Senior AI Software Engineer

EZETech is hiring a senior engineer who builds with AI every day and can still read, defend, and secure every line that ships. You will take our internal security and compliance platforms from single-builder projects to multi-tenant SaaS that regulated clients can trust. About EZETech EZETech is a managed security service provider on Florida's Treasure Coast. Our nine-person team secures roughly 600 endpoints for dental, medical, and financial clients, and we operate under HIPAA, SOC 2, PCI DSS, CMMC 2.0, and ISO 27001. We build our own tooling: our internal platforms cover compliance automation, vulnerability and exposure management, endpoint application control, and service operations, and we are building a combined CRM and EHR for behavioral health clinics. The next step is selling these platforms to other providers as SaaS. Today they are built largely by our founder using AI coding agents. This role adds the engineering depth that turns working software into products that survive audits, attackers, and paying tenants. What you will build and own (reporting directly to the founder) - Product engineering: multi-tenant SaaS features across our security and compliance platforms, front end to database - AI-assisted delivery with accountability: use coding agents such as Claude Code, then review, test, and own the output. If you cannot explain a change, it does not merge - Agent and LLM systems: agent workflows, tool integrations, and retrieval pipelines on hosted APIs and local inference, defended against prompt injection, data leakage, and excessive agent permissions - Security architecture: authentication, authorization, tenant isolation, secrets management, encryption, audit logging, and threat modeling - Infrastructure and networking: deployments, CI/CD, DNS, TLS, reverse proxies, private mesh networking, firewalls, backups, and tested restores - Regulated data handling: systems for protected health information with controls that hold up in a HIPAA or SOC 2 audit - Hardening existing code and operational ownership: fix weak points in priority order, monitor what you ship, respond when it breaks, write the postmortem Required qualifications - 5+ years building production software, including at least one SaaS product you helped ship and then operate - Strong in TypeScript/Node, Python, or Go, plus a modern front-end framework such as React - Solid PostgreSQL (or equivalent) skills: schema design, migrations, indexing, row-level access control - Disciplined with Git, code review, automated tests, and CI/CD; able to find bugs and security flaws in unfamiliar and AI-generated code - Working knowledge of the OWASP Top 10; has correctly implemented OAuth 2.0/OIDC, SSO, MFA, session handling, and role-based access - Understands multi-tenant isolation, secrets, keys, and encryption in transit and at rest; thinks in least privilege, logging, and recoverability - Understands TCP/IP, DNS, TLS, HTTP, reverse proxies, VPNs, and firewall rules well enough to debug with a packet capture - Has run services on Linux with containers, designed backups, and performed a real restore - Daily, fluent user of AI coding agents with a clear verification process; has built with LLM APIs beyond a chat wrapper (tool use, agents, structured output, retrieval, or evaluation) and understands hallucination, prompt injection, and context limits - Authorized to work in the United States and able to pass a background check (you will access systems protecting patient and financial data) - Clear written communication: you document decisions, risks, and how to recover Preferred qualifications - Experience at an MSP, MSSP, or security software vendor - Built software under HIPAA, SOC 2, PCI DSS, CMMC, or ISO 27001, or answered the questions in an audit - Healthcare software experience: EHR or practice management, HL7 or FHIR - Endpoint/systems work: Windows internals, agents and services, Active Directory, PowerShell - Local model inference (Ollama or similar), GPU hosts, and workflow automation such as n8n - Offensive security exposure: penetration testing, CTFs, bug bounty, or OSINT tooling - Security certifications are welcome but do not replace shipped work Who this role is not for - You prompt until it runs and ship it without reading the diff - You cannot explain how your last project handled authentication, tenant separation, or secrets - You treat security and compliance as someone else's job or a final checklist - You want a large team, a narrow lane, and a product manager writing your tickets. We are nine people and you will own outcomes end to end How we hire 1. Application: resume plus links to code or products you built. Tell us which parts you wrote, which parts an AI wrote, and how you verified the AI's work 2. Technical conversation (45 minutes): walk us through a system you built 3. Paid work sample (about 3 hours): review a small AI-generated application with planted security and networking flaws, report findings in priority order, and fix the top issues. AI tools are allowed and expected 4. Founder interview 5. References and background check How to apply Use our resume form at https://ezetech.com/submit-resume/ (full details at https://ezetech.com/jobs/senior-ai-software-engineer/). In its Message box, name this role and include the links and notes described in step 1 above. You can also apply here on Indeed, but please still send the step 1 links and notes. EZETech is an equal opportunity company and welcomes applicants of all backgrounds.

People with a criminal record are encouraged to apply

Work Location: In person