Also, even though this is only 2 levels of logic deep now, avoid the arrow anti-pattern. If you have escapes/returns, you can just do the boolean check for it, no need for an else. i.e.
if not employer_can_view_candidate:
    return 404
if not user.opt_in_employers:
    return 404
No need for else or nesting
units = ProfileUnits.....