Source description
About the role
Key Responsibilities API Development
Design, develop, and maintain RESTful APIs using Python and FastAPI.
Implement RBAC-based access control, input validation, and secure coding practices (OWASP Top 10).
Build pagination, filtering, and search capabilities across DynamoDB-backed services.
Write clean, testable code with unit and integration test coverage (target 80%+).
Data Layer & Storage
Design and optimize DynamoDB table schemas, GSIs, and access patterns for high-throughput workloads.
Integrate with AWS S3 for blob storage (file uploads, solution assets, icons).
Implement data migration scripts and backfill utilities as the schema evolves.
AI/LLM Integration
Integrate with AI Gateway (LiteLLM-based) for LLM-powered features — summarization, classification, recommendations.
Implement prompt engineering patterns, token tracking, and response caching.
Build guardrails, content filtering, and cost control mechanisms for AI API consumption.
DevOps & Infrastructure
Containerize applications using Docker; deploy to AWS EKS (Kubernetes).
Maintain CI/CD pipelines (Jenkins) including security gates (Prisma Cloud, SonarQube, Fortify).
Manage environment-specific configurations across Dev, UAT, and Production.
Observability & Security
Implement structured logging (structlog) and audit trails for compliance requirements.
Monitor application health, troubleshoot production issues, and optimize performance.
Integrate with SSO/Active Directory for authentication; implement JWT-based authorization.
Remediate security vulnerabilities identified by SAST/DAST/SCA scanners in CI pipeline.
Collaboration
Work closely with frontend developers (React/TypeScript) to define API contracts.
Participate in code reviews, architecture discussions, and sprint planning.
Maintain API documentation (Swagger/OpenAPI) and technical design documents.
Must-Have Skills
Python (3.10+) — Strong proficiency with async/await, type hints, Pydantic, and modern Python idioms.
FastAPI — Production experience building REST APIs with dependency injection, middleware, and background tasks.
AWS DynamoDB — Hands-on experience with table design, query/scan operations, GSIs, and capacity planning.
AWS S3 — File upload/download, pre-signed URLs, lifecycle policies.
Docker & Kubernetes — Containerizing applications, writing Dockerfiles, deploying to EKS/K8s clusters.
CI/CD — Experience with Jenkins, GitLab CI, or similar; understanding of build, test, scan, deploy pipelines.
Git — Branch management, pull request workflows, code review practices.
Testing — pytest, unit testing, integration testing, mocking (unittest.mock), code coverage tools.
REST API Design — Proper use of HTTP methods, status codes, error handling, pagination patterns.
Authentication — JWT, OAuth2, SSO/SAML integration, RBAC implementation.
Good-to-Have Skills
AI/LLM Integration — Experience calling LLM APIs (OpenAI, Azure OpenAI, Anthropic), prompt engineering, RAG patterns.
Terraform — Writing IaC for AWS resource provisioning (DynamoDB tables, S3 buckets, IAM roles).
Vector Databases — Familiarity with vector search (OpenSearch, Pinecone, pgvector) for semantic retrieval.
Security Scanning — Experience with SonarQube, Prisma Cloud (Checkov), Fortify, or similar SAST/SCA tools.
Structured Logging — Experience with structlog, CloudWatch, or ELK stack for observability.
Event-Driven Architecture — SQS, SNS, or EventBridge for async processing.
React/TypeScript — Basic frontend understanding to collaborate effectively with the UI team.
More at EXL