Full Stack Developer

Position Summary

The Full Stack Developer will design, build, test, and maintain a governance, risk, and compliance tool that supports security control assessments, continuous validation, and evidence collection. The developer will own frontend and backend implementation, establish the development environment and engineering workflows, and deliver multiple API integrations. This role requires practical knowledge of artificial intelligence and machine learning and the ability to translate compliance requirements into reliable software with input from security and compliance subject matter experts. The developer will also manage and maintain the Marcelle Consultants website, which is built in WordPress.

Primary ResponsibilitiesProduct Architecture and Full Stack Development

· Work with product leadership and compliance specialists to define requirements, user stories, acceptance criteria, technical designs, and a prioritized development roadmap.

· Build responsive, accessible user interfaces and backend services for control tracking, assessment workflows, evidence management, findings, remediation tracking, reporting, and dashboards.

· Design databases and data models that preserve relationships between systems, controls, assessment procedures, evidence, findings, and approvals.

· Implement role based access, tenant isolation where applicable, audit trails, document versioning, and traceability from evidence to assessment results.

Development Environment and Delivery

· Configure and document reproducible local, development, testing, and staging environments, including repositories, dependencies, containers, databases, and cloud resources.

· Establish Git branching, pull request reviews, coding standards, automated builds, testing, security checks, and continuous integration and delivery pipelines.

· Implement secure configuration and secrets management, deployment procedures, backup and recovery practices, and rollback methods.

Marcelle Consultants WordPress Website Management

· Manage and maintain the Marcelle Consultants WordPress website, including approved content updates, page changes, navigation, forms, and website functionality.

· Maintain WordPress core, themes, and plugins; manage access, backups, security updates, and restoration procedures. Test changes before release and monitor website availability and performance.

· Troubleshoot website issues, coordinate with hosting and service providers, and document configurations, maintenance activities, and changes.

Developer Processes and Work Tracking

· Configure Jira or an equivalent tool for backlogs, epics, user stories, tasks, defects, sprint planning, ownership, priorities, dependencies, and release tracking.

· Establish Confluence or an equivalent repository for architecture, setup guides, coding standards, API documentation, data models, technical decisions, and operational runbooks.

· Document the development lifecycle, definitions of ready and done, estimation methods, review and approval steps, testing expectations, and change and release management.

· Keep requirements, code changes, test results, defects, and releases linked; report progress, blockers, integration risks, and technical debt.

API Integration and Evidence Collection

· Design, develop, and maintain integrations with security tools, identity providers, cloud platforms, document repositories, and ticketing systems using REST APIs, webhooks, and other supported interfaces.

· Implement secure authentication and authorization, including OAuth 2.0, service accounts, least privilege access, credential storage, and credential rotation.

· Handle pagination, rate limits, retries, timeouts, deduplication, schema changes, error recovery, and scheduled or event driven synchronization.

· Normalize source data and retain source identifiers, timestamps, and collection history so evidence remains traceable and assessment results can be reviewed.

· Validate integration accuracy, monitor connector health and data freshness, and document endpoints, mappings, permissions, setup steps, and troubleshooting procedures.

Artificial Intelligence and Machine Learning

· Apply working knowledge of machine learning, large language models, and AI service APIs to evaluate features such as evidence classification, document extraction, control mapping, and assisted drafting.

· Build and evaluate AI integrations using representative data, measurable acceptance criteria, and human review for compliance judgments and generated content.

· Protect sensitive data and address inaccurate outputs, prompt injection, access permissions, model limitations, service costs, and response time; document evaluations and approved uses.

Quality Security and Operational Support

· Develop appropriate unit, integration, end to end, and API contract tests; investigate defects and resolve performance, reliability, and security issues.

· Implement application logging, monitoring, encryption, input validation, secure dependency management, and vulnerability remediation.

· Support demonstrations, user acceptance testing, production releases, troubleshooting, and handoff to other developers or support personnel.

Required Qualifications

· Demonstrated experience delivering full stack web applications from requirements through deployment and maintenance.

· Proficiency with a modern frontend framework such as React, Angular, or Vue and a backend language or framework such as Python, Node.js, Java, or .NET.

· Experience designing relational databases, building secure APIs, and integrating multiple third party services with authentication and error handling.

· Experience configuring development environments, Git repositories, cloud services, containers, and CI/CD pipelines. Experience managing WordPress websites, themes, plugins, hosting, backups, and updates.

· Ability to establish and maintain engineering workflows and technical documentation in Jira and Confluence or comparable tools.

· Working understanding of machine learning and AI, including model evaluation, limitations, data privacy, and integration of AI services into applications.

· Knowledge of secure software development, automated testing, role based access, audit logging, and protection of sensitive information.

· Strong analytical, communication, documentation, and troubleshooting skills; ability to work independently and collaborate with nontechnical stakeholders.

· Degree in computer science, software engineering, or a related field, or equivalent practical experience.

Preferred Qualifications

· Experience developing GRC, cybersecurity, workflow, document management, or enterprise SaaS applications.

· Familiarity with the Risk Management Framework, NIST security controls, FedRAMP, CMMC, and evidence used in security control assessments.

· Experience with OSCAL, structured compliance data, automated evidence collection, and integrations with security or cloud monitoring tools.

· Experience with retrieval augmented generation, document processing, search, background job queues, and scalable integration architectures.

Pay: $80,000.00 - $125,000.00 per year

Work Location: Remote