Full Stack Engineer

Full Stack Engineer

Location: Hybrid | Type:Contract / Outsourced, Full-time hours

About the Role

We're looking for a Full Stack Engineer to help build and scale AI-powered software products and automation solutions used by enterprise clients. You'll work on a modern development platform that supports multiple products and projects, with a strong focus on rapid product development, automation, and scalable architecture.

The core platform is built on a NestJS backend and extended through custom modules covering authentication, billing, CRM, task management, and document workflows. The technology stack includes TypeScript/NestJS, Python service workers, and AWS infrastructure (Aurora PostgreSQL, SSM, Secrets Manager, and CDK).

In this role, you'll own new features end-to-end—from API design and backend services to dashboard implementation and deployment. You'll work across both the core platform and a variety of active product initiatives and client-facing projects, helping shape technical decisions and deliver impactful solutions.

What You'll Own

Backend

• Extend the NestJS core and custom module system
• Write Prisma migrations against Aurora Serverless v2
• Build and harden API endpoints: DTO validation, auth guards, rate limiting, input sanitization
• Own notification dispatch pipelines (email, SMS, voice)
• Extend the billing ledger: usage caps, per-feature cost tracking, period management, reconciliation

Infrastructure & Security

• Operate AWS: CDK stacks (VPC, Aurora, Redis, S3 with KMS CMK, CloudTrail, GuardDuty, SSM session logging)
• Identify and close attack surfaces: auth bypass paths, over-permissioned roles, unvalidated inputs, insecure defaults

Dashboard / Frontend

• Work in iOS environments
• Manage Next.js App Router, Tailwind CSS across platforms
• Run QA processes
• Manage all support tickets / bug fixes across platforms

Required Experience

• 4+ years TypeScript: NestJS (or equivalent decorator-based framework), Prisma, REST API design, DTO validation, guard/interceptor patterns
• Python: async service workers; you can read and extend a data processing or inference loop
• AWS: IAM, Aurora PostgreSQL, SSM Session Manager, Secrets Manager, KMS, S3
• PostgreSQL: real migrations, row-level security, comfortable with EXPLAIN ANALYZE
• System operations: ssh, rsync, launchd/systemd, debugging a remote production node without GUI tools
• Ability to own a task end-to-end with minimal hand-holding

Nice to Have

• AWS CDK (TypeScript constructs)
• Redis pub/sub or BullMQ
• Pgvector or any embedding / vector similarity work
• Apple Silicon / MLX or ONNX Runtime experience
• Next.js App Router, Tailwind CSS
• Experience deploying to physical on-premises hardware, not just cloud infrastructure
• Prior work on compliance-adjacent systems (FedRAMP, SOC 2, HIPAA, CJIS, or equivalent)