Remote Full-Stack Engineer – Loan Servicing Platform (Contract)

About the role

We are looking for an experienced remote Full‑Stack Engineer to build a loan‑servicing platform for a US financial services client. The project runs on AWS Amplify with Next.js, TypeScript and a secure, multi‑tenant architecture. The engagement is contract‑based, lasting 3‑4 months and organized around milestone reviews.

Key responsibilities

• Develop the public marketing site and an authenticated customer portal using Next.js 14+ and the App Router.
• Implement a robust API layer (NestJS or equivalent) to support future mobile clients.
• Design and maintain PostgreSQL on Aurora with ACID guarantees for payment posting, balance updates, and statement generation.
• Integrate S3 for secure storage of statements and tax documents, referenced from the relational database.
• Configure Cognito authentication with MFA, token‑based flows, and step‑up re‑auth for sensitive actions.
• Implement multi‑tenant sub‑domain resolution and enforce tenant isolation at data and auth layers.
• Integrate the Repay payment service while keeping PCI‑DSS SAQ A/A‑EP scope.
• Apply least‑privilege IAM policies across the AWS footprint.

Required profile

• Proven production experience with Next.js, TypeScript and core AWS services (Amplify, Cognito, Aurora/RDS, S3, IAM).
• Hands‑on experience handling financial data under GLBA and PCI‑DSS compliance requirements.
• Demonstrated ability to design and maintain multi‑tenant architectures with strict data isolation.
• Comfort working with staged compliance gates and milestone‑based sign‑offs.

Required skills

• Next.js (v14+) with App Router
• TypeScript
• AWS Amplify
• AWS Cognito
• Amazon Aurora (PostgreSQL)
• PostgreSQL
• Amazon S3
• AWS IAM (least‑privilege policies)
• NestJS (or equivalent backend framework)
• PCI‑DSS and GLBA compliance knowledge
• Multi‑tenant architecture design
• Optional: React Native / Expo experience