Senior AI Engineer, Platform Integration
About The Position
Toppan Merrill is building Quinn, a cloud-based platform that helps law firms, investment banks, and public companies draft, review, and file SEC documents. The Senior AI Engineer will be the founding engineer responsible for securely connecting external AI tools, such as Harvey and ChatGPT Enterprise, to Quinn. The role centers on turning an existing prototype into a production-ready service that meets demanding enterprise security requirements, then owning the service after launch. The engineer will productionize an MCP server using Streamable HTTP, implement OAuth 2.1 sign-in and token exchange with Okta, enforce tool permissions and client-firm-approved document lists, and maintain a complete, immutable, exportable audit trail. The role also includes designing controls for AI-specific risks, testing integrations with external AI tools, supporting client security reviews, and building an internal command-line tool for operations teams. The position owns the integration service end to end and works closely with Identity and Security teams, a Quinn backend engineer, and IT and innovation teams at design-partner law firms. Initial goals include production sign-in in a test environment, approved-document controls and audit logging, and connecting a first external AI tool. Longer-term success includes launching pilots with design-partner firms, passing company and client security reviews and an external penetration test without open critical or high findings, and connecting at least two AI platforms.
Requirements
- At least 6 years of backend or platform engineering experience.
- Deep, hands-on experience with OAuth 2.0 or 2.1 and OIDC, including authorization servers, scopes, audience, PKCE, and token exchange.
- Experience building services that external customers or partners integrate with, including participation in security reviews.
- Security-first engineering habits, including deny-by-default authorization, least privilege, and audit logging.
- Strong TypeScript (Node.js) or Python skills and comfort working in the other language.
- Experience integrating with customers' identity providers, including OIDC or SAML federation and multi-tenant SSO.
Nice To Haves
- Experience with Model Context Protocol (MCP) servers or AI tool and agent integrations.
- Okta administration experience or experience with custom authorization servers.
- Experience integrating with enterprise legal software, document management systems, Harvey, or similar tools.
Responsibilities
- Productionize and own the MCP integration service that external AI tools connect to over the Streamable HTTP transport.
- Implement OAuth 2.1 sign-in using Okta, including token exchange so the service calls Quinn on behalf of the attorney without passing through an external tool's token.
- Enforce permissions for each external tool and restrict access to documents on each client firm's approved list, denying other access by default.
- Maintain an immutable, exportable audit trail of every action taken by external tools, including reads.
- Design controls for AI-specific risks, including tool misuse driven by document content and abnormal bulk document access.
- Test integrations with at least two external AI tools and support client firms' security reviews.
- Build an internal command-line tool for operations teams on the same service.
- Partner with Identity and Security teams on authorization design and client security reviews.
- Collaborate with a backend engineer building corresponding controls inside the Quinn platform and with design-partner law firms' IT and innovation teams.
Benefits
- Enhanced medical, dental, vision, and life insurance for employees and dependents.
- Employer contribution to 401(k).
- Paid time off, including vacation, sick, community involvement, bereavement, jury duty, and holidays.
- Paid parental leave.
- Paid community involvement and volunteer days.
- Wellness resources and Employee Assistance Programming.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
