Senior Full-Stack Engineer

Senior Full-Stack Engineer

Early-stage startup · Hybrid — Phoenix · Full-time ·

About us

We're an early-stage startup building a multi-tenant SaaS platform for regulated and public-sector customers.

The role

We're building a multi-tenant platform on Google Cloud, and we need a senior full-stack engineer who can own features end-to-end—from the React UI, through tenant-aware Fastify APIs, down to the Postgres data model—and who helps harden the foundations as we grow: tenant isolation, test coverage, and our CI/CD safety net. You'll join a small, high-ownership team where your architectural decisions stick. Compliance is part of the landscape here (audit trails, access controls, regulated customers), so you'll build with that in mind—but this is a broad full-stack role, not a single-domain specialty.

What you'll do

• Build features end to end—Postgres schema and Prisma models, Fastify APIs, and the React UI that consumes them.
• Design and evolve our multi-tenant data model and access controls (Postgres RLS, role-based permissions) with isolation we won't regret in two years.
• Use Zod and strong typing throughout to keep API contracts and runtime validation honest.
• Own features through to production on Google Cloud Run, including observability and debugging in a live environment.
• Raise the quality bar: grow automated test coverage (Vitest, Playwright) and wire quality gates into CI/CD.
• Review PRs, mentor, and help set technical direction as the team grows.
• Bring a modern approach to end-to-end testing.
• Be comfortable with AI-assisted development and help build out agents to increase team productivity.

What you bring

• 6+ years building production web applications full-stack, with meaningful time as a senior or staff engineer.
• Strong TypeScript across both front end and back end—equally at home in a React component and a backend service.
• Solid React (hooks, modern patterns) with a fast build toolchain (Vite or equivalent).
• Server-side Node.js with Fastify, Express, NestJS, or similar—API design and architecture.
• Strong PostgreSQL and data-modeling instincts, plus an ORM (Prisma ideal) and migrations at scale.
• A feel for multi-tenant data isolation—row-level security, tenant-scoped access, the common footguns.
• Good judgment on trade-offs: schema-per-tenant vs. row-level isolation, build vs. buy, where to draw the line on abstractions.
• Comfort with Docker for local development.
• Clear communicator who writes things down.

Nice to have

• FedRAMP or equivalent regulated experience (FedRAMP Moderate/High, DoD IL4+, NIST 800-53)—and a working sense of what those controls mean for how you write code.
• PostgreSQL depth—RLS and multi-tenant patterns.
• Multi-tenant identity depth—OIDC, SAML, SSO, MFA, session handling (helpful, not the focus of the role).
• Tailwind CSS, TanStack Query / React Query, Firebase / Google Identity Platform auth.
• Google Cloud (Cloud Run, Cloud Storage) and GitLab CI/CD.
• Background in compliance, GovCon, or other regulated/document-heavy domains.

Our stack

Backend: TypeScript · Node.js 22 · Fastify · Prisma · PostgreSQL · Zod · Pino

Frontend: React 18 · TypeScript · Vite · React Router · React Query · Tailwind CSS · Axios

Infra: Docker · GitLab CI · Google Cloud Run · Google Cloud Storage · Nginx · pnpm monorepo

Auth: Firebase / Google Identity Platform · session-based RBAC

Testing: Vitest · React Testing Library · Playwright

What we offer

• Competitive salary
• Health, dental, and vision insurance
• PTO and 401(k)
• A small team, real ownership, fast decisions
• Hybrid role based out of our Phoenix office

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Parental leave
• Retirement plan
• Vision insurance

Security clearance:

• Confidential (Required)

Work Location: Hybrid remote in Phoenix, AZ 85020

Nice to have

• FedRAMP or equivalent regulated experience (FedRAMP Moderate/High, DoD IL4+, NIST 800-53)—and a working sense of what those controls mean for how you write code.
• PostgreSQL depth—RLS and multi-tenant patterns.
• Multi-tenant identity depth—OIDC, SAML, SSO, MFA, session handling (helpful, not the focus of the role).
• Tailwind CSS, TanStack Query / React Query, Firebase / Google Identity Platform auth.
• Google Cloud (Cloud Run, Cloud Storage) and GitLab CI/CD.
• Background in compliance, GovCon, or other regulated/document-heavy domains.

Our stack

Backend: TypeScript · Node.js 22 · Fastify · Prisma · PostgreSQL · Zod · Pino

Frontend: React 18 · TypeScript · Vite · React Router · React Query · Tailwind CSS · Axios

Infra: Docker · GitLab CI · Google Cloud Run · Google Cloud Storage · Nginx · pnpm monorepo

Auth: Firebase / Google Identity Platform · session-based RBAC

Testing: Vitest · React Testing Library · Playwright

What we offer

• Competitive salary
• Health, dental, and vision insurance
• PTO and 401(k)
• A small team, real ownership, fast decisions
• Hybrid role based out of our Phoenix office

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Parental leave
• Retirement plan
• Vision insurance

Security clearance:

• Confidential (Required)

Work Location: Hybrid remote in Phoenix, AZ 85020