Senior API & Backend Developer – Secure SaaS Platform

The Opportunity

You will design and build a secure API layer that enables authorised applications and customers to access CoreShift functionality without exposing its underlying source code or proprietary logic.

This is a hands-on role requiring strong API engineering, security and cloud architecture skills. You will work closely with Neo’s technical leadership and data engineering team to define the architecture, establish development standards and deliver the first production-ready services.

Key Responsibilities

• Design and develop secure REST APIs for CoreShift services and processing capabilities.

• Encapsulate proprietary business logic behind controlled service interfaces.

• Implement authentication, authorisation and role-based access controls.

• Establish API gateway, rate-limiting, request validation and usage-monitoring capabilities.

• Develop secure mechanisms for managing customer and service credentials.

• Create API versioning, documentation and lifecycle-management standards.

• Implement logging, auditing, error handling and operational monitoring.

• Package and deploy services using containers and automated CI/CD pipelines.

• Conduct security testing and address vulnerabilities before production release.

• Work with data engineers to integrate APIs with Databricks, cloud storage and data-processing workflows.

• Produce clear technical documentation, deployment instructions and operational runbooks.

• Contribute to architectural decisions concerning scalability, tenant isolation and protection of intellectual property.

About You

You are an experienced backend developer who understands that building an enterprise API involves much more than exposing application endpoints. You have designed secure production services and are comfortable working with sensitive data and proprietary business logic.

You will ideally have:

• At least five years’ experience in backend or API development.

• Strong experience with Python and frameworks such as FastAPI, Flask or Django.

• Demonstrated experience designing and delivering REST APIs.

• Strong knowledge of OAuth 2.0, OpenID Connect, JWT and role-based access control.

• Experience with API gateways and service-to-service authentication.

• Experience deploying containerised applications using Docker.

• Knowledge of Azure or AWS cloud services and security controls.

• Experience with automated testing and CI/CD pipelines.

• Understanding of secure software development practices and the OWASP API Security Top 10.

• Experience implementing monitoring, audit logging and operational alerting.

• Strong documentation and communication skills.

Experience with any of the following would be highly regarded:

• Databricks, Spark or enterprise data platforms.

• Azure API Management, AWS API Gateway or Kong.

• Kubernetes or other container-orchestration platforms.

• Multi-tenant SaaS architecture.

• Financial services, banking or other regulated environments.

• Secrets management, encryption and private networking.

• SOC 2, ISO 27001, CPS 230 or related security frameworks.

What Success Looks Like

During the initial engagement, you will help Neo:

• Define the target API and security architecture.

• Build a production-ready API framework.

• Expose selected CoreShift capabilities through secure endpoints.

• Implement identity, access, monitoring and audit controls.

• Establish automated testing and deployment processes.

• Produce documentation that enables ongoing development and support.

Why Join Neo?

• Work on a proprietary platform solving complex, real-world banking challenges.

• Help shape the architecture of a growing Australian technology product.

• Work directly with experienced data, cloud and banking specialists.

• Take meaningful ownership of technical decisions and delivery.

• Flexible engagement options for the right candidate.

Because of the nature of our client work, applicants must have full Australian working rights and may be required to complete background, police and financial-services suitability checks.