[Hiring] AI Full Stack Engineer @TekWissen

Role Description

This resource will be tasked with building and developing a tool for Due Diligence. They need to have both front end and back end development experience as they will be tasked with connecting to multiple different data sources and visualizing this data in the front end. Additionally, they will need to have experience working in GitHub as well. If they have experience hosting containerized applications on AWS that would be a plus.

The role includes:

• Build four AI tools for pharma BD/S&E analysts into supportable production services.
• Build the Deal Access Control Center — an Entra ID / Active Directory reconciliation service that governs access to all of them.
• Three interchangeable full-stack engineers; move across backend, frontend, the LLM/agent layer, the Microsoft identity stack, and deployment.

What you'll build:

• AI tools (BD Deals Engine, Due Diligence, Triage, Landing Page):
  • Add test coverage.
  • Move secrets to a vault + service accounts.
  • Fix CI/CD and dependency pinning.
  • Add observability.
  • Extend document extraction (PDF/PPT/XLSX/DOCX).
  • Enforce an outbound-data guard.
  • Preserve the RAG + citation-verification quality.
• Deal Access Control Center:
  • An idempotent, hourly reconciliation service that reads the deal "tent list".
  • Validates + gates entries (CDA, training).
  • Provisions deal-scoped Entra/AD security groups (APP--Owner/Editor/Viewer).
  • Writes an immutable audit log.
• Integrate consumers by push (SharePoint, Teams, VDRs via Microsoft Graph) and pull (AI tools, Dataverse, ARCH at query time).

Qualifications

• 3-5 years full-stack experience.
• Comfortable owning an unfamiliar codebase end-to-end.

Requirements

• Languages:
  • Python 3.11+.
  • TypeScript.
  • SQL.
• Backend:
  • FastAPI (async).
  • Server-sent events / streaming.
• Frontend:
  • React 18.
  • Vite.
  • Node.
• AI / LLM:
  • LLM app development: agent tool-use loops, prompt engineering, streaming.
  • RAG — embeddings, vector/similarity search, chunking, source grounding.
• Microsoft identity:
  • Entra ID / Azure AD.
  • Microsoft Graph API.
  • Security-group provisioning.
  • SharePoint/Teams automation.
  • RBAC.
  • Least-privilege.
  • Default-deny.
• Infra / DevOps:
  • Docker.
  • Kubernetes.
  • CI/CD.
  • Secrets management.
  • Idempotent scheduled/reconciliation services.
• Quality:
  • pytest + Vitest/Jest.
  • Adding tests to untested code.

Nice to have

• Identity governance (IGA — access certification, joiner-mover-leaver, audit logging).
• Power Platform / Dataverse (row/column security).
• Knowledge graphs & Cypher.
• Claude Code extension points (skills, subagents, MCP connectors).
• Document parsing (PyMuPDF, python-pptx/docx, openpyxl).
• VDR / external-party provisioning.
• Regulated-enterprise deployment (proxy, SSO, internal gateways).
• Pharma BD / licensing / M&A domain.

Success

• Tools are tested, observable, and reproducibly deployed with managed secrets.
• Access is granted within one hour of a tent-list entry.
• Zero entitlements live outside a deal security group.
• Revocation is immediate.
• Audit evidence is produced on demand.

Benefits

• TekWissen® Group is an equal opportunity employer supporting workforce diversity.