Senior Full Stack Developer

📍 Remote | Full-time placement | Overlap with GCC hours (UTC+3)

About the Company

A venture-stage regtech company building internal audit and GRC software for regulated enterprises. The category is the one occupied by TeamMate, Archer and AuditBoard, with a different premise: audit teams compose their own modules rather than waiting on a vendor roadmap. They are live with regulated clients in Saudi Arabia and are building toward sovereign, in-Kingdom deployment. The engineering team is small, senior and agentic-AI native.

The Role

You own a workstream end to end, from spec through production and on-call. Agentic AI is the core of the product, so you will be building orchestration, retrieval and evaluation as product surface rather than as a side experiment. This is a role for someone who scopes their own work and reports outcomes instead of waiting for direction.

Responsibilities

• Own a full workstream end to end: spec, build, ship, maintain, on-call
• Build agentic AI features across tool calling, orchestration, retrieval, evaluation harnesses and guardrails
• Work across the stack, from data model and API design through the product surfaces audit teams use daily
• Turn audit workflows such as control testing, workpapers, evidence and findings into composable product primitives
• Build within data residency and sovereign hosting constraints
• Write clear specs and decision records that the rest of the team can act on
• Sequence your own work, flag blockers early and hold the dates you commit to

Requirements

• Production experience on a large engineering team: you have shipped, maintained and carried on-call for software in real use
• Hands-on experience building agentic AI products, covering tool calling, orchestration, retrieval, evaluation and guardrails
• 2+ years of professional engineering experience if that experience is in the GCC or the United States, 4+ years otherwise
• Strong written and verbal English. You will write specs as well as code
• Project management capability: scope your own work, sequence it, surface blockers early, hit dates
• Comfortable operating with light management and high ownership

Nice to Have

• Worked on internal audit, GRC, risk or regtech software (TeamMate, Archer, AuditBoard, Workiva, Diligent, Vanta, Anecdotes or similar)
• Familiarity with audit and control concepts: control testing, workpapers, evidence, findings, sampling, IIA standards
• Familiarity with regulatory frameworks such as SAMA, NCA, ISO or SOC 2
• Experience with data residency or sovereign hosting requirements

What's on Offer

• Fully remote, based in the Balkans, with close overlap to GCC working hours
• Long-term full-time placement embedded with the client's engineering team
• Full ownership of a workstream, with agentic AI at the centre of the product rather than bolted on
• Live regulated customers from day one
• Compensation at senior Balkan market level, discussed openly on the first call