Staff Fullstack Engineer
Alpaca · Remote - Americas or EU
About this role
**Staff Full Stack Engineer — Alpaca** **About Alpaca** Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, and 24/5 trading. We serve hundreds of financial institutions across 40 countries with institutional-grade APIs—supporting broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges (10M+ brokerage accounts). **About the Role** Alpaca is seeking a **Staff Full Stack Engineer** to lead the technical direction of the team building **Alpaca’s Trading API** product. This team owns the customer experience end-to-end—how customers access the platform, how accounts are structured and secured, and the applications they use to trade. You’ll work across the stack, including: - Customer-facing trading applications - Identity, account, and permission systems - Integrations for partner apps and AI agents - Customer-facing trading features across the API This is a **high-trust domain** where defects can expose customer data, enable unauthorized trades/money movement, or lock customers out at critical moments. You’ll help design and ship secure authorization models and the interfaces built on top of them. You will **not manage people directly**—you’ll lead through architecture, code, design reviews, and mentorship while remaining a principal contributor. --- **Key Responsibilities** - Own the architecture and technical roadmap for how customers access and use Trading API (identity/authentication, authorization/permissions, account & sub-account models, partner OAuth, customer-facing trading & account-management apps). - Design access models for complex account structures (multi-user accounts, sub-accounts, entity/advisor accounts, delegated API/agent access) with explicit, auditable, server-enforced permissions. - Lead technical delivery of next-generation Trading API customer applications (real-time market data, order entry, positions & order views). - Drive migration from legacy monolith endpoints to a dedicated application backend with clear API contracts between customer apps and platform services (trading, accounts, transfers, ledger, market data). - Set the security bar for customer-facing systems (session/credential handling, MFA & passkeys, OAuth flows, rate limiting, input validation, and fast/durable responses to security findings). - Set standards for safe delivery (feature flags, staged rollouts, preview environments, testing strategy, production observability). - Partner with Product, Design, Compliance, Security, Brokerage Operations, and adjacent engineering teams to define behavior and integration boundaries. - Lead design reviews, mentor senior/mid-level engineers, and raise the engineering bar as the team grows. - Serve as a technical escalation point for production issues and drive durable prevention after incidents. --- **Qualifications** - **8+ years** of software engineering experience with meaningful time on both backend services and customer-facing applications (scope/ownership matters more than exact years). - Proven ownership of production systems where defects could expose customer data, grant wrong access, or cause financial loss. - Deep experience with **authentication & authorization** (OAuth 2.0, OpenID Connect, session/token management, MFA, role/attribute-based permissions). - Strong backend expertise in **Go** (or deep experience in Java/Kotlin/C#/Rust with willingness to work primarily in Go).
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.