Hi there,
I've been working in Node as my backend for over 2 years now and I completely feel your pain. I have set up many secured backends since I've started and I'm certain I can help you solve this for almost any situation, and possibly even solve it with no extra cost than my time.
Let me know if you have any questions,
Steve