JOB DESCRIPTION
The Full Stack Engineer is a pivotal role responsible for the end-to-end design, development, deployment, and maintenance of scalable, high-performance, and secure web applications. This role combines application development (AI-assisted programming) with hands-on ownership of cloud infrastructure, ensuring reliable, secure, and scalable systems on Azure. The engineer would be working on PUB's gen-AI assisted procurement-related web application as part of PUB's AI initiative.
User Engagement & Requirements Gathering:
- Conduct user testing sessions to gather valuable feedback on application functionality and user experience.
- Actively engage with stakeholders and end-users to gather, refine, and translate product functionality requirements into technical specifications/ testable artifacts.
AI-Assisted Development & Code Quality:
- Own end-to-end application delivery (frontend, backend, and cloud), leveraging AI coding assistants to accelerate development while ensuring quality, scalability, and maintainability (DRY, modular design, separation of concerns).
- Build responsive, accessible, and performant web interfaces, using AI to speed up development while retaining full ownership of architecture and reusability.
- Design and operate secure, reliable, and observable backend services and APIs, guiding AI for boilerplate and tests while owning API contracts and data models.
- Review and validate all AI-generated code, identifying hallucinations, logic flaws, and maintainability issues before integration.
Cloud Architecture & Infrastructure:
- Own the end-to-end design, implementation, and operation of Azure infrastructure, ensuring solutions are secure, scalable, highly available, and compliant by design.
- Translate application and security requirements into well-architected Azure reference architectures, balancing performance, cost, and operational complexity.
- Design and implement secure network topologies, including segmented VNets, subnet strategies, private connectivity patterns (Private Endpoints, VNet Integration) to eliminate public exposure of critical services , and network security enforcement using NSGs
- Architect and deploy cloud-native application platforms, leveraging services such as:
- Compute: Azure Kubernetes Service (AKS)
- Integration: API Management (APIM)
- Security: Key Vault, Managed Identities, Entra ID integration
- Edge & Protection: Application Gateway, WAF
- Storage: Azure Blob Storage, Azure PostgreSQL Flexible Server
- Implement secure-by-default infrastructure patterns, including secret management and end-to-end encryption (in transit and at rest)
DevOps:
- Design, implement, and maintain full-stack CI/CD deployment strategies and pipelines, ensuring automated, compliant, and efficient release processes.
Testing & Quality Assurance:
- Establish comprehensive automated test strategies, including unit, integration, and end-to-end testing, ensuring high code coverage.
- Resolve all identified software defects, bugs to maintain application stability and integrity.
Security & Compliance:
- Ensure adherence to IM8 compliance requirements and any other emerging organizational compliance mandates.
- Implement and maintain comprehensive full-stack security measures, including robust authentication, authorization, API security, and frontend security best practices.
- Establish regular SAST, SCA, container image, vulnerability scans and other regular security related scans and resolve identified security vulnerabilities according to compliance timeline.
REQUIREMENTS
Full Stack Development:
- Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology, or related disciplines.
- Experience with Git and modern branching workflows (GitFlow, trunk-based development).
- Strong proficiency in both frontend and backend development.
- Strong understanding of software engineering best practices (DRY, single responsibility principle, meaningful abstraction, testability) and the ability to enforce these standards within an AI-augmented development workflow.
- Strong code review instincts - can catch hallucinations, logic errors, and security issues in AI output
- Working in an agile release model, engineers must be adaptable and proactive to evolving requirements and user feedback.
Technologies:
- [protected info], TypeScript, [protected info], UI component libraries (e.g., ShadCN, Tailwind CSS).
- Experience with relational databases
Security & Compliance:
- Experience with IM8 compliance and system commissioning for government projects
- Strong knowledge of frontend security (CSP, CORS, XSS prevention).
- Experience with backend security (OAuth, JWT, API rate limiting, encryption).
- Familiarity with cloud security (IAM, Secrets Management, OWASP Top 10).
DevOps & Infrastructure:
- Proven experience setting up and managing Azure infrastructure (refer to Azure services listed in the Cloud Architecture & Infrastructure of Key Responsibilities).
- Experience with CI/CD pipelines using GitLab CI
- Experience with containerization and orchestration (Docker, Kubernetes).
Software Quality & Testing:
- Experience with unit and integration testing (Jest, Cypress, Playwright, Pact).
- Backend testing using Postman, Supertest, contract testing.
Observability & Monitoring:
- Experience implementing application performance monitoring (APM) tools (Prometheus, OpenTelemetry).
- Knowledge of logging frameworks (ELK Stack, Loki, Fluentd) to track and debug issues across distributed systems.
Backend Scalability & API Design:
- Strong experience in API design principles
- Knowledge of API rate limiting, caching strategies (Redis, Varnish), and performance optimizations.
- Familiarity with backend service scalability strategies (horizontal scaling, autoscaling, load balancing).
Bonus Experience (Added Advantage):
- Experience with government procurement processes
- Microsoft Certified: Azure Solutions Architect Expert
- Microsoft Certified: Azure Security Engineer Associate
HOW TO APPLY
Please send your application via email: [email protected]
*By submitting your application to [email protected], you acknowledge that you have read, understood, and agreed to CMC Global's REGULATIONS ON THE PROTECTION OF CANDIDATES' PERSONAL INFORMATION.