Senior Backend Engineer (TypeScript / Nest.js / AWS)

Full-time B2B | Remote EU / Poland | US Insurance Context | Start October 2026

We are an AI-native data and technology partner for private capital and healthcare. Founded in 2010 and headquartered in Warsaw, we work with leading PE firms, VC funds, and healthcare organizations to build proprietary data infrastructure, deploy AI solutions, and drive AI-native transformation.

Our clients manage a cumulative $1.2T+ in assets. Our average engagement runs five years. Our NPS sits above 80. We don't need to claim credibility - we can show it.

We've also done to ourselves what we now do for clients. We've restructured our own company around AI - tools, policies, roles, delivery models. This isn't a pitch. It's a playbook we've already run, and we're hiring the engineers who will run it for others.

The Opportunity

Our client is a US insurance carrier building a platform business on top of its own paper: a set of operational services it offers to the specialist insurers (MGAs) it underwrites for. The first service is claims - the carrier is becoming the claims administrator for its partners, running their claims in a shared instance of a modern claims platform. That platform only knows how to talk to one policy system, and every partner has their own. The missing piece is a multi-tenant policy gateway , and it is the blocking dependency for the first partner's go-live at the start of 2027.

You'll be the engineer who builds it. You'll work in a small pod with our tech lead and directly with the client's staff engineer, engineering manager and claims domain expert, in their codebase and on their AWS. We already run the data platform for the client's first partner, so you join a team that knows both ends of the integration. The environment is fast-moving and the spec is a PRD, not a design - we're expected to propose, decide and deliver, not wait for tickets.

What you'll be doing

The core of the work is a greenfield Nest.js / TypeScript service that sits between the claims platform and N external policy systems: it authenticates the incoming webhook, resolves which tenant a request belongs to, fetches the policy (live API call or from a policy store fed by daily file extracts), maps it through a canonical policy model and returns it in the claims platform's schema - with hard data isolation between tenants, because a misrouted policy is a cross-tenant data leak. Around that core you'll define the canonical model, drive the first partner's field-mapping through business review, build the observability and the onboarding runbook that turns tenant #2 into a configuration exercise, and take the whole thing through security review and launch readiness. Expect to spend real time reading the client's existing single-tenant precedent and their internal framework conventions before you write your own.

Your Responsibilities

• Design and build the gateway service on the client's Nest.js-based internal framework and AWS, proposing infrastructure changes as Terraform PRs for their DevOps team to apply
• Implement the webhook contract: HMAC authentication in application code with secrets in Vault, IP allowlisting, ISO-8601 date handling, policy-version-at-date-of-loss selection
• Build the tenant router and registry with composite resolution and well-defined failure behaviour
• Build the source adapter framework - a common interface with per-source auth, timeouts, retries with backoff and circuit breaking so one slow tenant source cannot degrade the webhook for others
• Build the batch path: SFTP landing zones per tenant, file validation and quarantine, idempotent loads into a PostgreSQL policy store with snapshot retention and freshness monitoring
• Define the canonical policy model and the shared canonical-to-target mapper; take the first partner's mapping tables (coverage codes, deductible types, roles) through review with the client's claims expert
• Ship per-tenant observability (structured logs, metrics, Grafana dashboard, freshness and error-rate alerts) and an onboarding runbook
• Write isolation negative tests as a release gate, run failure-mode drills and end-to-end walkthroughs in the client's sandbox, and support their security review
• Collaborate directly with client engineers and domain experts across time zones, largely async. Some availability in PT timezone would be required - not more than once a week.

Requirements

• 5+ years backend engineering with strong, recent TypeScript in production; Nest.js or a comparable DI-based Node framework
• Experience building integration services or API gateways : webhooks, signature-based auth, retries, idempotency, circuit breakers, third-party API adapters
• PostgreSQL and relational data modelling; comfortable designing schemas and writing migrations
• Experience with multi-tenant systems or another domain where data isolation is a hard requirement, and the instinct to test it explicitly
• Hands-on AWS (ECS/EKS or Lambda, SQS, S3, IAM, Secrets Manager or Vault); able to read and propose Terraform even if someone else applies it
• AI-native way of working: you use tools like Claude Code and Codex as a core part of how you deliver, and you still read every line that ships
• Self-directed: able to scope ambiguous requests, write a short design note, ask the client the right question early, and deliver without heavy oversight
• Fluent English and clear, proactive communication with technical and non-technical stakeholders

Nice to Have

• Insurance domain exposure - policy administration systems, claims, FNOL, coverages and deductibles, MGA/carrier structures
• Batch or file-based integrations (SFTP ingestion, schema validation, quarantine patterns) or data-mapping heavy work
• Regulated-data experience: PII/PHI handling, HIPAA or SOC 2 controls, audit logging
• Grafana / OpenTelemetry-style observability
• Prior consulting or client-facing delivery

Benefits

• Unrestricted AI Stack & Premium Gear: Fully paid licenses for Cursor, Claude Pro, etc.
• Total Autonomy (Remote-First): No filler meetings, no Jira bloat, no micromanagement. You own the workflow. We care about shipped systems in production, not logged hours.
• Direct Impact: You'll work face-to-face with our CEO, CTO & VPs and directly with client leadership.
• Frontier Engineering Culture: Build alongside elite engineers who are shipping systems that drive real business decisions. Backed by continuous growth and a strong knowledge-sharing culture (check our YouTube).

Sounds like a perfect place for you? Don't hesitate to click apply and submit your application today!

The controller of the data contained in your application is Sunscrapers Sp. z o.o., operating under the Vecten brand, ul. Tadeusza Czackiego 15/17, 00-043 Warsaw, Poland, NIP 1182116268. We process your data in order to assess your application for the role you are applying for. You have the right to access, rectify, erase and restrict the processing of your data, and the right to lodge a complaint with the President of the Polish Data Protection Authority. For data protection matters write to dpo@vecten.com. Full information, including the legal bases, recipients and retention periods, is set out in our Privacy Policy

In accordance with the requirement set out in Article 24(6) of the Polish Act of 14 June 2024 on the Protection of Whistleblowers (Journal of Laws of 2024, item 928, as amended), we hereby inform you that SUNSCRAPERS Spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw at ul. Tadeusza Czackiego 15/17, 00-043 Warsaw, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0000591597, NIP (Tax ID) 1182116268, REGON 36322622000000, has an internal reporting procedure in place. If you would like to read it, please write to us at: hr@vecten.com.