Full Stack Engineer

You’ll take a lead role in critical subsystems - the multi-tenant security model, BFF authentication layer, data architecture, and integration backbone - and contribute to the patterns the rest of the team builds on. You’ll participate in architectural decisions, write design docs, and lead code reviews.

This role will be deeply involved in how systems are designed and have your opinions shape the future of SCRC applications.

What you’ll do

• Multi-tenant security - help design and maintain the three-tier billing boundary; ensure tenancy, subscription state, and feature entitlements are always resolved server-side, never trusted from the client.
• BFF and identity - contribute to the enterprise OIDC integration, server-side session and token lifecycle, and the trust boundary between the Blazor WASM client and the ASP.NET Core gateway.
• Error handling and contracts - help define and maintain the end-to-end error model: domain results, BFF status-code mapping, and graceful UI handling.
• Data layer - contribute to EF Core schema design, migration strategy, query performance, and concurrency under real multi-tenant load.
• Background processing and integrations - work on Hangfire job architecture and the abstractions over our payments provider, transactional email service, and document generation engine, including webhook security.
• Observability - help drive the logging and Application Insights pipeline and OpenTelemetry distributed tracing so the team always knows if the system is healthy.
• Engineering workflow - participate in shaping branching strategy, migration discipline, and the release lifecycle across environments.

• 5+ years of professional software engineering, with real experience on production systems.
• Deep C# / ASP.NET Core expertise - middleware, the auth/cookie pipeline, DI, and async concurrency.
• Strong Blazor (or comparable component-based SPA) experience, including WebAssembly hosting models and the PWA build pipeline.
• Solid EF Core and relational database skills: schema design, migrations, query performance, and transactions under load.
• Experience working on multi-tenant SaaS - tenancy boundaries, data isolation, and billing boundaries.
• Practical application security knowledge: OIDC/OAuth 2.0, BFF patterns, session and token handling, CSRF, and webhook signature verification.
• Experience with asynchronous/background processing and resilient third-party integrations.
• Comfort leading through design - writing clear docs, weighing trade-offs, and communicating decisions to a team.
• Ability to work within standard US time zones (eastern standard time - pacific standard time)
• Fluent in English

Preferred

• Payment provider billing modeling at scale (plans, entitlements, proration, webhooks).
• Enterprise identity provider experience (multi-tenant org modeling, SSO, directory sync).
• YARP reverse-proxy / token-injection patterns.
• .NET Aspire orchestration and cloud-native deployment.
• Distributed caching, locking, or multi-instance session coordination.

Pulled from the full job description

• Health insurance
• 401(k) matching, * One-time $1,000 home office / remote setup stipend
• $1,500 annual professional development fund (conferences, courses, certifications)
• 401(k) with employer match, eligible after 1 year
• Fully remote work environment

SocioCultural Research Consultants (SCRC) builds technologies for the qualitative and mixed-methods research community. Our products include Dedoose, a cloud-based qualitative and mixed methods research platform; and De-ID, a web-based data de-identification tool. We are a fully remote team committed to building tools and services that assist researchers in doing meaningful work that satisfy the values and standards held by higher education social science researchers.