Full Stack Developer

Position Summary

The Full Stack Developer will design, build, test, and maintain a governance, risk, and compliance tool that supports security control assessments, continuous validation, and evidence collection. The developer will own frontend and backend implementation, establish the development environment and engineering workflows, and deliver multiple API integrations. This role requires practical knowledge of artificial intelligence and machine learning and the ability to translate compliance requirements into reliable software with input from security and compliance subject matter experts. The developer will also manage and maintain the Marcelle Consultants website, which is built in WordPress.

Primary ResponsibilitiesProduct Architecture and Full Stack Development

· Work with product leadership and compliance specialists to define requirements, user stories, acceptance criteria, technical designs, and a prioritized development roadmap.

· Build responsive, accessible user interfaces and backend services for control tracking, assessment workflows, evidence management, findings, remediation tracking, reporting, and dashboards.

· Design databases and data models that preserve relationships between systems, controls, assessment procedures, evidence, findings, and approvals.

· Implement role based access, tenant isolation where applicable, audit trails, document versioning, and traceability from evidence to assessment results.

Development Environment and Delivery

· Configure and document reproducible local, development, testing, and staging environments, including repositories, dependencies, containers, databases, and cloud resources.

· Establish Git branching, pull request reviews, coding standards, automated builds, testing, security checks, and continuous integration and delivery pipelines.

· Implement secure configuration and secrets management, deployment procedures, backup and recovery practices, and rollback methods.

Marcelle Consultants WordPress Website Management

· Manage and maintain the Marcelle Consultants WordPress website, including approved content updates, page changes, navigation, forms, and website functionality.

· Maintain WordPress core, themes, and plugins; manage access, backups, security updates, and restoration procedures. Test changes before release and monitor website availability and performance.

· Troubleshoot website issues, coordinate with hosting and service providers, and document configurations, maintenance activities, and changes.

Developer Processes and Work Tracking

· Configure Jira or an equivalent tool for backlogs, epics, user stories, tasks, defects, sprint planning, ownership, priorities, dependencies, and release tracking.

· Establish Confluence or an equivalent repository for architecture, setup guides, coding standards, API documentation, data models, technical decisions, and operational runbooks.

· Document the development lifecycle, definitions of ready and done, estimation methods, review and approval steps, testing expectations, and change and release management.

· Keep requirements, code changes, test results, defects, and releases linked; report progress, blockers, integration risks, and technical debt.

API Integration and Evidence Collection

· Design, develop, and maintain integrations with security tools, identity providers, cloud platforms, document repositories, and ticketing systems using REST APIs, webhooks, and other supported interfaces.

· Implement secure authentication and authorization, including OAuth 2.0, service accounts, least privilege access, credential storage, and credential rotation.

· Handle pagination, rate limits, retries, timeouts, deduplication, schema changes, error recovery, and scheduled or event driven synchronization.

· Normalize source data and retain source identifiers, timestamps, and collection history so evidence remains traceable and assessment results can be reviewed.

· Validate integration accuracy, monitor connector health and data freshness, and document endpoints, mappings, permissions, setup steps, and troubleshooting procedures.

Artificial Intelligence and Machine Learning

· Apply working knowledge of machine learning, large language models, and AI service APIs to evaluate features such as evidence classification, document extraction, control mapping, and assisted drafting.

· Build and evaluate AI integrations using representative data, measurable acceptance criteria, and human review for com…