Senior Full Stack Engineer; GraphQL Focus

Join to apply for the Senior Full Stack Engineer (Graph

QL Focus) role at Amplitude

Join to apply for the Senior Full Stack Engineer (Graph

QL Focus) role at Amplitude

Amplitude is the leading digital analytics platform that helps companies unlock the power of their products. Over 4,000 customers, including Atlassian, NBCUniversal, Under Armour, Shopify, and Jersey Mike’s, rely on Amplitude to gain self-service visibility into the entire customer journey. Amplitude guides companies every step of the way as they capture data they can trust, uncover clear insights about customer behavior, and take faster action.

When teams understand how people are using their products, they can deliver better product experiences that drive growth. Amplitude is the best-in-class analytics solution for product, data, and marketing teams, ranked #1 in multiple categories in G2’s Spring 2025 Report. Learn how to optimize your digital products and business at

As an organization, we approach challenges with humility, take ownership of our contributions, and embrace a growth mindset that pushes us to constantly improve ourselves, each other, and the value we bring to customers and partners.

Amplitude’s Commitment to Diversity Equity & Inclusion (DEI): Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions. We strive to create an environment of inclusion—one focused on psychological safety, empathy, and human connection—that will allow employees of all backgrounds to thrive.

About

The Role

We're looking for a Senior Full-Stack Engineer with deep experience in Graph

QL development and a strong understanding of API security best practices. You’ll be responsible for designing, building, and securing Graph

QL services that power critical features in our platform.

You'll collaborate closely with product, frontend, and backend teams to ensure Graph

QL APIs are not only performant and scalable, but also secure by design, incorporating principles such as role-based access control (RBAC), audit logging, input validation, and resolver-level authorization.

You’ll play a key role in evolving our Graph

QL infrastructure and setting the standard for secure and maintainable API development across the engineering org.



Key Responsibilities

• Design, develop, and maintain robust and scalable Graph
  
  QL APIs for core features and services
• Implement security controls within the Graph
  
  QL layer, including:
• RBAC or ABAC models enforced at the resolver level
• Query complexity and depth limiting to prevent DoS
• Auditable logging for sensitive Graph
  
  QL operations
• Input validation and type safety for all queries/mutations
• Work closely with backend and frontend engineers to ensure Graph
  
  QL usage patterns are efficient and secure
• Help define best practices for Graph
  
  QL schema design, versioning, and access control
• Identify and remediate security issues in Graph
  
  QL endpoints proactively, collaborating with application security engineers when necessary
• Partner with engineering to identify and mitigate risks in architecture, design, and implementation stages
• Identify opportunities to fix systemic gaps, reduce recurring pain points, and avoid reactive “whack-a-mole” cycles
• Participate in an on-call rotation to resolve critical/high-risk security issues as well as respond to security incidents with urgency and clarity
• Stay up to date with emerging threats and defensive patterns in Graph
  
  QL security

• 4+ years of experience as a software engineer, with at least 2+ years working with Graph
  
  QL in production systems
• Proven experience building and maintaining secure, large-scale APIs, particularly using Graph
  
  QL, Type Script, Python, or Java
• Strong understanding of authentication and authorization, especially as it applies to API design (e.g., JWT, OAuth2, resolver-level access control)
• Familiarity with audit logging, rate limiting, and schema hardening
• Comfortable collaborating cross-functionally to align API security with product needs and developer experience
• Willingness to go above and…