17 hours ago
Responsibilities
- Own the architecture and technical roadmap for identity, authentication, authorization, permissions, account models, partner OAuth, and customer-facing Trading API applications.
- Design explicit, auditable access models for multi-user accounts, sub-accounts, entity and advisor accounts, and delegated API or agent access.
- Lead delivery of customer-facing trading applications with real-time market data, order entry, and positions and order views.
- Drive migration from legacy monolith endpoints to a dedicated application backend with clear contracts to trading, accounts, transfers, ledger, and market-data services.
- Set standards for session and credential handling, MFA, passkeys, OAuth flows, rate limiting, input validation, feature flags, staged rollouts, testing, and observability.
- Partner with Product, Design, Compliance, Security, Brokerage Operations, and engineering teams on system behavior and integration boundaries.
- Lead design reviews, mentor engineers, provide technical escalation for production issues, and drive durable incident prevention.
Requirements
- 8+ years of software engineering experience with significant work across backend services and customer-facing applications.
- Proven ownership of production systems where defects could expose customer data, grant improper access, or cause financial loss.
- Deep experience with OAuth 2.0, OpenID Connect, session and token management, MFA, and role- or attribute-based permissions.
- Strong backend expertise in Go, or deep experience in Java, Kotlin, C#, or Rust with willingness to work primarily in Go.
- Strong frontend experience with TypeScript and React, including complex state-heavy applications; real-time data experience with WebSockets or other streaming protocols is preferred.
- Knowledge of relational databases, preferably PostgreSQL, API design using REST and gRPC, and service-oriented systems running on Kubernetes.
- Demonstrated attention to correctness and security through threat modeling, testing strategy, edge-case analysis, and safe production rollouts.
- Clear communication across engineering, design, product, compliance, and security partners, plus a track record of technical leadership and mentorship.
- Preferred experience includes trading or brokerage applications, identity platforms, passkeys and WebAuthn, delegated third-party access, API platforms, agentic AI integrations, MCP servers, FIX, institutional trading workflows, and production migrations from legacy monoliths.
Benefits
- Competitive salary and stock options.
- Health benefits.
- One-time new-hire home-office setup support.
- Monthly stipend provided through a Brex Card.
Tech Stack
Categories
About Alpaca
Alpaca builds brokerage infrastructure APIs and operates a self-clearing broker-dealer, enabling fintechs, institutions, and developers to embed trading in stocks, ETFs, options, crypto, and fixed income. Its platform includes account opening, clearing, custody, and compliance tooling, with revenue from brokerage and platform fees. Founded in 2017 and headquartered in San Mateo, California, Alpaca serves clients in 40+ countries through its subsidiaries.