Description

The Experience

We are seeking a lead full stack engineer with enterprise software engineering experience to drive the architecture, technical roadmap, and execution for our next-generation Security Assurance Governance, Risk, and Compliance (GRC) platform. In this role, you will hold end-to-end technical ownership over the platform's core engines—including policy as code, compliance as code, automated evidence collection, telemetry and alerting, and risk evaluation modules.

Beyond hands-on development in Python, Java, and modern front-end frameworks, you will act as a primary technical leader: defining system architecture, scoping and planning multi-quarter technical initiatives, and guiding distributed feature teams from concept through deployment. You will also pioneer the team's operational strategy around AI coding assistants (e.g., Claude, Gemini, OpenAI) to accelerate output and elevate code quality across the engineering organization.

What You'll Actually Be Doing

End-to-End Ownership: Take technical ownership of complex, multi-system initiatives, driving architectural decisions, technical specifications, phase planning, and execution across the delivery lifecycle.
Architecture & System Design: Architect resilient, cloud-native microservice architectures that process large-scale compliance telemetry, support automated evidence ingestion, and execute low-latency risk evaluation engines.
Roadmap & Project Planning: Partner with Product Management, Security Architects, and GRC leaders to translate broad business and regulatory strategies into detailed technical roadmaps, milestones, and sprint backlogs.
Technical Governance: Establish engineering standards, perform high-impact code and architecture reviews, enforce secure coding guidelines, and institute rigorous CI/CD and testing benchmarks across the engineering org.
Policy & Governance as Code: Design and implement extensible Policy as Code and Compliance as Code engines (e.g., leveraging Open Policy Agent/OPA or custom evaluation frameworks) and runtime platforms (e.g. CSPM, EDR, etc) that dynamically audit infrastructure and enterprise controls. Constrain the outputs of AI coding assistants with declarative machine-readable rules.
Automated Evidence Collection: Lead the design of automated evidence collection pipelines integrating with multi-cloud environments (AWS, Azure, GCP), identity providers, enterprise security tools, CI/CD pipelines, ticketing systems, and productivity / corporate applications (Workday, Netsuite, etc).
Risk & Regulatory Modeling: Build dynamic risk analysis engines and auditing interfaces capable of mapping continuous technical evidence against major regulatory standards (NIST 800-53, ISO 27001, SOC 2).
AI-Assisted Engineering: Lead the adoption and integration of AI coding assistants (e.g., Claude, Gemini, OpenAI APIs) across the engineering lifecycle to optimize team productivity, automate test generation, and streamline refactoring.
Mentorship: Actively mentor senior and mid-level engineers across time zones, fostering a culture of technical excellence, accountability, and continuous learning.
Lead cross-functional alignment and technical discussions across a geographically dispersed team operating in an asynchronous-first culture.

You're Our Person If...

Experience: 6–13 years of professional full-stack software engineering experience, including 3+ years at the Senior Member of Technical Staff (SMTS) or Lead Member of Technical Staff (LMTS) level leading technical projects and distributed engineering teams.
Project Ownership Track Record: Proven experience taking complex SaaS platforms or enterprise software projects from architectural inception to production delivery.
Strategic Execution: Demonstrated ability to break down ambiguous business requirements into high-level architecture designs, concrete technical epics, and actionable execution plans.
Systems Engineering: Deep mastery of both Python and Java, including enterprise frameworks (e.g., FastAPI, Django, Flask, Spring Boot) and microservices design patterns.
Front-End Architecture: Advanced proficiency in modern JavaScript/TypeScript frameworks (React, Vue, or Angular), with experience designing scalable component libraries and complex data visualization dashboards.
AI Tooling & Innovation: Advanced proficiency in leveraging AI coding assistants (Claude, Gemini, OpenAI, GitHub Copilot) to accelerate delivery, paired with a strategic vision for integrating AI into technical workflows.
Data & Cloud Systems: Strong expertise in relational (PostgreSQL, MySQL) and NoSQL/graph databases, distributed data processing, containerization (Docker, Kubernetes), and public cloud platforms (AWS, Azure, or GCP).
Regulatory Frameworks: Working knowledge of regulatory standards including NIST SP 800-53, ISO/IEC 27001, and SOC 2 (Trust Services Criteria).
Compliance Engineering: Direct experience building or architecting systems around continuous control monitoring, automated audit trails, or policy engine evaluation (e.g., OPA/Rego).

Even Better If...

Prior experience architecting commercial GRC tools, Security Information and Event Management (SIEM), or Cloud Security Posture Management (CSPM) systems.
Practical experience implementing Open Policy Agent (OPA) or similar policy-as-code domain tools at scale.
Security certifications such as CISSP, CCSP, or Cloud Security Specialties.
Experience with Salesforce platform including Lightning Web Components, Apex, and SOQL

Assurance Engineering Platform Developer SMTS / LMTS