Why this role stands out
You'll have the opportunity to build innovative AI tools and a crucial access-governance service, developing your skills in full-stack development, AI, and identity management within a hybrid work environment. This role is ideal for a mid-senior engineer with a strong CS background and experience in AI, AWS, and Microsoft Graph API, offering a chance to make a significant impact on critical projects.
Quick overview
Job description
This resource will be tasked with building and developing a tool for Due Diligence. They need to have both front end and back end development experience as they will be tasked with connecting to multiple different data sources and visualizing this data in the front end. Additionally, they will need experience using AI and building knowledge graphs. If they have experience hosting containerized applications on AWS that would be a plus. The scope of this work will be until the end of the year.
Needs to have experience in Identity Governance and using the Microsoft Graph API to create the security application mentioned in the job description.
Position Requirments:
3-5 years of Full Stack Experience , Computer Science Degree
AWS, Neo4j
AI, Prompt Engineering
IR Domain Expertise
Full-Stack AI & Access-Governance Engineer (Contract)
Team: BTS — M&A / EDGe · Type: Contract (full-time) · Location: Hybrid, U.S. hours · Openings: 3
The role
Build four AI tools for pharma BD/S&E analysts into supportable production services, and build the Deal Access Control Center — an Entra ID / Active Directory reconciliation service that governs access to all of them. Three interchangeable full-stack engineers; you move across backend, frontend, the LLM/agent layer, the Microsoft identity stack, and deployment.
What you'll build
- AI tools (BD Deals Engine, Due Diligence, Triage, Landing Page): add test coverage, move secrets to a vault + service accounts, fix CI/CD and dependency pinning, add observability, extend document extraction (PDF/PPT/XLSX/DOCX), enforce an outbound-data guard, and preserve the RAG + citation-verification quality.
- Deal Access Control Center: an idempotent, hourly reconciliation service that reads the deal "tent list", validates + gates entries (CDA, training), provisions deal-scoped Entra/AD security groups (APP-?Deal>-Owner/Editor/Viewer), and writes an immutable audit log. Integrate consumers by push (SharePoint, Teams, VDRs via Microsoft Graph) and pull (AI tools, Dataverse, ARCH at query time).
Technical requirements
Area | Must have |
Languages | Python 3.11+, TypeScript, SQL |
Backend | FastAPI (async), server-sent events / streaming |
Frontend | React 18, Vite, Node |
AI / LLM | LLM app development: agent tool-use loops, prompt engineering, streaming; RAG — embeddings, vector/similarity search, chunking, source grounding |
Microsoft identity | Entra ID / Azure AD, Microsoft Graph API, security-group provisioning, SharePoint/Teams automation; RBAC, least-privilege, default-deny |
Infra / DevOps | Docker, Kubernetes, CI/CD, secrets management; idempotent scheduled/reconciliation services |
Quality | pytest + Vitest/Jest; adding tests to untested code |
Experience | 3-5 years full-stack; comfortable owning an unfamiliar codebase end-to-end |
Nice to have
Identity governance (IGA — access certification, joiner-mover-leaver, audit logging) · Power Platform / Dataverse (row/column security) · knowledge graphs & Cypher · Claude Code extension points (skills, subagents, MCP connectors) · document parsing (PyMuPDF, python-pptx/docx, openpyxl) · VDR / external-party provisioning · regulated-enterprise deployment (proxy, SSO, internal gateways) · pharma BD / licensing / M&A domain.
Success
Tools are tested, observable, and reproducibly deployed with managed secrets. Access is granted within one hour of a tent-list entry, zero entitlements live outside a deal security group, revocation is immediate, and audit evidence is produced on demand.
Similar jobs
- HA
Back-End EngineerRecently posted
HelloGov AI · Miami, Florida · On-site 🇺🇸
EngineeringSalary not listed - AP

Senior Backend Engineer | Jersey City, NJ |ContractRecently posted
ApTask · Jersey City, NJ · On-site 🇺🇸
MicroservicesSpringSpring Boot+11TechnologySalary not listed - DS
.Net MDM Support Integration LeadRecently posted
Dminds Solutions Inc. · San Diego, CA · On-site 🇺🇸
MicroservicesAWSAPI Gateway+13Salary not listed - RT
Principal Backend Engineer (Golang)Recently posted
RSA Tech Group · United States · Hybrid 🇺🇸
MicroservicesTechnologySalary not listed - BF
Senior Java Backend EngineerRecently posted
BC Forward · Cincinnati, Ohio · Hybrid 🇺🇸
DockerMicroservicesSpring+6Technology$90/hr - BF
Cloud Backend EngineerRecently posted
BC Forward · Jersey City, New Jersey · On-site 🇺🇸
MicroservicesSpringSpring Boot+14Technology$75 - $80/hr - FM

AI-First Backend DeveloperRecently posted
Ford Motor Company · Dearborn · Hybrid 🇺🇸
GCPGitBigQuery+5Technology$99.6k - $192.9k/yr - NS
Senior Backend Engineer – Node.js / NestJS / TypeScriptRecently posted
Neural Strategic Solutions, Inc. · Fort Lauderdale, FL · On-site 🇺🇸
NestJSNode.jsReact+2Technology$60/hr - ES

Java Backend Developer with 12+ years of exp - Must be Local to GA (F2F interview must)Recently posted
Excelon Solutions LLC · GA · On-site 🇺🇸
DockerMicroservicesOracle+15TechnologySalary not listed - NJ
Java AWS Tech leadRecently posted
NJTECH INC. · Irving, TX · On-site 🇺🇸
Stakeholder ManagementAuditingCompliance+3Salary not listed - TA

Sr Backend EngineerRecently posted Auto Apply
Taboola · Los Angeles · Hybrid 🇺🇸
DockerMicroservicesMySQL+14Technology$165k - $185k/yr - CO

Product Engineer (Backend)Recently posted Auto Apply
Conversion · San Francisco Office · On-site 🇺🇸
ConcreteHubSpotMarketing Automation+4TechnologySalary not listed