Staff Fullstack Engineer

Alpaca is a brokerage infrastructure company providing developer APIs for stocks, options, fixed income, and crypto trading, plus tokenization infrastructure for TradFi–DeFi markets.

San Mateo, California, United States
About Alpaca

Alpaca provides API-first brokerage infrastructure for fintechs, institutions, algorithmic traders, and developers. Its offerings include Broker API, Trading API, market data, self-clearing brokerage services, crypto services, and the Instant Tokenization Network for in-kind minting and redemption of tokenized assets.

View jobs by Alpaca

Skills

About the Role

You will lead the technical direction for customer-facing Trading API applications and their identity, authorization, account, and partner integrations. You will design secure access models, modernize application backends, set delivery and security standards, lead design reviews, mentor engineers, and resolve production issues with durable fixes.

Requirements

  • 8+ years of software engineering experience across backend services and customer-facing applications
  • Experience owning a production system with material data-access or financial-loss risk
  • Deep experience with OAuth 2.0, OpenID Connect, session and token management, MFA, and permission models
  • Strong backend expertise in Go or experience in Java, Kotlin, C#, or Rust with willingness to work in Go
  • Strong TypeScript and React experience
  • Knowledge of relational databases, API design, and Kubernetes-based service-oriented systems
  • Experience with threat modelling, testing, edge-case analysis, and safe production rollout
  • Technical leadership and mentorship experience

Responsibilities

  • Own the architecture and technical roadmap for Trading API customer access and applications
  • Design explicit, auditable, server-enforced access models for complex account structures
  • Lead delivery of customer applications with real-time market data, order entry, and trading views
  • Drive the migration from legacy monolith endpoints to a dedicated application backend
  • Set security standards for credentials, MFA, passkeys, OAuth, rate limiting, and validation
  • Set standards for feature flags, staged rollouts, testing, and observability
  • Partner with product, design, compliance, security, operations, and engineering teams
  • Lead design reviews and mentor engineers
  • Act as a technical escalation point for production issues and drive prevention

Benefits

  • Stock options
  • Health benefits
  • One-time USD 500 home-office setup
  • USD 150 monthly stipend via a Brex Card