About Stemple

Stemple is building India's first zero-knowledge, offline-first legal practice management platform. The server is designed to be a blind relay — it stores only AES-256 ciphertexts and HMAC blind indexes. It never sees plaintext. Your job is to build that relay: fast, correct, and security-first.

What You'll Build

You will own the API layer, sync engine, background job infrastructure, and multi-tenant data architecture. You'll work closely with the Crypto Engineer to ensure every database write respects the zero-knowledge contract, and with the AI/ML Engineer to expose AI microservice results through secure, auditable endpoints.

Key Responsibilities

- Design and maintain the Node.js 22 + Fastify primary API — RESTful endpoints and GraphQL Yoga gateway for all four product modules.
- Implement and enforce PostgreSQL Row-Level Security (RLS) across all tables with tenant_id scoping to prevent cross-tenant data leakage.
- Build the BullMQ + Redis job queue infrastructure for asynchronous operations, including AI inference jobs, PRE re-encryption tasks, key rotation, escalation alerts, and OCR pipeline triggers.
- Implement the sync engine using ElectricSQL, bridging client SQLite and PostgreSQL with CRDT (Yjs) conflict resolution.
- Build the multi-tenancy layer, encompassing tenant provisioning, JWT middleware with tenant-scoped claims, and Supabase Auth integration.
- Implement the append-only audit log (WAL-archived, with no UPDATE/DELETE permissions) using per-tenant partitioning.
- Integrate with external APIs such as eCourts / Supreme Court for hearing dates, Manupatra for legal research, MCA21/GSTN for KYC, DocuSign webhooks for e-signatures, and CalDAV for calendar sync.
- Build the deadline cascade engine as a DAG-based rules graph per jurisdiction (Delhi HC, SC, NCLT, NCLAT, SAT). This is a rules engine, not ML.




- Write and maintain gRPC (protobuf) service definitions for inter-service communication with the Python AI microservice.
- Instrument the system with Sentry (errors) and PostHog (product analytics), and lay the groundwork for the Grafana + Loki + Prometheus observability stack.

Must-Have Skills

- Node.js (v18+) with a strong understanding of async patterns, the event loop, and stream handling.
- Experience with Fastify or Express (Fastify preferred).
- Proficiency in PostgreSQL, including complex queries, indexing, RLS, transactions, and partitioning.
- Experience with Redis for caching, pub/sub, and job queues (BullMQ or Bull).
- Solid understanding of REST API design and GraphQL basics.
- Familiarity with Docker and GitHub Actions for CI/CD.

Robust Plus

- Experience with ElectricSQL or CRDTs (Yjs, Automerge), as offline sync is a core architectural requirement.
- Knowledge of gRPC + protobuf.
- Understanding of multi-tenant SaaS patterns (RLS, tenant isolation, row-scoped queries).
- Experience with Supabase (RLS policies, Realtime, Storage).
- Familiarity with cryptographic data patterns like blind indexes and encrypted columns (you will integrate them, the Crypto Engineer builds them).
- Experience with Neo4j or any graph database (a conflict check graph is a Phase 1 feature).
- Legal/compliance domain knowledge (DPDP Act, GDPR) is a significant plus.
- Experience with stress testing systems.

What You Won't Do

You will not implement encryption or key management, as the Crypto Engineer owns all cryptographic code. However, you are responsible for ensuring the API never creates a path for plaintext leakage, such as through debug logging of decrypted content, unencrypted PII columns, or RLS bypass.

If you are interested in this opportunity, please click on the Apply Now button to submit your application. [email protected]

📌 Backend Developer (India)
🏢 Stemple
📍 India