Backend Developer Roadmap
Learn server-side programming, databases, APIs, authentication, and deployment to build scalable, secure backend systems.
Prerequisites
- Basic computer skills
- A text editor installed
- Browser (Chrome recommended)
Recommended Tools
Your Progress
0 of 23 topics completed
Foundations
1.How the Internet Works
Understand HTTP, DNS, client-server model, and how requests travel across the internet.
What you'll learn
- HTTP/HTTPS protocol and request/response cycle
- DNS resolution and domain names
- Client-server architecture
- TCP/IP basics and ports
- Status codes (2xx, 3xx, 4xx, 5xx)
- Headers, cookies, and caching
HTTP Request Logger
Build a simple script that makes HTTP requests to various APIs and logs the status codes, headers, and response times.
2.JavaScript & Node.js
Master JavaScript fundamentals and Node.js runtime for server-side development.
What you'll learn
- Variables, data types, and operators
- Functions, closures, and scope
- Async programming: callbacks, Promises, async/await
- ES6+ features (destructuring, spread, modules)
- Node.js runtime and event loop
- npm/pnpm package management
- File system and path modules
- Environment variables and process management
Resources
CLI Task Manager
Build a command-line task manager that stores tasks in a JSON file. Support add, list, complete, and delete operations.
3.Python for Backend
Learn Python fundamentals and its ecosystem for building server-side applications.
What you'll learn
- Python syntax, data types, and control flow
- Functions, classes, and OOP
- Modules, packages, and virtual environments
- File I/O and error handling
- List comprehensions and generators
- Type hints and modern Python (3.10+)
- pip and dependency management
- Working with JSON and environment variables
Resources
CLI Task Manager
Build a command-line task manager that stores tasks in a JSON file. Support add, list, complete, and delete operations.
4.Java for Backend
Learn Java fundamentals and its strong typing system for enterprise backend development.
What you'll learn
- Java syntax, primitives, and operators
- OOP: classes, inheritance, interfaces, polymorphism
- Collections framework (List, Map, Set)
- Exception handling and I/O streams
- Generics and lambda expressions
- Maven/Gradle build tools
- Java modules and packages
- Multithreading basics
Resources
CLI Task Manager
Build a command-line task manager that stores tasks in a file. Support add, list, complete, and delete operations.
5.Git & Terminal
Master version control and command-line operations essential for backend development.
What you'll learn
- Terminal navigation and file operations
- Git basics (init, add, commit, branch, merge)
- Remote repos, pull requests, code review
- Git workflow (feature branches, rebasing)
- SSH keys and authentication
- Shell scripting basics
Resources
Dotfiles Repository
Create a Git repo with your terminal config, aliases, and a setup script that automates your dev environment setup.
Dotfiles Repository
Create a Git repo with your terminal config, aliases, and a setup script that automates your dev environment setup.
Build this before moving to the next stage
APIs & Servers
6.Express.js Fundamentals
Build web servers and APIs using Express.js, the most popular Node.js framework.
What you'll learn
- Setting up an Express server
- Routing (GET, POST, PUT, DELETE)
- Request and response objects
- Middleware (built-in, third-party, custom)
- Error handling middleware
- Serving static files
- Template engines (EJS/Pug basics)
- Express Router for modular routes
Resources
Bookstore REST API
Build a CRUD API for a bookstore with routes for books, authors, and categories. Use Express Router for modularity.
7.Django / FastAPI
Build robust APIs with Python — Django REST Framework for full-featured apps or FastAPI for modern async APIs.
What you'll learn
- Django project structure and settings
- Django REST Framework (serializers, viewsets)
- URL routing and middleware
- FastAPI with Pydantic models and type hints
- Async request handling
- Auto-generated API documentation
- Dependency injection in FastAPI
- File uploads and background tasks
Resources
Bookstore REST API
Build a CRUD API for a bookstore with endpoints for books, authors, and categories using Django REST Framework or FastAPI.
8.Spring Boot
Build production-grade APIs with Java Spring Boot — the enterprise standard for backend development.
What you'll learn
- Spring Boot project setup (Spring Initializr)
- REST controllers and request mapping
- Dependency injection and IoC container
- Spring Data JPA for database access
- Validation and error handling
- Spring Security basics
- Application properties and profiles
- Building and packaging with Maven/Gradle
Resources
Bookstore REST API
Build a CRUD API for a bookstore with endpoints for books, authors, and categories using Spring Boot and Spring Data JPA.
9.REST API Design
Learn principles of designing clean, consistent, and scalable REST APIs.
What you'll learn
- REST constraints and principles
- Resource naming conventions
- HTTP methods and their semantics
- Status codes and error responses
- Pagination, filtering, and sorting
- API versioning strategies
- Request validation and sanitization
- CORS and preflight requests
Resources
Blog API with Pagination
Design and build a blog API with posts, comments, and tags. Implement pagination, filtering by tag, and proper error responses.
10.API Testing & Documentation
Test your APIs thoroughly and create developer-friendly documentation.
What you'll learn
- Postman/Insomnia for manual testing
- Writing automated tests with Jest/Vitest + Supertest
- Unit tests vs integration tests
- OpenAPI/Swagger specification
- Auto-generating API docs
- Environment variables and test configurations
Resources
Test Suite for Bookstore API
Write comprehensive tests for your Bookstore API using Jest and Supertest. Cover all CRUD operations and edge cases. Generate Swagger docs.
Test Suite for Bookstore API
Write comprehensive tests for your Bookstore API using Jest and Supertest. Cover all CRUD operations and edge cases. Generate Swagger docs.
Build this before moving to the next stage
Databases
11.SQL & PostgreSQL
Learn relational database design, SQL queries, and PostgreSQL.
What you'll learn
- Relational database concepts and normalization
- CREATE, INSERT, UPDATE, DELETE
- SELECT with WHERE, JOIN, GROUP BY, ORDER BY
- Indexes and query performance
- Transactions and ACID properties
- Database schemas and migrations
- PostgreSQL-specific features (JSONB, arrays, CTEs)
- Connection pooling
Resources
E-commerce Database Schema
Design and implement a normalized database for an e-commerce store with users, products, orders, and reviews. Write complex queries for reporting.
12.MongoDB & NoSQL
Learn document-based databases and when to use NoSQL over SQL.
What you'll learn
- Document model vs relational model
- CRUD operations in MongoDB
- Schema design patterns (embedding vs referencing)
- Indexing and aggregation pipeline
- Mongoose ODM for Node.js
- When to use SQL vs NoSQL
- MongoDB Atlas (cloud setup)
Resources
Social Media Data Layer
Build the data layer for a social media app with MongoDB. Model users, posts, comments, likes, and followers with proper indexing.
13.Prisma ORM
Use Prisma for type-safe database access, migrations, and schema management.
What you'll learn
- Prisma schema language
- Data modeling with relations
- Migrations (create, apply, rollback)
- Prisma Client for type-safe queries
- Filtering, pagination, and transactions
- Seeding databases
- Prisma Studio for visual editing
Resources
Task Management API with Prisma
Rebuild your task API using Prisma + PostgreSQL. Implement user-owned task lists, priorities, due dates, and database migrations.
14.Redis & Caching
Learn caching strategies and Redis for high-performance data access.
What you'll learn
- Why caching matters (latency, throughput)
- Redis data structures (strings, hashes, lists, sets)
- Cache-aside, write-through, write-behind patterns
- TTL and cache invalidation strategies
- Session storage with Redis
- Rate limiting with Redis
- Pub/Sub messaging basics
Resources
Cached API with Rate Limiting
Add Redis caching to your existing API. Cache expensive queries, implement rate limiting (100 req/min), and add session-based auth.
Cached API with Rate Limiting
Add Redis caching to your existing API. Cache expensive queries, implement rate limiting (100 req/min), and add session-based auth.
Build this before moving to the next stage
Authentication & Security
15.Authentication (JWT & Sessions)
Implement secure user authentication with JSON Web Tokens and session-based auth.
What you'll learn
- Password hashing with bcrypt
- JWT structure (header, payload, signature)
- Access tokens vs refresh tokens
- Session-based auth with cookies
- JWT vs sessions — tradeoffs
- Token storage and rotation
- Logout and token invalidation
- Multi-factor authentication concepts
Resources
Auth System with JWT
Build a complete auth system: signup, login, logout, refresh tokens, password reset via email, and protected routes.
16.OAuth 2.0 & Social Login
Implement third-party authentication with Google, GitHub, and other providers.
What you'll learn
- OAuth 2.0 flow (authorization code grant)
- OpenID Connect basics
- Google OAuth integration
- GitHub OAuth integration
- Managing user accounts linked to providers
- Scopes and permissions
Resources
Social Login Integration
Add Google and GitHub login to your auth system. Link social accounts to existing users and handle edge cases.
17.Authorization & RBAC
Implement role-based access control and fine-grained permissions.
What you'll learn
- Authentication vs Authorization
- Role-based access control (RBAC)
- Permission-based access control
- Middleware for route protection
- Resource ownership checks
- Admin panels and user management
- API key management
Resources
Multi-Role CMS Backend
Build a CMS backend with Admin, Editor, and Viewer roles. Admins manage users, Editors create/edit content, Viewers can only read.
18.Security Best Practices
Protect your application against OWASP Top 10 vulnerabilities.
What you'll learn
- SQL injection and prevention
- XSS (Cross-Site Scripting) protection
- CSRF protection
- Input validation and sanitization
- Rate limiting and brute force protection
- HTTPS and TLS certificates
- Security headers (Helmet.js)
- Dependency vulnerability scanning
- Environment variable management
Resources
Security Audit & Hardening
Take your existing API and harden it: add Helmet, rate limiting, input validation with Zod, CORS config, and fix any SQL injection vectors.
Security Audit & Hardening
Take your existing API and harden it: add Helmet, rate limiting, input validation with Zod, CORS config, and fix any SQL injection vectors.
Build this before moving to the next stage
Advanced & Deployment
19.WebSockets & Real-time
Build real-time features with WebSockets and Server-Sent Events.
What you'll learn
- WebSocket protocol vs HTTP
- Socket.io for real-time communication
- Rooms and namespaces
- Broadcasting events
- Server-Sent Events (SSE) for one-way streams
- Handling disconnections and reconnection
- Scaling WebSockets (sticky sessions, Redis adapter)
Resources
Real-time Chat Application
Build a chat app with Socket.io featuring rooms, typing indicators, online status, message history, and user notifications.
20.Message Queues & Background Jobs
Handle async processing with message queues and job schedulers.
What you'll learn
- Why async processing (email, image resize, reports)
- Bull/BullMQ for job queues with Redis
- Job scheduling and retries
- Dead letter queues
- RabbitMQ/Kafka concepts
- Worker processes and scaling
- Monitoring queue health
Resources
Email Queue System
Build an email sending service with BullMQ. Queue welcome emails on signup, password resets, and weekly digest emails with retry logic.
21.Docker & Containers
Containerize your applications for consistent development and deployment.
What you'll learn
- Container concepts and why Docker
- Dockerfile syntax and best practices
- Building and running containers
- Docker Compose for multi-service apps
- Volumes and networking
- Multi-stage builds for production
- Container registries (Docker Hub, GHCR)
- Health checks and restart policies
Resources
Containerized Full API
Dockerize your complete API with PostgreSQL, Redis, and the Node.js app. Use Docker Compose for local dev with hot reload.
22.CI/CD & Cloud Deployment
Automate testing, build pipelines, and deploy to production.
What you'll learn
- CI/CD concepts and benefits
- GitHub Actions for automated testing
- Build and deploy pipelines
- Cloud platforms (Railway, Render, AWS, Vercel)
- Environment management (dev, staging, prod)
- Database hosting and backups
- Domain setup and SSL certificates
- Monitoring and logging (PM2, health checks)
- Zero-downtime deployments
Resources
Production-Ready API Deployment
Deploy your full API with CI/CD: GitHub Actions for tests, auto-deploy to Railway/Render, PostgreSQL on Supabase, Redis on Upstash, custom domain with SSL.
23.System Design Basics
Understand how to design scalable backend architectures.
What you'll learn
- Monolith vs microservices
- Load balancing strategies
- Horizontal vs vertical scaling
- Database sharding and replication
- CDN and edge computing
- API Gateway pattern
- Event-driven architecture
- CAP theorem and consistency models
Resources
URL Shortener (Full System)
Design and build a URL shortener with analytics: short link generation, redirect tracking, click analytics dashboard, rate limiting, and horizontal scaling considerations.