Senior MERN Stack Engineer — Enterprise SaaS Platform
Location: On-site
Type: Full-time
Team: Product Engineering
About the Role
Lurny is an enterprise SaaS Ai powered EdTech platform with dynamic routes, multi-tenant architecture, role-based personas, dynamic UI systems, and enterprise access controls. We’re looking for a strong Senior MERN Engineer who has built serious enterprise-grade systems — RBAC, audit logging, tenant isolation, feature gating, SSO, and dynamically controlled UIs — not just CRUD applications. You’ll work on React frontend + Node.js backend, helping scale and improve an already large codebase while making it cleaner, more secure, and more maintainable. This role is not just about building features — we need someone who can improve architecture, reduce tech debt, harden security, and help move the platform toward TypeScript over time.
What You’ll Do
● Maintain and scale the React 18 + Vite frontend (100+ routes, lazy-loaded, role-gated)
● Build and harden the Node.js + Express + MongoDB backend
● Improve the existing codebase through cleanup, refactoring, and architectural improvements
● Help drive a gradual migration toward TypeScript
● Strengthen application security, permission systems, and secure defaults
● Design fine-grained access control systems — RBAC, ABAC, feature flags, tenant isolation
● Build audit logging for sensitive actions (who did what, when, where, why)
● Create dynamic, permission-aware UIs driven by role, tenant, plan, and feature flags
● Work on SSO authentication, Active Directory (AD), OAuth, SAML/OIDC integrations
● Collaborate with the Python AI team on REST + WebSocket APIs
● Ship clean, performant, accessible enterprise-grade UIs
Must-Have Skills
React Frontend
● 4+ years React (Hooks ,State/Context management , Suspense, lazy loading, code splitting)
● React Router v6 (protected + role-based routing)
● Redux Toolkit for large-scale state management
● Vite, TailwindCSS, responsive UI
● Strong JavaScript (ES6+) and component architecture
● REST + WebSocket integrations
● Authentication flows (JWT, OAuth, SSO, SAML/OIDC)
● Experience building production-grade PWAs (offline handling, caching strategies, manifests, installability, service workers)
Node.js Backend
● 4+ years Node.js + Express
● MongoDB + Mongoose (schema design, indexing, aggregations)
● SSO, OAuth, Active Directory (AD), SAML/OIDC integrations
● File uploads (Multer, S3/GCS)
● Async workflows, queues, webhooks, inter-service communication
● API versioning, rate limiting, robust error handling
● Security best practices for enterprise systems
Enterprise Access Control (Critical)
● RBAC with hierarchical roles
● ABAC (tenant, department, cohort, plan, region-based policies)
● Feature flags & runtime UI gating
● Audit logging for privileged actions
● Multi-tenant systems with strict tenant isolation
● Server-driven UI visibility & permission-aware components
● Strong understanding of least privilege, separation of duties, and secure defaults
AI Coding Tools (Required)
● Strong with Claude Code (preferred), Cursor, or Antigravity
● Can review AI-generated code critically and spot hallucinated APIs
● Uses AI tools for navigation, refactoring, debugging, and large codebase changes
Nice to Have
● Azure, Docker, CI/CD
● Redis, Socket.IO
● TypeScript experience (or experience migrating large JS apps to TS)
● Claude Design or AI-assisted UI iteration tools
● Experience working on SaaS product implementations
● Strong UI/UX intuition and Figma literacy
● Design systems (shadcn/ui, Radix)
● Animation libraries (Framer Motion)