Software Engineer

• Design, develop, and maintain backend services using Python 3, FastAPI, Pydantic, and SQLAlchemy.
• Build and maintain REST APIs that support OSCAL-based compliance workflows, document management, metadata updates, authentication, and user-facing application features.
• Work with relational databases across local and production-like environments, including SQLite, PostgreSQL, and Microsoft SQL Server.
• Implement and maintain database models, query logic, migrations, and data access patterns using SQLAlchemy and Alembic.
• Build frontend features using React, TypeScript, Vite, Material UI, React Router, React Hook Form, Zod, and related modern frontend tooling.
• Integrate frontend workflows with backend APIs, including form validation, document editing, schema validation, error handling, and user-facing state updates.
• Write and maintain automated tests, including backend pytest tests and frontend Playwright end-to-end tests.
• Participate in CI/CD maintenance using GitHub Actions, npm, uv, Docker, and build/test/lint/publish pipelines.
• Support Azure deployment workflows using Bicep and PowerShell for tenant-based application infrastructure.
• Debug issues across the full stack, including API behavior, database differences, frontend state, browser behavior, authentication flows, and deployment configuration.
• Collaborate through GitHub pull requests, code reviews, issue discussion, and iterative feature development.
• Write clean, maintainable, typed, and well-tested code that follows existing project conventions.
• Ability to work in office 3-5 days per week.
• Participate in team meetings for knowledge sharing and status updates., Within the first few months, this developer should be able to:
• Pick up a scoped full stack issue and deliver it through PR review.
• Modify/implement a FastAPI endpoint, Pydantic model, SQLAlchemy query, or service layer safely.
• Add or update a React/TypeScript UI flow using existing Material UI patterns.
• Write meaningful pytest or Playwright coverage for their change.
• Run and interpret local checks such as backend tests, frontend typecheck/build/lint, and Playwright tests.
• Debug behavior differences between SQLite, PostgreSQL, and MSSQL when needed.
• Understand enough OSCAL and compliance terminology to ask good questions and model data correctly.

• 3+ years of professional software development experience, or equivalent demonstrated ability.
• Bachelor’s degree in Engineering or a related technical field required, with preference for Computer Science, Computer Engineering, or Software Engineering.
• Strong Python backend development experience.
• Experience building APIs with FastAPI or a similar modern Python web framework.
• Experience with Pydantic or similar data validation/modeling libraries.
• Experience with SQLAlchemy and relational database-backed applications.
• Comfortable writing SQL-aware application code and debugging database-specific behavior.
• Strong React and TypeScript experience.
• Experience with Node.js, npm, Vite or comparable frontend build tooling.
• Experience building production-style frontend workflows with forms, validation, routing, API integration, and reusable components.
• Experience writing automated tests for backend and/or frontend code.
• Familiarity with Git, GitHub pull requests, code review, branching, and collaborative development workflows.
• Ability to troubleshoot across multiple layers of an application instead of staying limited to one tier.
• Clear written communication and ability to explain technical decisions in PRs, issues, and team discussions., * Experience with Microsoft Azure services, especially Azure Container Apps, Azure SQL, managed identities, Static Web Apps, or related deployment models.
• Experience with Infrastructure as Code, especially Bicep, ARM templates, Terraform, or similar.
• Experience with GitHub Actions CI/CD pipelines.
• Experience with Docker-based local development and deployment workflows.
• Experience with Microsoft SQL Server and PostgreSQL.
• Experience with Playwright, pytest, Ruff, Pyright, ESLint, Prettier, or similar quality tooling.
• Experience with Material UI or another mature component library.
• Experience working with JSON Schema, structured document models, or complex nested JSON data.
• Familiarity with OSCAL, NIST 800-series guidance, RMF, FedRAMP, or security/compliance automation.
• Experience in regulated, security-conscious, government, or enterprise SaaS environments.

Nice-to-Have Domain Knowledge

• OSCAL catalog, profile, system security plan, assessment plan, assessment result, POA&M, or component definition concepts.
• NIST Risk Management Framework terminology and workflows.
• Security control inheritance, implementation statements, compliance evidence, assessment artifacts, or authorization package workflows.
• Experience building tools for governance, risk, compliance, cybersecurity, or audit teams.