Senior Full-Stack Security, GRC Platform Engineer

Guidehouse

Senior Full-Stack Security/GRC Platform Engineer maintaining and extending a comprehensive Governance, Risk, and Compliance platform with a focus on backend and frontend technologies.

Posted 5/27/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $86,500 - $129,900 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudDockerPostgresPythonReactRedisTerraformTypeScript

About the role

Key responsibilities & impact

Maintain and extend a FastAPI backend with hundreds of registered API routes.
Build and refine React/TypeScript product workflows across a large frontend surface.
Design and maintain SQLAlchemy models, Alembic migrations, PostgreSQL queries, and data integrity rules.
Support scanner integrations, finding normalization, deduplication, evidence workflows, and compliance mapping.
Maintain AI-assisted features through a centralized provider abstraction rather than direct calls to providers.
Work across GRC workflows including findings, evidence, SSPs, POA&Ms, RMF, FedRAMP/FISMA, SCRM, ZTA, ISCM, risk acceptance, and reporting.
Keep local development and test environments healthy using Docker Compose, Redis, PostgreSQL, worker queues, Ollama, observability services, and frontend tooling.
Maintain quality gates including linting, type checking, OpenAPI drift checks, migration safety, SDK drift, architecture boundaries, and test suites.
Debug issues across frontend state, API contracts, database state, workers, scanner output, generated SDKs, and deployment configuration.
Treat documentation as helpful but secondary to the codebase; validate assumptions against source, tests, migrations, and running behavior.

Requirements

What you’ll need

Minimum of SIX (6) years’ experience with Python backend development.
Strong FastAPI, Pydantic, SQLAlchemy, Alembic, async Python, and pytest experience.
Strong React, TypeScript, Vite, React Router, React Query, and component architecture experience.
PostgreSQL experience, including schema design, migrations, indexes, JSON/JSONB, and relational integrity.
Experience maintaining large API surfaces and generated frontend API clients.
Experience with background jobs or async workers using Redis-backed queues.
Strong security engineering fundamentals: authentication, authorization, RBAC, audit logs, secret handling, dependency risk, and input validation.
Ability to diagnose source-of-truth issues when documentation, generated code, database schema, and runtime behavior disagree.
Experience building AI-assisted product features, preferably in security, compliance, document review, or workflow automation.
Understanding of RAG, embeddings, document extraction, prompt/context design, and evidence citation.
Ability to enforce scoped context, provenance, guardrails, and human-review boundaries.
Comfort maintaining provider abstractions across local and cloud AI providers.
Docker Compose for local development.
AWS-style production operations: containers, managed databases, caches, object storage, CDN, IAM, logs, and deployment pipelines.
Terraform or similar infrastructure-as-code experience.
CI/CD debugging and release discipline.
Observability, logs, health checks, and operational runbooks.

Benefits

Comp & perks

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Parental Leave
401(k) Retirement Plan
Group Term Life and Travel Assistance
Voluntary Life and AD&D Insurance
Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
Transit and Parking Commuter Benefits
Short-Term & Long-Term Disability
Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Care.com annual membership
Employee Assistance Program
Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

PythonFastAPIPydanticSQLAlchemyAlembicasync PythonpytestReactTypeScriptPostgreSQL

Soft Skills

diagnostic skillssecurity engineering fundamentalsability to enforce scoped contextability to validate assumptionsproblem-solvingattention to detailcollaborationadaptabilitycommunicationcritical thinking