Staff Fullstack Engineer

Alpaca

. Own the architecture and technical roadmap for how customers access and use Trading API, including identity, authentication, authorization, permissions, account models, partner OAuth, and customer-facing trading and account-management applications.

Posted 10/13/2026full-timeRemote • United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing secure Trading API architectures, with a strong focus on authentication, authorization, and customer-facing applications. Proven ability to lead technical delivery, mentor engineers, and ensure high standards of security and correctness in production systems.

Highest-signal resume keywords

API Design (REST and gRPC)Authentication and Authorization (OAuth 2.0, OpenID Connect)Backend Development (Go, Java, Kotlin, C#, Rust)Frontend Development (TypeScript, React)Relational Databases (PostgreSQL)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

API DesignAuthenticationAuthorizationBackend DevelopmentFrontend DevelopmentRelational DatabasesReal-Time Data ProcessingSecurity StandardsTesting StrategySession Management

Soft Skills

Clear CommunicationTechnical LeadershipMentorshipProduct-Minded ApproachTeam Collaboration

Tools & Technologies

KubernetesWebSocketsOAuthMFAFeature Flags

Industry Keywords

Trading APICustomer-Facing ApplicationsAccount ManagementSecurity StandardsIncident Prevention

Tech Stack

Tools & technologies

GRPCJavaKotlinKubernetesPostgresReactRustTypeScriptGo

About the role

Key responsibilities & impact

Own the architecture and technical roadmap for how customers access and use Trading API, including identity, authentication, authorization, permissions, account models, partner OAuth, and customer-facing trading and account-management applications.
Design access models for complex account structures, including multiple users, sub-accounts, entity and advisor accounts, and delegated API and agent access.
Lead technical delivery of Trading API customer applications, including real-time market data, order entry, and positions and order views.
Drive migration from legacy monolith endpoints to a dedicated application backend with clear API contracts.
Set security standards for customer-facing systems, including session and credential handling, MFA, passkeys, OAuth flows, rate limiting, input validation, and security findings response.
Establish safe delivery standards through feature flags, staged rollouts, preview environments, testing strategy, and production observability.
Partner with Product, Design, Compliance, Security, Brokerage Operations, and engineering teams.
Lead design reviews, mentor engineers, and raise engineering standards.
Act as technical escalation point for production issues and drive durable incident prevention.

Requirements

What you’ll need

8+ years of software engineering experience, with significant time on both backend services and customer-facing applications. Evidence of scope and ownership matters more than a strict year count.
Proven ownership of a production system where a defect could expose customer data, grant the wrong access, or cause financial loss.
Deep experience with authentication and authorization: OAuth 2.0 and OpenID Connect, session and token management, MFA, and role- or attribute-based permission models.
Strong backend expertise in Go, or deep experience in Java, Kotlin, C#, or Rust and a clear willingness to work primarily in Go.
Strong frontend experience with TypeScript and React, including complex, state-heavy applications.
Solid knowledge of relational databases (PostgreSQL preferred), API design (REST and gRPC), and service-oriented systems running on Kubernetes.
Demonstrated care for correctness and security: threat modelling, testing strategy, edge-case analysis, and safe production rollout.
Clear communication with engineers, designers, product managers, and compliance and security partners, including when requirements are ambiguous or still being defined.
Track record of technical leadership and mentorship across teams.
Product-minded approach and effectiveness as a teammate.
Experience with real-time data over WebSockets or other streaming protocols is strongly preferred.

Benefits

Comp & perks

Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card