Backend Engineer
Production-ready backend development with modern technologies, best practices, and proven patterns.
When to Use
- Designing RESTful, GraphQL, or gRPC APIs
- Building authentication/authorization systems
- Optimizing database queries and schemas
- Implementing caching and performance optimization
- OWASP Top 10 security mitigation
- Designing scalable microservices
- Testing strategies (unit, integration, E2E)
- CI/CD pipelines and deployment
- Monitoring and debugging production systems
Technology Selection Guide
Languages: Node.js/TypeScript (full-stack), Python (data/ML), Go (concurrency), Rust (performance)
Frameworks: NestJS, FastAPI, Django, Express, Gin
Databases: PostgreSQL (ACID), MongoDB (flexible schema), Redis (caching)
APIs: REST (simple), GraphQL (flexible), gRPC (performance)
See: references/technologies.md for detailed comparisons
Reference Navigation
Core Technologies:
references/technologies.md - Languages, frameworks, databases, message queues, ORMsreferences/api-design.md - REST, GraphQL, gRPC patterns and best practices
Security & Authentication:
references/security.md - OWASP Top 10, security best practices, input validationreferences/authentication.md - OAuth 2.1, JWT, RBAC, MFA, session management
Performance & Architecture:
references/performance.md - Caching, query optimization, load balancing, scalingreferences/architecture.md - Microservices, event-driven, CQRS, saga patterns
Quality & Operations:
references/testing.md - Testing strategies, frameworks, tools, CI/CD testingreferences/devops.md - Docker, Kubernetes, deployment strategies, monitoringreferences/implementation-workflow.md - Unified implementation workflow
Key Best Practices
Security: Argon2id passwords, parameterized queries, OAuth 2.1 + PKCE, rate limiting, security headers
Performance: Redis caching (90% DB load reduction), database indexing, CDN, connection pooling
Testing: 70-20-10 pyramid (unit-integration-E2E), contract testing for microservices
DevOps: Blue-green/canary deployments, feature flags, Kubernetes, Prometheus/Grafana monitoring, OpenTelemetry tracing
Quick Decision Matrix
| Need |
Choose |
| Fast development |
Node.js + NestJS |
| Data/ML integration |
Python + FastAPI |
| High concurrency |
Go + Gin |
| Max performance |
Rust + Axum |
| ACID transactions |
PostgreSQL |
| Flexible schema |
MongoDB |
| Caching |
Redis |
| Internal services |
gRPC |
| Public APIs |
GraphQL/REST |
| Real-time events |
Kafka |
Implementation Checklist
API: Choose style → Design schema → Validate input → Add auth → Rate limiting → Documentation → Error handling
Database: Choose DB → Design schema → Create indexes → Connection pooling → Migration strategy → Backup/restore → Test performance
Security: OWASP Top 10 → Parameterized queries → OAuth 2.1 + JWT → Security headers → Rate limiting → Input validation → Argon2id passwords
Testing: Unit 70% → Integration 20% → E2E 10% → Load tests → Migration tests → Contract tests (microservices)
Deployment: Docker → CI/CD → Blue-green/canary → Feature flags → Monitoring → Logging → Health checks
Implementation Workflow
When implementing backend code, follow unified implementation workflow patterns. See references/implementation-workflow.md for details.
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: backend-engineer-23description: Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems. Use when this capability is needed.4---56# Backend Engineer78Production-ready backend development with modern technologies, best practices, and proven patterns.910## When to Use1112- Designing RESTful, GraphQL, or gRPC APIs13- Building authentication/authorization systems14- Optimizing database queries and schemas15- Implementing caching and performance optimization16- OWASP Top 10 security mitigation17- Designing scalable microservices18- Testing strategies (unit, integration, E2E)19- CI/CD pipelines and deployment20- Monitoring and debugging production systems2122## Technology Selection Guide2324**Languages:** Node.js/TypeScript (full-stack), Python (data/ML), Go (concurrency), Rust (performance)25**Frameworks:** NestJS, FastAPI, Django, Express, Gin26**Databases:** PostgreSQL (ACID), MongoDB (flexible schema), Redis (caching)27**APIs:** REST (simple), GraphQL (flexible), gRPC (performance)2829See: `references/technologies.md` for detailed comparisons3031## Reference Navigation3233**Core Technologies:**34- `references/technologies.md` - Languages, frameworks, databases, message queues, ORMs35- `references/api-design.md` - REST, GraphQL, gRPC patterns and best practices3637**Security & Authentication:**38- `references/security.md` - OWASP Top 10, security best practices, input validation39- `references/authentication.md` - OAuth 2.1, JWT, RBAC, MFA, session management4041**Performance & Architecture:**42- `references/performance.md` - Caching, query optimization, load balancing, scaling43- `references/architecture.md` - Microservices, event-driven, CQRS, saga patterns4445**Quality & Operations:**46- `references/testing.md` - Testing strategies, frameworks, tools, CI/CD testing47- `references/devops.md` - Docker, Kubernetes, deployment strategies, monitoring48- `references/implementation-workflow.md` - Unified implementation workflow4950## Key Best Practices5152**Security:** Argon2id passwords, parameterized queries, OAuth 2.1 + PKCE, rate limiting, security headers5354**Performance:** Redis caching (90% DB load reduction), database indexing, CDN, connection pooling5556**Testing:** 70-20-10 pyramid (unit-integration-E2E), contract testing for microservices5758**DevOps:** Blue-green/canary deployments, feature flags, Kubernetes, Prometheus/Grafana monitoring, OpenTelemetry tracing5960## Quick Decision Matrix6162| Need | Choose |63|------|--------|64| Fast development | Node.js + NestJS |65| Data/ML integration | Python + FastAPI |66| High concurrency | Go + Gin |67| Max performance | Rust + Axum |68| ACID transactions | PostgreSQL |69| Flexible schema | MongoDB |70| Caching | Redis |71| Internal services | gRPC |72| Public APIs | GraphQL/REST |73| Real-time events | Kafka |7475## Implementation Checklist7677**API:** Choose style → Design schema → Validate input → Add auth → Rate limiting → Documentation → Error handling7879**Database:** Choose DB → Design schema → Create indexes → Connection pooling → Migration strategy → Backup/restore → Test performance8081**Security:** OWASP Top 10 → Parameterized queries → OAuth 2.1 + JWT → Security headers → Rate limiting → Input validation → Argon2id passwords8283**Testing:** Unit 70% → Integration 20% → E2E 10% → Load tests → Migration tests → Contract tests (microservices)8485**Deployment:** Docker → CI/CD → Blue-green/canary → Feature flags → Monitoring → Logging → Health checks8687## Implementation Workflow8889When implementing backend code, follow unified implementation workflow patterns. See `references/implementation-workflow.md` for details.9091---92> Converted and distributed by [TomeVault](https://tomevault.io/claim/siviter-xyz) — claim your Tome and manage your conversions.93<!-- tomevault:4.0:skill_md:2026-04-11 -->
tomevault-io