GRC Engineer for San Jose, CA

Job Title: GRC Engineer (Python Backend & Compliance Engineering)

Location: San Jose, CA / Lehi, UT

Work Model: 100% Onsite (Preferred)

Duration: 12+ Months

Experience Required: 8–12+ Years

---

Job Summary

We are seeking a highly skilled and hands-on GRC Engineer with strong expertise in Python backend development, modern cloud-native architectures, and compliance engineering. The ideal candidate will possess deep experience building secure, scalable, audit-ready platforms and implementing governance, risk, and compliance (GRC) capabilities through engineering solutions rather than policy-only initiatives.

This role requires a builder mindset and strong technical expertise across backend development, microservices, databases, security engineering, DevSecOps, and compliance automation frameworks.

---

Mandatory Skills

Backend Development

• Python
• REST API Development
• Backend Engineering
• Microservices Architecture
• Distributed Systems
• JSON Processing
• System Design
• Scalable Application Development

Frontend & Full Stack (Preferred)

• Node.js
• React.js
• Database Schema Design
• Full Stack Development

Cloud & Containerization

• Amazon Web Services (AWS)
• Docker
• Kubernetes
• Cloud-Native Architecture
• Containerized Applications

Database Technologies

• PostgreSQL
• MongoDB
• Oracle Database
• SQL
• NoSQL Databases
• Database Schema Design
• Data Modeling
• Query Optimization

Security Engineering

• Role-Based Access Control (RBAC)
• OAuth2
• JWT Authentication
• Identity and Access Management (IAM)
• Encryption
• Audit Logging
• Secure Coding Practices
• Security Architecture

Governance, Risk & Compliance (GRC)

• Governance, Risk & Compliance (GRC)
• Compliance Engineering
• Compliance Automation
• Audit-Ready Systems
• Risk & Control Platforms
• Governance Workflows
• Security Controls Implementation

Compliance Frameworks

• SOC 2
• ISO 27001
• NIST
• FedRAMP
• Enterprise Compliance Standards

DevSecOps

• CI/CD Pipelines
• DevSecOps
• Secure SDLC
• Security Automation
• Compliance Integration

---

Good-to-Have Skills

Python Frameworks

• FastAPI
• Flask

Infrastructure & Automation

• Terraform
• AWS CloudFormation
• Infrastructure as Code (IaC)

Monitoring & Observability

• Prometheus
• Grafana
• Datadog
• Amazon CloudWatch

Advanced Technologies

• GenAI for Compliance Automation
• AI-Driven Compliance Platforms
• Real-Time Compliance Monitoring
• Data Governance
• Data Lineage
• Audit Traceability Systems

Domain Experience

• Banking
• Healthcare
• FinTech
• Enterprise Compliance Systems

---

Key Responsibilities

GRC Platform Engineering

• Design and develop secure, scalable Governance, Risk, and Compliance platforms.
• Build compliance automation capabilities and audit-ready systems.
• Develop governance workflows and risk management applications.
• Implement technical controls aligned with enterprise compliance frameworks.

Backend Development

• Design and develop RESTful APIs and backend services using Python.
• Build scalable microservices-based applications using modern architectures.
• Develop reusable components and integration services.
• Process and manage JSON-based APIs and enterprise data flows.

Full Stack Development

• Collaborate on frontend features using:
  • Node.js
  • React.js
• Design and maintain database schemas and application data models.
• Support end-to-end solution development.

Cloud & Platform Engineering

• Architect and deploy cloud-native applications on AWS.
• Build and manage containerized environments using:
  • Docker
  • Kubernetes
• Support highly scalable and secure cloud platforms.

Database Engineering

• Design and maintain relational and NoSQL database solutions.
• Develop and optimize:
  • PostgreSQL
  • MongoDB
  • Oracle
• Implement data models and schema optimization strategies.

Security Engineering

• Implement enterprise-grade security controls including:
  • RBAC
  • OAuth2
  • JWT Authentication
  • IAM
  • Encryption
  • Audit Logging
• Ensure adherence to secure coding standards and security best practices.

Compliance Automation & Controls

• Build and integrate compliance controls into engineering platforms.
• Develop automation supporting:
  • SOC 2
  • ISO 27001
  • NIST
  • FedRAMP
• Design risk and control management workflows.
• Support audit readiness and evidence collection processes.

DevSecOps & Automation

• Integrate security and compliance controls into CI/CD pipelines.
• Implement DevSecOps principles and secure SDLC practices.
• Automate compliance validation and control monitoring.

Observability & Monitoring

• Implement monitoring and observability solutions using:
  • Prometheus
  • Grafana
  • Datadog
  • CloudWatch
• Develop real-time compliance and operational monitoring capabilities.

Collaboration & Leadership

• Collaborate with:
  • Security Teams
  • Compliance Teams
  • Platform Engineering Teams
  • Product Teams
  • Architecture Teams
• Translate compliance requirements into scalable engineering solutions.
• Participate in architecture reviews and technical decision-making.

---

Required Qualifications

• Bachelor's Degree in:
  • Computer Science
  • Information Technology
  • Engineering
  • Cybersecurity
  • Related Technical Discipline
• 8–12+ years of experience in:
  • Software Engineering
  • Backend Development
  • Cloud Engineering
  • Security Engineering
  • Compliance Engineering
• Strong hands-on experience with:
  • Python
  • REST APIs
  • Microservices
  • Docker
  • Kubernetes
  • AWS
• Strong experience with:
  • SQL and NoSQL Databases
  • Database Schema Design
  • Security Implementation
  • DevSecOps
  • CI/CD Pipelines
• Deep understanding of:
  • SOC 2
  • ISO 27001
  • NIST
  • FedRAMP
  • Governance & Risk Frameworks
• Proven experience building systems and platforms, not just performing policy or audit activities.
• Excellent communication, analytical, and problem-solving skills.

---

Important Hiring Manager Note

This is a highly technical GRC Engineering role.

The client is specifically seeking candidates who have:

• Strong software engineering and system-building experience.
• Hands-on development expertise in Python and cloud technologies.
• Experience implementing compliance and security controls through engineering solutions.
• Experience building scalable platforms and automation frameworks.

---
Thanks & Regards
Ishita Bali
Novia Infotech LLC
4421 Avenida Ln, McKinney, TX 75070
Email: ishita.b@noviainfotech.com

--
You received this message because you are subscribed to the Google Groups "NoviaJobs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to noviajobs+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/noviajobs/CAGiqXEA%2BX1WNaC1fWf4DTwTgZC%3Dq7nhSEqrbTeP2Rs92hiMwdg%40mail.gmail.com.