Staff Backend Engineer – Users

🕒 January 13

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HighLevel

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2018

☁️ SaaS

🤝 B2B

💰 Series A on 2021-11

SaaS • Marketing • B2B

HighLevel is an all-in-one marketing and sales platform designed to help businesses grow and succeed. The platform consolidates various marketing tools into a single solution, providing features such as lead capture through landing pages, surveys, forms, and calendars, as well as tools for nurturing leads via automated messaging across multiple channels including phone, SMS, email, and social media. HighLevel offers customizable solutions like online appointment scheduling, multi-channel follow-up campaigns, and pipeline management. Additionally, businesses can build websites, funnels, and landing pages using the intuitive page builder. HighLevel supports integrating with existing systems via API, and offers a membership platform for community building and course management. The platform is targeted towards marketers and offers white-labeling options for businesses to brand the software as their own. With a community-driven development approach and award-winning support, HighLevel is focused on empowering businesses to streamline their operations and enhance their marketing efficiencies.

📋 Description

• Design and evolve secure multi-tenant architectures (Agency → Account → App or equivalent hierarchy) for 100k+ agencies • Define and enforce tenant isolation guarantees at data, API, and infra levels • Build and review authorization models (RBAC / ABAC / hybrid) • Own token systems (API keys, OAuth flows, JWTs, scoped tokens, rotation, expiry) • Design fine-grained scopes for internal APIs, public APIs, and partner integrations • Map scopes → permissions → resources consistently • Prevent over-scoped tokens and privilege escalation • Lead security-critical backend designs (authZ boundaries, impersonation, auditability) • Set patterns for secure-by-default APIs used by internal and external teams • Partner with Infra/Security teams on Secrets management, Key rotation, Rate limiting & abuse prevention, Compliance readiness (SOC2 style thinking) • Act as a multiplier: raise the security bar across engineering via reviews, RFCs, and mentoring

🎯 Requirements

• 8+ years of backend engineering experience • Proven experience building secure, multi-tenant SaaS platforms • Deep understanding of: Authorization models (RBAC, ABAC), OAuth2 / JWT / API key systems, Threat modeling & security tradeoffs • Strong system design skills - especially for long-lived platforms • Comfort owning ambiguous, high-impact areas

🏖️ Benefits

• EEO Statement • Equal Opportunity Employer • Voluntary demographic information for compliance