{"id":88784,"title":"Senior Backend / Platform Engineer","company":"Causa Prima","city":"München","region":"Bayern","location":"Munich, Munich, Bavaria, Germany","work_model":"onsite","employment_type":"full_time","employment":["full_time"],"roles":["backend","devops"],"visa":"not_mentioned","relocation":"not_mentioned","posted_at":"2026-05-04T13:13:10.054000+00:00","tools":["Python","TypeScript","PostgreSQL","Apache Kafka","SOC","LLM"],"seniority":"senior","years_experience_min":3,"german_requirement":"not_mentioned","german_level":"unspecified","english_requirement":"required","english_level":"unspecified","team_language":"unknown","confidence":0.4,"method":"rules","language_badge":"Not stated","language_evidence":null,"requirements_snippet":"3+ years experience with Python and/or TypeScript in production. 5+ years designing backend platforms for production systems. Strong systems design skills — this is the primary requirement. You think in boundaries, contracts, …","url":"https://jobs.ashbyhq.com/causaprima/b06399e5-b2df-4cb6-ad78-28a9fac7a6db","source":"ashby","agency":null,"description_text":"You'll own the platform our agents run on — event-driven architecture, data pipelines, integrations with customer accounting systems, and the infrastructure that makes everything reliable, auditable, and fast.\nWhat you'll do\n• Event store — Append-only PostgreSQL with tamper-evident hash chaining, real-time event distribution, agent replay and recovery, schema versioning.\n• Cryptographic signature infrastructure — Key management, signature verification on all agent events, approval chains for external actions.\n• Workflow Constraint Engine — The gateway that verifies authorization before any external action (email, payment, API call) proceeds.\n• PII Vault & GDPR compliance — Isolated, encrypted storage for personal data. Right to erasure. Data residency per region.\n• Multi-tenancy — Row-level security, tenant isolation across all data stores, tenant-scoped LLM API keys.\n• Authorization (Cerbos) — Attribute-based access control for agents and humans. Deterministic policy evaluation — LLMs never make auth decisions.\n• MCP security layer — Authentication, capability-based scoping per partner, and rate limiting for the Model Context Protocol endpoint.\n• Database architecture — PostgreSQL schema design, indexing strategy, performance tuning, read replica topology.\n\nWhat we're looking for\n• 3+ years experience with Python and/or TypeScript in production.\n• 5+ years designing backend platforms for production systems.\n• Strong systems design skills — this is the primary requirement. You think in boundaries, contracts, failure modes, and scaling characteristics.\n• Deep PostgreSQL knowledge — RLS, indexing tradeoffs, event sourcing patterns, schema evolution.\n• Strong application security architecture skills: encryption models, key management, auth patterns.\n• Experience with policy-as-code authorization (Cerbos, OPA, Cedar, or similar).\n• Strong code review skills for security-sensitive AI-generated code.\n• Nice to have:\n• Cryptographic primitives in production (digital signatures, hash chaining, application-layer encryption).\n• Event streaming platforms (Kurrent, Redpanda, Kafka).\n• SOC 2 or GDPR compliance engineering.\n• Fintech or regulated-environment background.","responsibilities_text":"• Event store — Append-only PostgreSQL with tamper-evident hash chaining, real-time event distribution, agent replay and recovery, schema versioning.\n• Cryptographic signature infrastructure — Key management, signature verification on all agent events, approval chains for external actions.\n• Workflow Constraint Engine — The gateway that verifies authorization before any external action (email, payment, API call) proceeds.\n• PII Vault & GDPR compliance — Isolated, encrypted storage for personal data. Right to erasure. Data residency per region.\n• Multi-tenancy — Row-level security, tenant isolation across all data stores, tenant-scoped LLM API keys.\n• Authorization (Cerbos) — Attribute-based access control for agents and humans. Deterministic policy evaluation — LLMs never make auth decisions.\n• MCP security layer — Authentication, capability-based scoping per partner, and rate limiting for the Model Context Protocol endpoint.\n• Database architecture — PostgreSQL schema design, indexing strategy, performance tuning, read replica topology.","requirements_text":"• 3+ years experience with Python and/or TypeScript in production.\n• 5+ years designing backend platforms for production systems.\n• Strong systems design skills — this is the primary requirement. You think in boundaries, contracts, failure modes, and scaling characteristics.\n• Deep PostgreSQL knowledge — RLS, indexing tradeoffs, event sourcing patterns, schema evolution.\n• Strong application security architecture skills: encryption models, key management, auth patterns.\n• Experience with policy-as-code authorization (Cerbos, OPA, Cedar, or similar).\n• Strong code review skills for security-sensitive AI-generated code.\n• Cryptographic primitives in production (digital signatures, hash chaining, application-layer encryption).\n• Event streaming platforms (Kurrent, Redpanda, Kafka).\n• SOC 2 or GDPR compliance engineering.\n• Fintech or regulated-environment background.","status":"open","duplicate_of":null,"first_seen":"2026-11-04T01:51:11.679209+00:00","responsibilities_summary":null,"requirements_summary":null,"all_tools":["Python","TypeScript","PostgreSQL","Apache Kafka","SOC","LLM"],"posting_language":"en","evidence":[],"years_experience_max":null,"mobility_evidence":[],"model_version":"rules-8","english_badge":"English required","company_id":3503}