We are seeking a highly skilled full stack architect with deep expertise in Node.js, Angular, and Microsoft Azure to design, architect, and guide the development of scalable, secure, and high-performing payment processing systems. The ideal candidate should have hands-on experience with HSM for cryptographic operations, key management, and tokenization, combined with a proven track record of delivering PCI-DSS compliant, real-time payment platforms.
Key responsibilities:
* Define end-to-end architecture for full stack solutions using Node.js (backend) and Angular (frontend).
* Design microservices-based, cloud-native, and event-driven architectures that ensure scalability and resilience.
* Lead secure key management architecture using HSMs for encryption, decryption, and signing operations.
* Implement tokenization and data protection mechanisms aligned with PCI-DSS and EMVCo standards.
* Collaborate with business and technical stakeholders to define solution roadmaps, architecture blueprints, and delivery strategies.
* Architect and optimize end-to-end payment workflows, including authorization, capture, settlement, refunds, and reconciliation.
* Integrate securely with payment gateways, card networks, banks, and digital wallets.
* Ensure compliance with PCI-DSS, ISO 8583, 3DS2, and PSD2 or open banking standards.
* Design high-availability, low-latency transaction processing systems with HSM-backed cryptographic security.
* Provide technical leadership and mentorship to development teams.
* Establish standards for code quality, API design, DevSecOps, and observability.
* Implement CI/CD pipelines, infrastructure as code, and automated testing using Azure DevOps.
* Drive the use of secure key vaults, HSM integration, and digital signing for sensitive payment data.
Required skills and experience:
* Backend: Node.js, Express.js, TypeScript, REST, GraphQL, WebSockets.
* Frontend: Angular, RxJS, NgRx, HTML5, SCSS.
* Cloud: Azure, including App Services, Functions, Service Bus, Event Grid, API Management, Key Vault, HSM, Cosmos DB, Blob Storage, Application Insights.
* Security and cryptography: HSMs, encryption, signing, PKCS#11, RSA, AES, SHA-2, key management, tokenization, PCI-DSS compliance.
* Architecture patterns: Microservices, CQRS, event sourcing, serverless, domain-driven design.
* DevOps: Azure DevOps, Docker, Kubernetes, Terraform or Bicep.
* Database: SQL Server, PostgreSQL, MongoDB, or Cosmos DB.
Preferred qualifications:
* Experience in high-volume transaction processing and real-time payments.
* Understanding of cryptographic protocols, key ceremony procedures, and compliance audits.
* Certifications related to Azure or security.
* Familiarity with event-driven architecture tools.