Consilient Labs
Backend Developer (Secure REST API Gateway & AuthZ)
San Francisco, CA
- Secure login using OAuth 2.0 (AWS Cognito) so users authenticate safely without exposing raw credentials to the application.
- Token validation with JWKS-backed JWT verification, including signature + expiration checks (with JWKS fetching/caching to keep validation fast and reliable).
- Authorization enforcement using configurable role/group permissions (admin/member/viewer) mapped to specific REST API endpoints and HTTP methods (read/write/delete style actions).
- Implemented a reverse-proxy gatekeeper pattern so requests are routed only after the user is authenticated and cleared by the access rules.
- Designed role-permission configuration that can be updated via scripts and YAML/JSON rule sources, enabling “no downtime” style policy updates.
- Added automated testing for correctness and reliability: unit tests for login/role checks plus end-to-end speed tests for request responsiveness.
- Built CI/CD automation to run tests + build + deployment workflows, reducing deployment errors and improving operational stability.
Built a permissioned REST API access layer that keeps authentication and authorization consistent across services. The system verifies OAuth2 tokens, validates JWTs against Cognito JWKS, and enforces fine-grained, role-based access rules at the endpoint/method level through a configurable gatekeeper approach.