Senior Full-Stack Engineer – AI Developer

Theomnihire; Mumbai; On-site; INR 1,800,000 - 3,600,000; Full time

Job summary

Theomnihire seeks an experienced Senior Full-Stack Engineer – AI Developer for an in-house Infosec Assessment Platform in Navi Mumbai. You will build end-to-end features, write production-grade code using AI coding assistants, and deploy on Azure App Service with robust security controls across the lifecycle.

You will develop modern front-end and back-end services, implement identity controls, and integrate with SIEM and ticketing systems. Strong cloud, security, and DevOps expertise required.

Qualifications

• 6–9 years of full-stack software development with cloud deployment experience.
• Experience with security tooling and DevSecOps practices in SDLC.

Responsibilities

• Ship Infosec platform features end-to-end using AI coding assistants and ensure security reviews.
• Maintain repo guardrails and build internal MCP servers and skills as needed.
• Develop frontend (React/Next.js/TypeScript) and backend (Node.js/Python/FastAPI) with robust identity controls (OIDC/SAML, MFA/OTP, RBAC).
• Implement model assessment workflows, control catalogues, evidence stores, scoring engines and dashboards aligned to ISO 27001/NIST/CIS.
• Integrate platform features with Microsoft Sentinel, Entra ID, ServiceNow/Jira, and OpenSearch/Elastic for evidence collection and ticketing.
• Engineer production-grade REST APIs, background jobs, and full-stack observability (OpenTelemetry, logging, dashboards).
• Deploy on Azure App Service, Web Apps, Functions; use Key Vault, Private Endpoints, Managed Identity.
• Author IaC (Bicep/Terraform) and set up CI/CD with Azure DevOps or GitHub Actions.
• Embed DevSecOps scanners (SAST, SCA, secrets) in pipelines.

Skills

Full-stack dev

AI integration

Cloud deployment

Security tooling

REST APIs

DevSecOps

Education

B.Tech / M.Tech in CS/IT/Cyber Security

Tools

React

Next.js

TypeScript

Node.js

Python

FastAPI

Azure App Service

Azure Functions

Key Vault

Terraform

Bicep

Job description

Working Hours: 9:00 AM – 6:00 PM

Mode of Interview: Face-to-Face at Navi Mumbai

Headcount: 6 Positions

Position Summary

The Senior Full-Stack Engineer – AI Developer is an individual contributor role responsible for building and shipping end-to-end features for an in-house Infosec Assessment Platform. The incumbent will write production-grade full-stack code using advanced AI coding assistants (Claude Code, Codex, Cursor), deploy and operate the platform on Azure App Service, and embed core security and DevSecOps controls into every layer of the software development lifecycle.

Requirements

Key Responsibilities

Ship Infosec Assessment Platform features end-to-end using AI coding assistants (Claude Code, Codex, Cursor) while executing disciplined reviews of AI-generated code for quality and security.

Maintain repository guardrails (CLAUDE.md, prompt patterns, secrets handling) and build lightweight internal Model Context Protocol (MCP) servers and skills as needed.

Full-Stack Development & Platform Integration:

Develop modern front-end (React, Next.js, TypeScript) and back-end services (Node.js, Python, FastAPI) with robust identity controls including OIDC/SAML, MFA / OTP, and Role-Based Access Control (RBAC).

Model assessment workflows, control catalogues, evidence stores, scoring engines, and reporting dashboards aligned to ISO 27001, NIST CSF, and CIS frameworks.

Integrate platform features with Microsoft Sentinel, Entra ID, ServiceNow / Jira, and OpenSearch / Elastic for seamless evidence collection and ticketing workflows.

Engineer production-grade REST APIs, background job processors, and full-stack observability (OpenTelemetry, structured logging, and dashboards).

Deploy and operate the application platform on Azure App Service, Web Apps, and Azure Functions using Key Vault, Private Endpoints, and Managed Identity.

Author infrastructure-as-code (Bicep / Terraform) and establish automated CI/CD pipelines across Azure DevOps or GitHub Actions for build, test, and release stages.

Embed pipeline-level DevSecOps controls—including SAST, Software Supply Chain / SCA scanning, secret scanning, and container image scanning.

Candidate Profile & Qualifications

Experience: 6 to 9 years of full-stack software development experience with hands-on exposure to cloud deployment and security tooling.

Education: B.Tech or M.Tech in Computer Science, Information Technology, Cyber Security, or a related field.

Core Technical Competencies

Proficiency in modern web stacks (React, Next.js, TypeScript, Node.js, Python, FastAPI) and API architecture.

Hands-on experience leveraging AI coding assistants (Claude Code, Codex, Cursor) and establishing repo guardrails.

Strong working knowledge of cloud-native deployment on Azure (App Service, Functions, Key Vault, Private Endpoints).

Experience with Bicep / Terraform, CI/CD pipelines, and pipeline-embedded DevSecOps scanners (SAST, SCA, secrets).

Certifications

AZ-204: Developing Solutions for Microsoft Azure

AZ-500: Microsoft Azure Security Technologies

AZ-400: Designing and Implementing Microsoft DevOps Solutions

SC-900: Microsoft Security, Compliance, and Identity Fundamentals