Senior Full-Stack Engineer
Early-stage startup · Hybrid — Phoenix · Full-time ·
About us
We're an early-stage startup building a multi-tenant SaaS platform for regulated and public-sector customers.
The role
We're building a multi-tenant platform on Google Cloud, and we need a senior full-stack engineer who can own features end-to-end—from the React UI, through tenant-aware Fastify APIs, down to the Postgres data model—and who helps harden the foundations as we grow: tenant isolation, test coverage, and our CI/CD safety net. You'll join a small, high-ownership team where your architectural decisions stick. Compliance is part of the landscape here (audit trails, access controls, regulated customers), so you'll build with that in mind—but this is a broad full-stack role, not a single-domain specialty.
What you'll do
- Build features end to end—Postgres schema and Prisma models, Fastify APIs, and the React UI that consumes them.
- Design and evolve our multi-tenant data model and access controls (Postgres RLS, role-based permissions) with isolation we won't regret in two years.
- Use Zod and strong typing throughout to keep API contracts and runtime validation honest.
- Own features through to production on Google Cloud Run, including observability and debugging in a live environment.
- Raise the quality bar: grow automated test coverage (Vitest, Playwright) and wire quality gates into CI/CD.
- Review PRs, mentor, and help set technical direction as the team grows.
- Bring a modern approach to end-to-end testing.
- Be comfortable with AI-assisted development and help build out agents to increase team productivity.
What you bring
- 6+ years building production web applications full-stack, with meaningful time as a senior or staff engineer.
- Strong TypeScript across both front end and back end—equally at home in a React component and a backend service.
- Solid React (hooks, modern patterns) with a fast build toolchain (Vite or equivalent).
- Server-side Node.js with Fastify, Express, NestJS, or similar—API design and architecture.
- Strong PostgreSQL and data-modeling instincts, plus an ORM (Prisma ideal) and migrations at scale.
- A feel for multi-tenant data isolation—row-level security, tenant-scoped access, the common footguns.
- Good judgment on trade-offs: schema-per-tenant vs. row-level isolation, build vs. buy, where to draw the line on abstractions.
- Comfort with Docker for local development.
- Clear communicator who writes things down.
Nice to have
- FedRAMP or equivalent regulated experience (FedRAMP Moderate/High, DoD IL4+, NIST 800-53)—and a working sense of what those controls mean for how you write code.
- PostgreSQL depth—RLS and multi-tenant patterns.
- Multi-tenant identity depth—OIDC, SAML, SSO, MFA, session handling (helpful, not the focus of the role).
- Tailwind CSS, TanStack Query / React Query, Firebase / Google Identity Platform auth.
- Google Cloud (Cloud Run, Cloud Storage) and GitLab CI/CD.
- Background in compliance, GovCon, or other regulated/document-heavy domains.
Our stack
Backend: TypeScript · Node.js 22 · Fastify · Prisma · PostgreSQL · Zod · Pino
Frontend: React 18 · TypeScript · Vite · React Router · React Query · Tailwind CSS · Axios
Infra: Docker · GitLab CI · Google Cloud Run · Google Cloud Storage · Nginx · pnpm monorepo
Auth: Firebase / Google Identity Platform · session-based RBAC
Testing: Vitest · React Testing Library · Playwright
What we offer
- Competitive salary
- Health, dental, and vision insurance
- PTO and 401(k)
- A small team, real ownership, fast decisions
- Hybrid role based out of our Phoenix office
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Flexible spending account
- Health insurance
- Life insurance
- Paid time off
- Parental leave
- Retirement plan
- Vision insurance
Security clearance:
Work Location: Hybrid remote in Phoenix, AZ 85020