StackOne

Full-stack Engineer

• Own how enterprises govern the tools their agents can reach: the enrollment, provisioning, policy, posture, and identity-bound access layer• Provisioning lifecycle for tool access — enroll, grant, rotate, revoke — across our managed auth and connector-profile layer• Policy and enforcement – shape the authoring, versioning, and runtime enforcement of access policies• Posture and risk – continuous assessment of connected tools and the SaaS behind them• Instrumentation and telemetry – deepen structured, queryable visibility into the tool calls flowing through the gateway• Identity integration – extend our OAuth 2.1, SSO, and SCIM story• Detection and response – define what bad looks like, surface it, and give operators the controls to contain it.

Senior Engineer – AI Governance

Platform Engineer

• Own our infrastructure at scale: the AWS estate today (ECS Fargate, Aurora, ElastiCache, MSK, OpenSearch, Lambda, KMS) and the AWS CDK to Terraform migration. Keep it reliable, observable, and cost-aware.
• Build out the deployment pipeline as we consolidate toward a monorepo: the CI/CD that ships every service, plus an automated end-to-end testing harness with incremental (affected-only) testing that stays fast as we grow.
• Ship into customers' own clouds (self-hosted / BYOC): the Terraform modules, container images, runbooks, and documentation for internal teams and customers.
• Own the release and upgrade path for self-hosted customers: versioned, signed releases, a supported-version policy, and a call-home for usage and version reporting.
• Set the standard for new repositories: partner with the Security Engineer and tech leads so new projects (product, internal tools, and vibe-coded prototypes) ship secure and deployable from day one. Templates and golden paths, not gatekeeping.
• Raise reliability: SLOs, observability, and incident response. Make the system easy to operate when something breaks at 3am.
• Treat infrastructure as a product: paved roads and self-serve tooling so product engineers ship without waiting on you.
• Use AI in the workflow: lean on LLMs and agents for IaC generation, test scaffolding, and runbook drafting, with guardrails you trust.

Senior Platform Engineer

Security Engineer

• Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR-blocking standards across every repository.
• Harden our AWS and Cloudflare estate: IAM, secrets, network segmentation, KMS, WAF, GuardDuty, and zero-trust patterns.
• Run pen testing end-to-end: scope and coordinate engagements with both AI-driven scanners and human researchers, then drive findings through fix and retest.
• Threat-model product features before they ship, new Auth provider, expanded multi-tenant APIs, connector executions, agent tool-calling paths etc.
• Build detection and response capability around credential and authentication flows, with observability that closes incidents fast.
• Partner with engineering to raise the bar day-to-day: architecture reviews, written standards, and security embedded in code review.
• Use LLMs and agents to accelerate security workflows (triage, code review, evidence gathering) with guardrails you trust and help secure and monitor the (code/application/device) fleet.
• Support compliance work where it intersects security engineering: SOC 2, ISO 27001, customer security reviews, and pen test responses.