- Company Name
- Servant
- Job Title
- Full-Stack Engineer (Identity & Security Engineer)
- Job Description
-
Job Title: Full‑Stack Identity & Security Engineer
Role Summary: Design, implement, and secure the identity, access, and security foundation for the Human‑Led AI Orchestration Layer. Deliver enterprise‑grade, revenue‑ready solutions across frontend, backend, and cloud security, ensuring every AI action, workflow, and decision is securely authorized, auditable, and aligned with human intent.
Expectations:
- Own end‑to‑end security architecture for identity and authorization.
- Deliver high‑quality, secure features within agreed timelines.
- Demonstrate proactive communication and cross‑team collaboration.
- Maintain rigorous security practices and comply with SaaS multi‑tenant requirements.
Key Responsibilities:
- Implement and manage Clerk‑based authentication across React + TypeScript frontends and FastAPI backends.
- Design RBAC and permission models for human‑led decision workflows.
- Handle secure session management, JWT validation, token lifecycles, OAuth2 flows, CORS, CSRF protection, and rate limiting.
- Enforce consistent authorization across APIs, services, agents, tools, and data layers.
- Harden APIs and identity boundaries for multi‑tenant SaaS deployments.
- Document identity architecture and share knowledge with the team.
- Build identity & permission models for AI agents and automated workflows.
- Implement capability‑based scopes, human‑in‑the‑loop approval gates, and policy enforcement for sensitive actions.
- Develop sandboxing and blast‑radius containment strategies to prevent privilege escalation, cross‑tenant access, and unauthorized tool usage.
Required Skills:
- Hands‑on experience with authentication/authorization in web applications.
- Proficient with Clerk or equivalent identity provider.
- Deep knowledge of OAuth2, JWT, session management, and secure token handling.
- Experience building FastAPI (Python) backends and integrating with React + TypeScript frontends.
- Strong security fundamentals, threat modeling, and best‑practice implementation.
- Familiarity with multi‑tenant SaaS architecture and RBAC design.
- Proficiency in Git, remote collaboration, and documentation.
- Preferable: Azure deployments, DevOps workflows, IaC, and securing decision‑support systems.
Required Education & Certifications:
- Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent professional experience.
- No mandatory certifications required, but security or cloud certifications (e.g., CISSP, CSM, Azure Security Engineer) are a plus.