Full Stack engineer (Back-end and Cloud and Ai engineering focus)

We're an enterprise audit-management platform for professional audit firms — full audit lifecycle (planning, workpapers, evidence, review workflows, findings, trial balance, reporting). It's multi-tenant, security- and correctness-critical, and used by regulated professionals. Think "defense-grade internal tooling," not consumer SaaS: strict per-tenant isolation, role-based access control, and an immutable audit trail matter more than flashy features. We need a backend-heavy full-stack engineer who can take a feature from data model to deployed endpoint to the React UI that consumes it — and own the cloud infra underneath it. You'll write the Prisma schema and migrations, build the Express/TypeScript API, wire it into the React front end, and ship it through our GitHub Actions pipeline to AWS. We want a mini "Palantir-level" engineering bar at startup cost: correct data handling, airtight tenant isolation and permissions, clean migrations, and infra that's reproducible rather than hand-tended. What you'll own (scope of work) 1. Backend feature development (primary) - Design and build Express + TypeScript API routes with proper authn/authz middleware. - Own the Prisma schema and migrations — forward-only, reviewed, applied cleanly to staging then prod. - Model multi-tenant data correctly; enforce per-firm isolation and RBAC at the query layer, not just the UI. - Respect the immutable audit trail on sensitive mutations. 2. Full-stack delivery - Wire new endpoints into the React 18 + Vite front end; build the UI where needed. - Keep the client/server contract tight (types shared, no drift between API and front-end copies). 3. Cloud & infra (AWS) - Operate and improve ECS Fargate services, RDS Postgres, S3, CloudFront. - Harden the GitHub Actions pipeline: build, typecheck, test gates, staging promotion, prod gating. - Move toward reproducible infra (IaC / CloudFormation), secrets handled correctly, least-privilege IAM. 4. Data & migrations discipline - Safe, reversible-in-spirit migrations; backfills scripted and run per environment; no manual prod schema drift. 5. Quality & reliability - Write tests alongside features (unit + API/integration against real Postgres). - Keep PRs small, reviewable, and green through CI before merge. 6. Documentation & handoff - Short runbooks for the services and deploy flow; leave the next engineer a clean trail. Required Skills & Qualifications - 5+ years building production backends, with real full-stack range. - Strong TypeScript/JavaScript, server-side first. - Node/Express API design; authn/session + RBAC/permissions done right. - Prisma + PostgreSQL — schema design, migrations, query performance, seeding. - React 18 (+ Vite) at a working-to-strong level — you can own the UI for your features. - AWS at a real level: ECS Fargate, RDS, S3, CloudFront, Docker. - GitHub Actions CI/CD: build/test gates, staging → prod promotion, caching. - Multi-tenant, security-minded engineering. Excellent written English.