Principal Full Stack Developer

Kobalt Security Inc.•Remote, BC

1d•Remote

About The Position

At Kobalt.io, our mission is to solve cybersecurity for SMBs at scale. We believe small businesses are the engine behind innovation and growth. Understanding the challenges that our customers have enabled us to design and refine scalable cybersecurity services that support a secure path to growth. This is reflected in everything we do from the programs we build, to the partnerships we have developed with companies such as Vanta, Prescient and Sumo Logic. We are seeking an experienced full-stack developer to own the backend of our centralized information infrastructure. This will include role-based access control, data lake house design and implementation, credential management, and other unlocks for company-wide systems. You will work directly with the project lead on an accelerated timeline to ship v1. You will have an outsized impact on architecture, code quality and technical direction.

Requirements

8+ years of production engineering experience with 5+ years in a senior IC role
Strong TypeScript proficiency with production UIs
Proven experience with multi-tenancy patterns such as per-tenant credentials, isolation and RBAC
Experience with Postgres at scale: schema design, query optimization, migrations under load
Distributed systems experience: async pipelines, scheduling, retries and idempotency
Excellent technical writing: you’ll author specs, runbooks and ADRs
Security mindset: authn / authz / audit by default, not as an afterthought
Experience building internal and external tooling at scale
Experience with observability tooling: OpenTelemetry, structured logging and distributed tracing
Comfortable working in ambiguous environments: the project is fluid and you will help shape it

Nice To Haves

Experience with cybersecurity, governance, risk and compliance, privacy, penetration testing, cloud security or other information security fields is a benefit
LLM-augmented application work
Compliance experience (SOC 2, ISO 27001)
Infrastructure-as-code (Terraform, Pulumi)

Responsibilities

Build and ship core platform components such as data lake house, RBAC, multi-tenant credential management, audit chain and named-query layer
Productionize ingestion pipelines with real schedulers, dead-letter queues, and per-tenant fan-out
Own core system design, architecture and technical direction
Influence code conventions, workflows and hiring