Senior Full Stack Engineer – Secure Internal Applications | Remote Contract
LinkedIn posting
100% Remote | 6+ Month Contract |$80/H -$90/HR C2C | 40 hours/week
Logistics
- 100% remote
- Six-month contract with extension potential
- Up to $90/hour C2C, based on experience
- U.S. Citizen, Green Card holder, or EAD holder only; unable to consider H-1B candidates
- No layers; direct C2C only
- Background check required
We’re looking for a senior hands-on engineer to build and support a security-sensitive internal application used for setup, configuration, access-controlled workflows, and operational support.
This is not a pure frontend role or an IAM administration position. We need someone who has personally built secure web applications across the React UI, authentication and authorization flows, API integrations, and production support.
What you’ll do
- Build React-based internal applications and configuration workflows.
- Implement or enhance OAuth/OIDC or SSO authentication and application-level authorization.
- Develop secure REST/JSON API integrations with input validation, useful error handling, and reliable status reporting.
- Apply least-privilege access, secure secrets/configuration practices, and protected user workflows.
- Add logging, telemetry, and troubleshooting support for authentication, authorization, API, and workflow issues.
- Partner with technical and business stakeholders to document application behavior, integrations, and support procedures.
Required profile
- Experience building and maintaining production web applications, internal tools, admin portals, configuration interfaces, or workflow platforms.
- Hands-on experience with OAuth, OpenID Connect, SSO, authentication, or authorization.
- Experience implementing roles, permissions, RBAC, protected routes, claims-based access, or backend authorization checks.
- Strong REST API and JSON integration experience.
- Experience with secure configuration, secrets handling, validation, logging, debugging, and production support.
Preferred background
- Cloudflare Access, Zero Trust, or identity-aware application access.
- Okta, Auth0, Entra ID/Azure AD, Cognito, Ping, Keycloak, or similar identity platforms.
- Secure internal admin applications, provisioning tools, developer portals, or access-management workflows.
- MCP, secure tool integrations, or AI-agent workflow experience.