Full-Stack Developer

About Fulcrum: We're a team of tech-savvy, creative & passionate IT professionals. We've created a vibrant and performance-driven culture for ourselves where everyone is free to think & act outside the box. There are literally no limits to what you can do here, as long as we WOW our clients and OVER deliver what we promise.

We are now looking for FullStack developer for a 5-week contract for the project in cybersecurity domain. The main task is to implement Role-Based Access Control (RBAC) across our Compass platform (NodeJS + MongoDB backend, React frontend). You will own development of the RBAC framework end-to-end, aligning backend authorization, frontend visibility, and audit logging.

Team composition - CEO, CTO, DevLead, PO, QA

Main responsibilities:

Backend
- Extend MongoDB user schema to include role and permission attributes
- Inject role claims into JWT authentication
- Implement RBAC middleware for authorization (authz()) across protected routes in
NodeJS/Express
- Define and apply ROLE_PERMISSIONS for: Org Admin, Portfolio Owner, Product Owner,
Auditor, Engineer, Compliance Manager
- Harden JWT handling (expiry, signature verification)
- Generate structured audit logs for all authorization events

Frontend
- Implement role-aware UI gating in the React Console (conditional rendering, disabled
actions)
- Synchronize frontend constants with backend roles
- Provide demo users for each role
- Add user-friendly 401/403 error handling

Testing & Delivery
- Build automated backend and frontend test suites (≥ 80% coverage) integrated in CI
- Provide role verification demo accounts
- Deliver documentation: role hierarchy, admin guide, and PoV testing checklist
- Run final verification in our staging environment

• 3–6 years full-stack development (NodeJS, Express, React)

• Experience implementing RBAC or similar authorization systems

• Strong understanding of JWT-based authentication and middleware design

• Familiarity with MongoDB schema modeling and query performance

• Advanced level of English

• Frontend experience with conditional rendering, access-driven UI/UX

• Working knowledge of REST APIs, HTTPS security, and CI/CD workflows (GitHub
  Actions preferred)

• Testing frameworks: Jest, Mocha/Chai, React Testing Library

Nice-to-have skills

• Familiarity with OPA or policy-as-code approaches

• Experience with enterprise compliance or governance software

• Prior work in containerized environments (Docker, Kubernetes)

What we offer:

- Flexible schedule & opportunity to work remotely or workspace in Kyiv );
- Friendly & open team who have fun creating cool projects together;
- Opportunity to boost your professional & personal growth;
- Regular team gathering activities;

How we operate:

- We promise dramatic professional growth & interesting work
- Bring ideas that will change how Fulcrum operates, and you will receive our gratitude and rewards
- Your opinion matters. Fulcrum is not a typical 'bureaucratic company, and our employees are our core value
- Your compensation grows with your responsibility zone
- If something doesn't go smoothly or can be simplified, just let us know — you are welcome to do so
- You have a say in everything we do, starting from the roadmap, creating requirements, sprint planning, etc.
- If you feel that everything above is about you, get in touch. We're always glad to welcome stubborn, enthusiastic, and result-oriented buddies to our team

Are you interested in working with us?

LET'S MOVE THE WORLD TOGETHER

Your application has been successfully submitted