Assurance Engineering Platform Developer SMTS / LMTS

Momentum; Bengaluru; Presencial; INR 3.800.000 - 7.000.000; Tempo integral

Resumo da vaga

Leadout Capital seeks a lead full stack engineer to own the architecture and technical roadmap for a next‑gen Security Assurance GRC platform. You will helm core engines, policy as code, and automated evidence collection while guiding distributed teams across time zones.

Expect hands‑on work in Python/Java and leadership across multi‑quarter initiatives. You will pioneer AI tooling adoption (Claude, Gemini, OpenAI) to accelerate quality and output, mentor senior engineers, and drive technical

Qualificações

• Experience driving architecture for enterprise SaaS or GRC platforms.
• Strong Python/Java background with microservices and cloud-native design.
• Leadership of distributed teams across time zones and async culture.

Responsabilidades

• Own multi-system initiatives from architecture to delivery.
• Design resilient cloud-native microservices and data pipelines.
• Translate business strategies into technical roadmaps and epics.
• Establish governance with CI/CD, testing benchmarks, and security.

Conhecimentos

Python

Java

Full-stack

Architecture

Cloud

CI/CD

Mentorship

Distributed teams

Formação

Bachelor's degree in Computer Science

Ferramentas

Open Policy Agent

OPA/Rego

Docker

Kubernetes

FastAPI

Spring Boot

React

Terraform

Descrição da vaga

The Experience

We are seeking a lead full stack engineer with enterprise software engineering experience to drive the architecture, technical roadmap, and execution for our next-generation Security Assurance Governance, Risk, and Compliance (GRC) platform. In this role, you will hold end-to-end technical ownership over the platform’s core engines—including policy as code, compliance as code, automated evidence collection, telemetry and alerting, and risk evaluation modules. Beyond hands‑on development in Python, Java, and modern front‑end frameworks, you will act as a primary technical leader: defining system architecture, scoping and planning multi‑quarter technical initiatives, and guiding distributed feature teams from concept through deployment. You will also pioneer the team’s operational strategy around AI coding assistants (e.g., Claude, Gemini, OpenAI) to accelerate output and elevate code quality across the engineering organization.

What You'll Actually Be Doing

• End-to-End Ownership: Take technical ownership of complex, multi-system initiatives, driving architectural decisions, technical specifications, phase planning, and execution across the delivery lifecycle.
• Architecture & System Design: Architect resilient, cloud-native microservice architectures that process large-scale compliance telemetry, support automated evidence ingestion, and execute low-latency risk evaluation engines.
• Roadmap & Project Planning: Partner with Product Management, Security Architects, and GRC leaders to translate broad business and regulatory strategies into detailed technical roadmaps, milestones, and sprint backlogs.
• Technical Governance: Establish engineering standards, perform high-impact code and architecture reviews, enforce secure coding guidelines, and institute rigorous CI/CD and testing benchmarks across the engineering org.
• Policy & Governance as Code: Design and implement extensible Policy as Code and Compliance as Code engines (e.g., leveraging Open Policy Agent/OPA or custom evaluation frameworks) and runtime platforms (e.g. CSPM, EDR, etc) that dynamically audit infrastructure and enterprise controls. Constrain the outputs of AI coding assistants with declarative machine-readable rules.
• Automated Evidence Collection: Lead the design of automated evidence collection pipelines integrating with multi-cloud environments (AWS, Azure, GCP), identity providers, enterprise security tools, CI/CD pipelines, ticketing systems, and productivity / corporate applications (Workday, Netsuite, etc).
• Risk & Regulatory Modeling: Build dynamic risk analysis engines and auditing interfaces capable of mapping continuous technical evidence against major regulatory standards (NIST 800-53, ISO 27001, SOC 2).
• AI-Assisted Engineering: Lead the adoption and integration of AI coding assistants (e.g., Claude, Gemini, OpenAI APIs) across the engineering lifecycle to optimize team productivity, automate test generation, and streamline refactoring.
• Mentorship: Actively mentor senior and mid-level engineers across time zones, fostering a culture of technical excellence, accountability, and continuous learning.
• Lead cross-functional alignment and technical discussions across a geographically dispersed team operating in an asynchronous-first culture.

You're Our Person If...

• Experience: 6–13 years of professional full-stack software engineering experience, including 3+ years at the Senior Member of Technical Staff (SMTS) or Lead Member of Technical Staff (LMTS) level leading technical projects and distributed engineering teams.
• Project Ownership Track Record: Proven experience taking complex SaaS platforms or enterprise software projects from architectural inception to production delivery.
• Strategic Execution: Demonstrated ability to break down ambiguous business requirements into high-level architecture designs, concrete technical epics, and actionable execution plans.
• Systems Engineering: Deep mastery of both Python and Java, including enterprise frameworks (e.g., FastAPI, Django, Flask, Spring Boot) and microservices design patterns.
• Front-End Architecture: Advanced proficiency in modern JavaScript/TypeScript frameworks (React, Vue, or Angular), with experience designing scalable component libraries and complex data visualization dashboards.
• AI Tooling & Innovation: Advanced proficiency in leveraging AI coding assistants (Claude, Gemini, OpenAI, GitHub Copilot) to accelerate delivery, paired with a strategic vision for integrating AI into technical workflows.
• Data & Cloud Systems: Strong expertise in relational (PostgreSQL, MySQL) and NoSQL/graph databases, distributed data processing, containerization (Docker, Kubernetes), and public cloud platforms (AWS, Azure, or GCP).
• Regulatory Frameworks: Working knowledge of regulatory standards including NIST SP 800-53, ISO/IEC 27001, and SOC 2 (Trust Services Criteria).
• Compliance Engineering: Direct experience building or architecting systems around continuous control monitoring, automated audit trails, or policy engine evaluation (e.g., OPA/Rego).

Even Better If...

• Prior experience architecting commercial GRC tools, Security Information and Event Management (SIEM), or Cloud Security Posture Management (CSPM) systems.
• Practical experience implementing Open Policy Agent (OPA) or similar policy-as-code domain tools at scale.
• Security certifications such as CISSP, CCSP, or Cloud Security Specialties.
• Experience with Salesforce platform including Lightning Web Components, Apex, and SOQL