Software Engineer

Software Engineer

Location: New York, NY (onsite)
Compensation: L3-L5 equivalent
Benefits: Excellent benefits package

Introduction

We are a technology-forward global investment firm where engineering excellence drives competitive advantage. Our security team operates at the intersection of deep technical craft and the systems that keep the firm safe, and we're looking for a builder who thrives there.

This is a software engineering role focused on building the internal products our security, compliance, and legal teams rely on every day. As the firm scales, the processes that govern security reviews and approvals need to run as real software, not spreadsheets and inboxes. We want that capability built in-house, with the persistent context and institutional knowledge no off-the-shelf tool can match.

What’s the role?

You'll design and ship internal-facing products that run the firm's security review, compliance, and legal workflows end-to-end, think a CRM or applicant-tracking system, but built for security operations. You'll own these products from intake through approval and audit, and you'll build the identity and access controls into them.

What you'll do:

• Design, build, and own internal products that manage security reviews, compliance, and legal workflows: intake, triage, review stages, approvals, and audit trails.
• Ship full-stack: Python backend (Django/FastAPI) and a modern JavaScript/TypeScript front end (React).
• Own the identity and access layer inside the products you build: authentication (SSO, SAML, OIDC, OAuth, MFA), authorization (RBAC/ABAC, policy), provisioning (SCIM/IAM), and certificate and key management (PKI, mTLS).
• Partner directly with security, compliance, and legal stakeholders to turn manual, high-friction processes into reliable software.
• Build security in by default: threat modeling, least privilege, and secure SDLC as part of how you ship, not a step at the end.
• Integrate with internal systems and data sources; build the APIs, automation, and integrations that connect these workflows across the firm.
• Own reliability, observability, and the full lifecycle of the tools you deliver.

What we're looking for: 

• A strong full-stack engineer who ships production internal tooling, Python-first, comfortable across the stack.
• Proven experience building workflow, case-management, or CRM-style applications, not just consumer-facing product.
• Hands-on with identity and access: you've built authentication and authorization into applications, and you're comfortable with IAM concepts and PKI/certificates.
• A security-minded builder: you write secure code and think about attack surface, but you ship product, you're not a reviewer or auditor who doesn't build.
• Able to work directly with compliance, legal, and security stakeholders and translate their processes into software.

Qualifications: 

• Bachelor's in Computer Science, Computer Engineering, or related field, or equivalent demonstrated experience.
• 4-5+ years of full-stack software engineering.
• Proficiency in Python; strong modern front-end skills (React/TypeScript).
• Practical experience implementing authentication and authorization, with working familiarity with identity systems and PKI/certificates.
• Strong written and verbal communication; able to work across technical and non-technical audiences.

Benefits:

• Competitive compensation package commensurate with experience.
• Comprehensive health, dental, and vision insurance.
• Opportunities for continuous professional development and training.
• A collaborative and challenging work environment with state-of-the-art technology.

Why You’ll Love It Here: 

You'll build products that matter to the firm from day one, with real users, real complexity, and the autonomy to build the capability the way it should be built. You'll own the identity and access foundations of what you ship rather than handing them off, and you'll work at the center of how security, compliance, and legal actually operate. Compensation is top of market and matched to the caliber of the work.

Ready to Join?

​​​​​​​If you're a full-stack engineer who builds the internal products others depend on, and you want to own the identity and security foundations end-to-end, we encourage you to apply.