Senior Full-Stack Engineer – AI Developer

TOCUMULUS; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

TOCUMULUS in Navi Mumbai seeks a Senior Full-Stack Engineer – AI Developer to build and ship end-to-end features for an in-house Infosec Assessment Platform, writing production-grade code with AI coding assistants and deploying on Azure App Service.

You will use React/Next.js/TypeScript on the front end and Node.js/Python/FastAPI on the back end, with RBAC, MFA/SSO, and DevSecOps controls embedded across the SDLC.

Qualifications

• 6–9 years of full-stack software development experience with hands-on exposure to cloud deployment and security tooling.

Responsibilities

• AI-Assisted Product Engineering: Ship Infosec Platform features end-to-end using AI coding assistants while ensuring code quality and security.
• Full-Stack Development & Platform Integration: Build front-end and back-end services with robust identity controls (OIDC/SAML, MFA, RBAC) and integrate with monitoring and ticketing tools.
• Azure Hosting & DevSecOps Infrastructure: Deploy on Azure App Service/Functions, write IaC (Bicep/Terraform), and implement CI/CD pipelines with SAST/SCA and secret scanning.

Skills

React

Next.js

TypeScript

Node.js

Python

FastAPI

OIDC/SAML

MFA/OTP

RBAC

OpenTelemetry

Azure

Education

B.Tech or M.Tech in CS/IT/Cyber Security

Tools

Azure App Service

Azure Functions

Key Vault

Terraform

Bicep

CI/CD (Azure DevOps / GitHub Actions)

SAST/SCA/secret scanners

Job description

Working Hours: 9:00 AM – 6:00 PM

Mode of Interview: Face-to-Face at Navi Mumbai

Headcount: 6 Positions

Position Summary

The Senior Full-Stack Engineer – AI Developer is an individual contributor role responsible for building and shipping end-to-end features for an in-house Infosec Assessment Platform. The incumbent will write production-grade full-stack code using advanced AI coding assistants (Claude Code, Codex, Cursor), deploy and operate the platform on Azure App Service, and embed core security and DevSecOps controls into every layer of the software development lifecycle.

Requirements

Job Title: Senior Full-Stack Engineer – AI Developer

Location: Navi Mumbai

Working Hours: 9:00 AM – 6:00 PM

Mode of Interview: Face-to-Face at Navi Mumbai

Headcount: 6 Positions

Position Summary

The Senior Full-Stack Engineer – AI Developer is an individual contributor role responsible for building and shipping end-to-end features for an in-house Infosec Assessment Platform. The incumbent will write production-grade full-stack code using advanced AI coding assistants (Claude Code, Codex, Cursor), deploy and operate the platform on Azure App Service, and embed core security and DevSecOps controls into every layer of the software development lifecycle.

Key Responsibilities

• AI-Assisted Product Engineering:
  • Ship Infosec Assessment Platform features end-to-end using AI coding assistants (Claude Code, Codex, Cursor) while executing disciplined reviews of AI-generated code for quality and security.
  • Maintain repository guardrails (CLAUDE.md, prompt patterns, secrets handling) and build lightweight internal Model Context Protocol (MCP) servers and skills as needed.
• Full-Stack Development & Platform Integration:
  • Develop modern front-end (React, Next.js, TypeScript) and back-end services (Node.js, Python, FastAPI) with robust identity controls including OIDC/SAML, MFA / OTP, and Role-Based Access Control (RBAC).
  • Model assessment workflows, control catalogues, evidence stores, scoring engines, and reporting dashboards aligned to ISO 27001, NIST CSF, and CIS frameworks.
  • Integrate platform features with Microsoft Sentinel, Entra ID, ServiceNow / Jira, and OpenSearch / Elastic for seamless evidence collection and ticketing workflows.
  • Engineer production-grade REST APIs, background job processors, and full-stack observability (OpenTelemetry, structured logging, and dashboards).
• Azure Hosting & DevSecOps Infrastructure:
  • Deploy and operate the application platform on Azure App Service, Web Apps, and Azure Functions using Key Vault, Private Endpoints, and Managed Identity.
  • Author infrastructure-as-code (Bicep / Terraform) and establish automated CI/CD pipelines across Azure DevOps or GitHub Actions for build, test, and release stages.
  • Embed pipeline-level DevSecOps controls—including SAST, Software Supply Chain / SCA scanning, secret scanning, and container image scanning.

Candidate Profile & Qualifications

• Experience: 6 to 9 years of full-stack software development experience with hands-on exposure to cloud deployment and security tooling.
• Education: B.Tech or M.Tech in Computer Science, Information Technology, Cyber Security, or a related field.
• Core Technical Competencies:
  • Proficiency in modern web stacks (React, Next.js, TypeScript, Node.js, Python, FastAPI) and API architecture.
  • Hands-on experience leveraging AI coding assistants (Claude Code, Codex, Cursor) and establishing repo guardrails.
  • Strong working knowledge of cloud-native deployment on Azure (App Service, Functions, Key Vault, Private Endpoints).
  • Experience with Bicep / Terraform, CI/CD pipelines, and pipeline-embedded DevSecOps scanners (SAST, SCA, secrets).
• Certifications:
  • AZ-204: Developing Solutions for Microsoft Azure
  • AZ-500: Microsoft Azure Security Technologies
  • AZ-400: Designing and Implementing Microsoft DevOps Solutions
  • SC-900: Microsoft Security, Compliance, and Identity Fundamentals