Posted 12h ago
Node.js API and JWT Authentication Intern
Posted 2d agoBe an early applicant
What this role pays, in context
This listing pays 9% above the median for Full Stack Developer roles in India, which sits at ₹14K a month.
25th pct ₹12.8K75th pct ₹16K
Median of 12 other live Full Stack Developer listings in India on this board that state pay. Roles that do not disclose a salary are excluded rather than counted as zero.
Why we take this seriously
Authentication is the one part of a product that is only noticed when it fails. MailerMen has three kinds of user, candidate, employer and internal admin, and the rules about who can see what have accumulated in places they should never have landed. Six months on this team means untangling that.
What lands on your plate
You will move our JWT handling onto short lived access tokens with rotating refresh tokens, store those refresh tokens hashed so a database leak is not a session leak, and add per device revocation so a user can log out everywhere. Next comes a middleware based role and permission layer to replace the scattered conditionals in our Express routes, then email verification and password reset flows that survive someone clicking the link twice.
Support and pace
You will not be handed security work and left alone with it. Every change goes through design review before you write code and a second pair of eyes before it merges. You will be in our Delhi NCR office on a hybrid schedule, and you should finish these six months understanding auth better than most engineers with a couple of years behind them.
Responsibilities
- Implement short lived JWT access tokens with rotating refresh tokens
- Store refresh tokens hashed and add per device session revocation
- Replace inline permission checks with a role based Express middleware layer
- Build email verification and password reset flows that handle repeat clicks safely
- Add rate limiting and account lockout on login and reset endpoints
- Write integration tests covering every authentication path including the failures
- Take each design through review before implementation
Requirements
- Final year student or recent graduate, no prior professional experience expected
- You have built at least one Node.js or Express project with a login of some kind
- You understand the difference between hashing and encryption
- Able to work hybrid from our Delhi NCR office
- A careful reader who checks documentation rather than guessing
Skills
Benefits
- Six months on security critical code with full review support
- Design review practice that most internships never offer
- Mentorship from the backend lead throughout
- Certificate, written reference and a clear conversion path
- Flexible hours around final semester exams