Full Stack Engineer

Gushcloud International; Singapore; Hybrid; SGD 90,000 - 150,000; Full time

Job summary

Gushcloud International is seeking a Full Stack Engineer to build and scale AI-powered software products with a modern stack (TypeScript/NestJS, Python, AWS). You’ll own features end-to-end—from API design to deployment—on a hybrid basis with Singapore-based duties and monthly office visits as needed.

You’ll extend the core platform, implement secure API endpoints, and contribute to billing, CRM, and document workflows.

Qualifications

• 4+ years TypeScript experience with NestJS or a decorator-based framework.
• Proficiency in Python service workers and async processing.
• Hands-on AWS (IAM, S3, Secrets Manager, KMS) and PostgreSQL migrations.
• Experience designing REST APIs with DTO validation and security controls.
• Ability to own a feature end-to-end with minimal guidance.

Responsibilities

• Extend NestJS core and custom modules for AI-powered products.
• Write Prisma migrations against Aurora PostgreSQL and manage migrations.
• Build and secure API endpoints with proper validation and guards.
• Enhance billing features and reconciliation workflows.
• Operate AWS CDK stacks and ensure secure, scalable infrastructure.
• Own end-to-end delivery across core platform and client projects.

Skills

TypeScript

NestJS

Prisma

REST APIs

DTO validation

Auth guards

Python

AWS

PostgreSQL

DevOps

Ownership mindset

Tools

AWS CDK

BullMQ

Next.js

Tailwind CSS

Job description

Location: Singapore, Remote (you may need to come to the office 1-2x a month on a needs basis)

Type: Contract / Outsourced, Full-time hours

About the Role

We're looking for a Full Stack Engineer to help build and scale AI-powered software products and automation solutions used by enterprise clients. You'll work on a modern development platform that supports multiple products and projects, with a strong focus on rapid product development, automation, and scalable architecture.

The core platform is built on a NestJS backend and extended through custom modules covering authentication, billing, CRM, task management, and document workflows. The technology stack includes TypeScript/NestJS, Python service workers, and AWS infrastructure (Aurora PostgreSQL, SSM, Secrets Manager, and CDK).

In this role, you'll own new features end-to-end—from API design and backend services to dashboard implementation and deployment. You'll work across both the core platform and a variety of active product initiatives and client-facing projects, helping shape technical decisions and deliver impactful solutions.

What You'll Own

• Extend the NestJS core and custom module system
• Write Prisma migrations against Aurora Serverless v2
• Build and harden API endpoints: DTO validation, auth guards, rate limiting, input sanitization
• Extend the billing ledger: usage caps, per-feature cost tracking, period management, reconciliation

Infrastructure & Security

• Operate AWS: CDK stacks (VPC, Aurora, Redis, S3 with KMS CMK, CloudTrail, GuardDuty, SSM session logging)
• Identify and close attack surfaces: auth bypass paths, over-permissioned roles, unvalidated inputs, insecure defaults
• Work in iOS environments
• Manage Next.js App Router, Tailwind CSS across platforms
• Manage all support tickets / bug fixes across platforms

Required Experience

• 4+ years TypeScript: NestJS (or equivalent decorator-based framework), Prisma, REST API design, DTO validation, guard/interceptor patterns
• Python: async service workers; you can read and extend a data processing or inference loop
• AWS: IAM, Aurora PostgreSQL, SSM Session Manager, Secrets Manager, KMS, S3
• PostgreSQL: real migrations, row-level security, comfortable with EXPLAIN ANALYZE
• System operations: ssh, rsync, launchd/systemd, debugging a remote production node without GUI tools
• Ability to own a task end-to-end with minimal hand-holding

Nice to Have

• AWS CDK (TypeScript constructs)
• Redis pub/sub or BullMQPgvector or any embedding / vector similarity work
• Apple Silicon / MLX or ONNX Runtime experience
• Next.js App Router, Tailwind CSS
• Experience deploying to physical on-premises hardware, not just cloud infrastructure
• Prior work on compliance-adjacent systems (FedRAMP, SOC 2, HIPAA, CJIS, or equivalent)