About Sentrivox
Sentrivox builds one platform for IT asset management (ITAM) and security for small and medium businesses and MSPs: endpoint inventory, vulnerability and patch management, security checks, SIEM, cloud security and compliance, all running on our own identity and access layer. We are a small team, and what you build ships to customers.
What you will do
- Design, build and run features end to end across our portals (React/Next.js) and backend services (Node.js/Express, Go).
- Build and harden the authentication platform: login, MFA, sessions, password hashing (Argon2id/bcrypt), OAuth2/OIDC, SAML SSO and SCIM provisioning.
- Build RBAC and entitlements: roles, permissions, and plan- and licence-based feature gating across multiple products.
- Build ITAM modules: asset discovery and inventory, software and hardware tracking, licence lifecycle, and data ingestion from our Windows agent.
- Build security tooling: vulnerability results (CVSS/EPSS/KEV), patch compliance, security baselines and checks, alerting and audit logging.
- Enforce tenant isolation in every API and database query, so one customer can never see another customer’s data.
- Work with MongoDB and Cloud SQL/PostgreSQL: schema design, indexes, migrations and row-level security.
- Deploy and operate services on Google Cloud (Cloud Run, Firebase Hosting, App Hosting, Secret Manager, Cloud Build) through CI/CD.
- Write unit, integration and end-to-end tests; review code and mentor our interns.
- Own production issues: debugging, logs, rollbacks and root-cause fixes.
What you need
- 4–5+ years of professional full-stack development experience.
- Strong JavaScript/TypeScript, with React (Next.js preferred) and Node.js/Express in production.
- You have built or maintained authentication for real users: sessions or JWT, MFA, OAuth2/OIDC.
- Solid REST API design and a working grasp of web security: OWASP Top 10, CSRF, XSS, CSP, input validation and secrets handling.
- Hands-on experience with MongoDB and PostgreSQL.
- Experience deploying to a public cloud (GCP preferred; AWS or Azure is fine) with Docker and CI/CD.
- Comfortable with Git, code review and writing tests.
- Clear written communication, and the ability to own a feature from spec to production.
Nice to have
- SAML 2.0, SCIM 2.0, or work on an identity provider.
- Go.
- Background in ITAM, MDM, SIEM, EDR or vulnerability management products.
- Windows internals or endpoint agent experience.
- Multi-tenant SaaS architecture, Terraform, or compliance work (ISO 27001, SOC 2, DPDP Act).
What we offer
- Real ownership of core platform pieces: auth, ITAM and security.
- Remote-friendly, outcome-focused work at a sustainable pace.
- Time and budget for learning and certifications.