Fullstack Engineer on AI projects/platforms

About us. We’re a California-based product company shipping web products at scale. We’re looking for a hands-on Frontend Engineer to build fast, reliable, and beautiful user experiences.
Culture: outcome > process, we care about results and a “get the job done” mindset.

What you'll do

- Build features end-to-end: React UI → Express/FastAPI API → MCP services → databases.
- Design and develop MCP servers (Model Context Protocol) in Python — the core tool layer of the platform.
- Work with LLM integrations (Claude, GPT, Gemini) via LangChain: agents, chains, tool calling, SSE streaming.
- Implement and maintain authentication and authorization systems: SSO (SAML, OpenID Connect), OAuth 2.0 providers (Google, GitHub, Discord, Apple), LDAP integration.
- Design and enforce role-based access control (RBAC) policies — user roles, permission scoping, resource-level access across the platform.
- Harden application security: input sanitization, rate limiting, CORS policies, session management, JWT lifecycle, and secrets handling.
- Maintain and extend the component system built on React + Radix UI + Tailwind — forms, chat interfaces, markdown rendering, drag-and-drop.
- Optimize data workflows: vector search (Milvus), analytics (ClickHouse), caching (Redis), persistence (MongoDB).
- Containerize services and maintain Docker Compose orchestration across 15+ microservices.
- Integrate external systems — Jira, Confluence, Bitbucket, Akamai, Ansible — via MCP and REST APIs.
- Write tests (Jest, Playwright, Pytest), participate in code reviews, and uphold codebase quality.

What you bring

- 3+ years of production experience; strong React + TypeScript.
- Backend experience with Node.js/Express — middleware, auth (JWT, OAuth, SAML), session management.
- Solid understanding of authentication protocols: OAuth 2.0 flows, SAML assertions, OpenID Connect, LDAP/AD binding.
- Experience designing RBAC or ABAC systems — defining roles, permissions, policy enforcement at API and UI layers.
- Awareness of OWASP Top 10; practical experience securing web applications (XSS prevention, CSRF, injection attacks, secure cookie handling).
- Python at a service-building level: FastAPI, Pydantic, async/await.
- Hands-on work with MongoDB (Mongoose/Motor), Redis, and at least one relational DB (MySQL/PostgreSQL).
- Practical Docker and Docker Compose skills — not just running containers, but writing Dockerfiles and debugging multi-service environments.
- Experience with REST APIs and SSE (Server-Sent Events); understanding of streaming data patterns.
- Testing discipline: Jest, Testing Library, Playwright or equivalents.
- Clean Git workflow: feature branches, PR reviews, meaningful commits.

Nice to have

- Experience with LLM APIs (Anthropic, OpenAI, Google) — prompt engineering, token management, streaming.
- Familiarity with Model Context Protocol (MCP) or willingness to ramp up quickly.
- LangChain / LangGraph experience — agentic architectures, orchestration.
- Work with vector databases (Milvus, Pinecone, Weaviate) and embeddings.
- Experience integrating enterprise identity providers (Okta, Azure AD, Keycloak) or setting up SSO for multi-tenant environments.
- Audit logging and compliance awareness — tracking user actions, access logs, data retention policies.
- Knowledge of LibreChat, Open WebUI, or similar self-hosted LLM platforms.
- ClickHouse or other columnar/analytical databases.
- Integrations with Atlassian (Jira/Confluence API), Akamai, Ansible.
- Tailwind CSS, Radix UI, shadcn/ui — design system experience.
- Atomic state management: Jotai, Recoil, or Zustand.

Why join

- Direct product impact: you make the architectural decisions, not a chain of approvals.
- AI-first environment: daily work with LLMs — not as hype, but as the core of the platform.
- Company-paid AI tool subscriptions for work and experimentation.
- Paid IDEs and tooling: JetBrains, extensions, linters, test frameworks.
- Learning budget: courses, certifications, conferences.
- Engineering culture where code reviews, tests, and documentation are the standard — not a formality.

How to apply

Send your CV in PDF IN ENGLISH and links (GitHub/portfolio) plus a short note on a feature you shipped that moved a key metric.

*ДЛЯ ЗАКЛЮЧЕНИЯ КОНТРАКТА НУЖНО ИМЕТЬ ИП РЕСПУБЛИКИ КАЗАХСТАН и СЧЕТ В БАНКЕ ТАК ЖЕ РК

*В СОПРОВОДИТЕЛЬНОМ ПИСЬМЕ УКАЗАТЬ НЕ НИЖЕ КОТОРОГО ВЫ ГОТОВЫ RATE $ PER 1 HOUR

*РАБОТОДАТЕЛЬ НЕ РАССМАТРИВАЕТ НИКАКИХ ВОЗМОЖНЫХ СЛУЧАЕВ ПАРТАЙМА, ВЫ МОЖЕТЕ РАБОТАТЬ ТОЛЬКО С НАМИ