About the Role

- We are rebuilding our public-facing web platform on a contemporary, headless architecture. You will design and build the content layer (Strapi) and the React front end that consumes it. The work is performance-sensitive, security-conscious and subject to regulatory and compliance requirements. You will be a hands-on senior engineer who shapes technical decisions and mentors others.

Key Responsibilities:

- Design, build and maintain scalable web applications using React.js (Next.js preferred) and Node.js.

- Architect and implement content models, APIs and workflows in Strapi headless CMS (Contentful, Sanity, Directus, Payload, etc.).

- Build custom Strapi plugins, controllers, services, lifecycle hooks, middleware and policies, and handle upgrades across major versions.

- Configure roles and permissions, i18n, media handling, and draft/publish and review workflows to meet editorial and compliance needs.

- Build REST and GraphQL APIs and integrate the CMS with internal services, third-party APIs and authentication systems (SSO/SAML/OAuth2).

- Optimize for performance, SEO and accessibility (Core Web Vitals, SSR/SSG/ISR, caching, CDN).

- Write clean, tested, maintainable code, and take part in code reviews and architecture discussions.

- Own deployments with the DevOps team: CI/CD, containerization, environment management and monitoring.

- Apply secure coding practices (OWASP Top 10, input validation, secrets management, dependency hygiene) and support security reviews and audits.





- Mentor junior and mid-level engineers, and document technical designs and decisions

Required Skills and Experience :

- 6 to 9 years of professional software development, including 4+ years of strong hands-on Node.js (Express, NestJS or Koa) and React.js.

- Proficiency in JavaScript (ES6+) and TypeScript

- At least 2 years of hands-on experience with a headless CMS, preferably Strapi (v4/v5), covering content modeling, custom extensions and production deployment.

- Solid understanding of REST and GraphQL API design.

- Experience with relational databases (PostgreSQL, MySQL), including schema design and query optimization.

- Experience with state management (Redux, Zustand or React Query) and modern React patterns (hooks, context, code splitting).

- Familiarity with Git workflows, CI/CD pipelines, Docker, and at least one cloud platform (AWS).

- Experience writing unit, integration and end-to-end tests (Jest, React Testing Library, Cypress or Playwright).

- Good understanding of web security, authentication and authorization.

- Strong communication skills and the ability to work with product, design, content and compliance stakeholders.

- Experience in BFSI, fintech or other regulated industries, including audit trails, maker checker approval flows and data-privacy requirements.

- Familiarity with SSO integrations (Okta, Azure AD) and role-based access control at scale.

- Contributions to open-source projects, or authored Strapi plugins.

📌 Senior Full Stack Engineer (Mumbai)
🏢 HDFC Securities
📍 Mumbai