native application architecture and event-driven systems
Understanding of cryptographic hashing, signing, KMS, authorization artifacts, immutable audit logs, and secure API design
Familiarity with cybersecurity concepts such as IAM, RBAC, network segmentation, SIEM/SOAR, CloudTrail, GuardDuty, endpoint telemetry, FedRAMP compliance, and control-plane configuration