Senior Software Engineer - Platform, GRC

Meanwhile; San Francisco, Northern (CA, KY); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Meanwhile in San Francisco is seeking a Senior Software Engineer for Platform, GRC. You will own the governance, risk and compliance layer, integrating KYC/KYB/KYT vendors and building our profile system for persons and entities.

You will work directly with compliance and risk teams, write Python backend and React frontend, and apply AI tools with careful judgment. This is an on-site role three days per week with a strong emphasis on precision and auditable decisions.

Qualifications

• 8+ years of professional software engineering experience.
• Direct experience building or operating GRC systems— KYC/KYB onboarding, AML and sanctions screening, or regulatory case management.
• Strong Python and relational database experience with data modeling depth in PostgreSQL or equivalent.
• Experience integrating third‑party vendor APIs where the vendor controls the schema.
• Experience working with non‑technical domain experts— compliance officers, risk teams, auditors, regulators.
• Fluency with AI development tools and the judgment to evaluate their outputs.
• Comfort with ambiguity and self‑taught domain knowledge.
• Low‑ego approach and a high bar for precision.
• Based in the SF Bay Area with the ability to work in‑office 3 days per week

Responsibilities

• Integrate and orchestrate GRC vendors behind interfaces that keep us portable.
• Design internal data model for natural persons and legal entities: identity attributes, documents, ownership, relationships.
• Build the screening and decisioning pipeline for sanctions, PEP, adverse media, and risk scoring.
• Adjudicate conflicting vendor signals and manage matches and thresholds.
• Build the case management, audit trail, and evidence surfaces for compliance and auditors.
• Collaborate with compliance, risk, and legal to translate obligations into working software.
• Write production code across the stack (Python backend, PostgreSQL, React/TypeScript).
• Use AI tooling with judgment to determine when human review is needed.
• Participate in business‑hours on‑call rotation (no nights/weekends)

Skills

Python

PostgreSQL

React/TypeScript

GRC Systems

Vendor API integration

AI tooling

Compliance domain knowledge

Ambiguity management

Tools

Chainalysis

TRM

Elliptic

Job description

About us For institutions Press Login Meanwhile

Senior Software Engineer - Platform, GRC

Full-time · Engineering · San Francisco, CA (3 days/week in office)

An engineer to own our governance, risk and compliance layer - KYC, KYB and KYT vendor orchestration, built on our own authoritative profiles of the people and entities we do business with.

Every customer, broker, and counterparty who touches our platform has to be identified, screened, risk-rated, and monitored - across jurisdictions, across entity types, and in a Bitcoin-denominated product where the transaction side of the question is genuinely novel. We are building the governance, risk, and compliance layer that makes those decisions, records why they were made, and can defend them to a regulator years later.

You’ll own that layer. That means integrating and orchestrating our GRC vendors - KYC, KYB, and KYT - and building Meanwhile’s own authoritative profiles for natural persons and legal entities underneath them. Vendors come and go, change their schemas, disagree with each other, and return results that need adjudication. Our internal model of who someone is, what we know about them, when we learned it, and what decision we made as a result has to outlive any one of them.

This is a specialized, hands‑on engineering role working directly with our compliance and risk functions. It’s deep, precise work with real consequences: these systems are what our license depends on.

We’re looking for someone who wants to go deep here as an individual contributor—the person who understands the compliance core of the platform better than anyone else and owns it.

What You’ll Do

• Integrate and orchestrate GRC vendors - KYC (natural persons), KYB (entities and beneficial ownership), KYT (transaction monitoring and blockchain analytics) - behind interfaces that keep us portable rather than locked in
• Design and build Meanwhile’s internal data model for natural persons and legal entities: identity attributes, documents, ownership and control structures, relationships, provenance, and effective dating
• Build the screening and decisioning pipeline - sanctions, PEP, adverse media, risk scoring, ongoing and perpetual monitoring, re‑screening on change
• Adjudicate conflicting vendor signals: entity resolution, match and false‑positive handling, confidence and review thresholds
• Build the case management, audit trail, and evidence surfaces our compliance team and auditors work from—every decision reproducible, with the inputs it was made on
• Work directly with compliance, risk, and legal to turn regulatory obligation into working systems, and to tell them when what they’ve asked for won’t hold up technically
• Write production code across the stack (Python backend, PostgreSQL, React/TypeScript frontend)
• Use AI tooling to move faster, with the judgment to know when its output needs a second look
• Participate in business‑hours on‑call rotation shared across the engineering team (no nights/weekends)

How We Work

We don’t have product managers. You’ll work with the compliance and risk teams directly to understand the obligation, shape the solution, and explain the tradeoffs— that discovery is part of the job, not something that happens before it reaches you.

We lean into AI tooling and you’ll have it. It’s a real accelerant here, and we expect you to use it well. But compliance systems fail quietly—a screening rule that silently stops firing looks exactly like a clean book until an examiner asks—so the work still rests on thinking carefully about the problem, the data model, and the failure modes.

Qualifications

Required

• 8+ years of professional software engineering experience
• Direct experience building or operating GRC systems— KYC/KYB onboarding, AML and sanctions screening, transaction monitoring, or regulatory case management
• Strong Python and relational database experience, with real data modeling depth in PostgreSQL or equivalent— normalization, temporal and bitemporal data, referential integrity, migrations against live data
• Experience integrating third‑party vendor APIs where the vendor is unreliable, the schema is theirs, and the result still has to be correct and auditable
• Experience working directly with non‑technical domain experts— compliance officers, risk teams, auditors, regulators—and turning their obligations into software
• Fluency with AI development tools, and the judgment to evaluate what they produce
• Comfort with ambiguity and a habit of teaching yourself the domain
• Low‑ego approach and a high bar for precision
• Based in the SF Bay Area with the ability to work in‑office 3 days per week

What Makes You Stand Out

• Experience with blockchain analytics and crypto transaction monitoring (Chainalysis, TRM, Elliptic, or similar) and the specific problems Bitcoin creates for KYT
• Multi‑jurisdiction compliance experience, and familiarity with insurance or banking regulators (BMA, FinCEN, FCA, or equivalent)
• Entity resolution, beneficial ownership modeling, or identity graph work at scale
• Experience supporting an examination, audit, or control framework (SOC 2, ISO 27001) with system‑generated evidence
• Insurance domain exposure, or experience at a licensed financial institution
• Startup experience on small engineering teams (<10 people)

Technical Environment

• Backend: Python
• Database: PostgreSQL
• Frontend: React/TypeScript
• CI/CD: GitHub Actions
• Cloud: AWS

Why Join Us?

• A problem with a right answer: Compliance is unforgiving, and building systems that hold up under examination is genuinely satisfying work
• Real Ownership: You’ll own the GRC layer—the system that decides