Frontend Software Engineer (Web & UX)

Quick Facts

• Role: Frontend Software Engineer (Web & UX)
• Experience: 10–15 years

Description

Build and deliver modern frontend product experiences with strong UX and design collaboration. Implement SPA/SSR solutions in JavaScript and strict TypeScript, integrate APIs with strict contracts and runtime validation, and support real-time streaming and observability. Apply enterprise security practices for identity, authorization, secure state, and compliant handling of sensitive data.

Role Description

• Translate customer requests into persona-driven Critical User Journeys (CUJs) and design wireframes/prototypes
• Choose appropriate SPA/SSR frameworks and build pipelines for efficient delivery
• Integrate APIs with component/service abstractions and strict contract adherence
• Add real-time updates (SSE/WebSockets) and instrument distributed tracing, CUJ metrics, and structured logging
• Implement enterprise identity and access control (SSO/auth), secure token/session lifecycles, and RBAC/ABAC
• Architect secure, predictable client/server state and enforce strong web security defenses

Requirements

• 10–15 years of frontend engineering experience
• Strong proficiency in JavaScript and strict TypeScript
• Experience selecting and building with SPA/SSR frameworks (React, Angular/Vue, Alpine, HTMX)
• Command of modern web build toolchains (bundling, transpilation, minification, tree-shaking, lean container builds)
• Experience integrating APIs with REST/OpenAPI and/or gRPC, including runtime schema validation
• Experience with SSE/WebSockets
• Experience with distributed tracing, CUJ metrics, and structured logging without exposing PII/PHI
• Experience integrating enterprise SSO/auth flows: OIDC, OAuth 2.0, SAML, IAP
• Experience implementing secure session/token lifecycles (HttpOnly/Secure cookies, BFF auth patterns)
• Enforce RBAC/ABAC across routes and views
• Secure state management including caching/concurrency and request cancellation
• Web security and compliant data handling (XSS, CSRF, CORS, CSP; sanitize untrusted/AI/LLM-generated content; secret hygiene)

Benefits

Not specified in the provided text.