Senior Full-Stack Engineer, Taktile

• 5+ years of professional full-stack experience building backend services in Python (FastAPI or equivalent), including REST APIs and databases
• Strong proficiency with React and TypeScript
• Experience building access control systems, with exposure to authentication and authorization concepts (RBAC, SSO, OAuth/OIDC, multi-tenant permissions)
• Strong engineering fundamentals with a passion for simplicity and precision
• Experience integrating into AWS or similar cloud providers
• Fluency in English, both written and spoken, is essential as we operate in a remote environment requiring clear and effective communication

Desirable

• Our Engineering and Product Design teams are building multiple verticals on our platform at high speed, leveraging AI and building agentic functionality into the platform itself. As we scale into the world's largest regulated financial institutions, identity and access management (IAM), authorization, and fine-grained permissions have become foundational to our enterprise readiness
• We are hiring a Full-Stack Engineer to join the team building Taktile's IAM and permissions platform: the authorization backbone that powers enterprise-grade access control across our product
• Joining us, you'll design and build permission models and access controls end-to-end, from the React/TypeScript access-management and admin UIs down to the Python (FastAPI) authorization services
• You'll take on the problems that make enterprise authorization genuinely hard: multi-tenant isolation, fine-grained permission checks in the hot path of millions of decisions a day, audit and access trails, and the constraints of regulated financial services
• Design, build, and operate core authorization primitives such as roles, policies, and fine-grained permission checks (RBAC/ReBAC), along with the authentication and SSO/OAuth/OIDC flows that sit on top of them
• Guarantee strict multi-tenant isolation so every customer's data and decisions stay fully segregated
• Keep fine-grained permission checks fast in the hot path of millions of automated decisions per day, where both latency and correctness are non-negotiable
• Build audit and access-trail capabilities that give customers and auditors a verifiable record of who accessed what, when, and why
• Design for regulated-industry constraints (financial services, SOC 2 / ISO 27001, data residency), where access control is a compliance requirement, not just a feature
• Leverage leading edge AI tools (e.g. Claude) on a daily basis to build industry-shaping AI-native capabilities