The Judge Group is currently seeking a AI/ML Software & Security Engineer to support a federal consulting firm on a part time basis, around 20 hours per week. For immediate consideration email your resume to rkissinger@judge.com. Please, no third parties. This is a w2 only opportunity.
We are seeking a Software & Security Engineer to lead the design, development, and security of our enterprise-grade, multi-tenant AI platform. This role combines strategic architectural vision with hands-on technical leadership, requiring deep expertise in building scalable SaaS systems with robust security controls, AI/LLM integration, and serverless microservices orchestration.
The ideal candidate will architect and implement modular, plugin-based systems with schema-per-tenant isolation, NIST 800-53 compliance, zero-trust security postures, and cutting-edge AI capabilities—while maintaining a strong focus on developer experience and system reliability.
KEY RESPONSIBILITIES
Architecture & System Design
- Design and evolve enterprise-grade, multi-tenant SaaS architecture with schema-per-tenant isolation and comprehensive security controls
- Architect modular plugin-based systems with capability-driven SDK patterns and lazy-loading code-splitting strategies
- Lead microservices design using serverless edge functions (60+ functions) with event-driven, queue-based processing patterns
- Implement CQRS, distributed locking, and hybrid semantic search architectures for high-performance data access
- Design visual workflow engines with DAG execution models supporting 30+ node types for AI agent orchestration
Security Engineering
- Implement and maintain NIST 800-53 compliance controls across AC, AU, IA, SC, and SI control families
- Design and deploy AES-256-GCM encryption at rest with PBKDF2 key derivation for all sensitive credentials
- Build custom JWT authentication systems with MFA (TOTP/SMS), SSO integration (Microsoft, Google, SAML, OIDC), and session management
- Implement Row-Level Security (RLS) policies across 130+ database tables with role-based and group-based access control
- Deploy comprehensive security middleware including IP filtering, geo-blocking, bot detection, rate limiting, and ClamAV virus scanning
- Establish audit logging infrastructure with retention policies and compliance reporting
AI & LLM Integration
- Architect multi-provider LLM orchestration supporting OpenAI, Anthropic Claude, Google Gemini, AWS Bedrock, and xAI
- Design and implement RAG (Retrieval-Augmented Generation) pipelines with pgvector embeddings and hybrid semantic search
- Build Model Context Protocol (MCP) client/server implementations for AI agent tool-use patterns
- Develop AI-powered features including document analysis, proposal generation, email triage, and multimodal content generation
- Create visual node-based agent builders with prompt engineering, guardrails, and multi-expert delegation
Full-Stack Development Leadership
- Lead frontend architecture using React 18, TypeScript, Vite with advanced state management (TanStack Query, Zustand)
- Design component libraries using Tailwind CSS, Shadcn/UI, and Radix UI primitives with design system consistency
- Implement rich text editors (TipTap), canvas manipulation (Konva), and data visualization (Recharts, ReactFlow)
- Build backend infrastructure on Supabase (PostgreSQL, Edge Functions, RLS, Realtime) with 1,400+ SQL migrations
- Develop cross-platform applications (Web via Vercel, Desktop via Electron, Mobile via Capacitor)
Integration & API Development
- Design REST API layers with consumer authentication, per-endpoint permissions, and analytics
- Integrate Microsoft Graph API for SharePoint/OneDrive synchronization with differential sync strategies
- Implement AWS service integrations (S3, SES, SNS, Bedrock, Polly) with custom Signature V4 authentication
- Build communication integrations (Twilio, Azure Communication Services, SendGrid, Resend)
- Deploy Playwright MCP servers for browser automation with Docker containerization
Database Architecture
- Design complex relational schemas with 130+ tables across 10+ functional domains
- Implement trigger-driven automation, materialized views, and RPC functions for business logic
- Optimize vector storage with pgvector for 1024/1536-dimension embeddings
- Create queue-based processing systems with distributed locking and automatic retry mechanisms
- Manage schema evolution through comprehensive migration strategies
REQUIRED QUALIFICATIONS
- 10+ years of software engineering experience with 5+ years in principal roles
- Expert-level proficiency in React, TypeScript, and modern frontend architecture
- Deep expertise in PostgreSQL including RLS, triggers, functions, and performance optimization
- Strong experience with serverless architectures (Supabase Edge Functions, AWS Lambda, or similar)
- Proven track record implementing multi-tenant SaaS systems with tenant isolation strategies
- Hands-on experience with AI/LLM integration and RAG pipeline development
- Advanced knowledge of cryptography (AES-256-GCM, PBKDF2, JWT, OAuth2, SAML)
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.