Senior Full-Stack Engineer (Supabase / PostgreSQL / React Native / Next.js)

We are a Western Australian recruitment company with two production software products, and we are hiring one engineer to technically own both. We are keeping the company and product names off the public listing; shortlisted candidates get full names, demos and repo access.

Product one is a live two-sided marketplace connecting mining companies with tradespeople for shutdown work in WA. Product two is our internal VoIP and CRM platform. The founder is a recruiter, not an engineer. You will be the technical adult in the room.

THE STACK
- The marketplace: React Native / Expo deployed as a web app on Vercel. Supabase Postgres (Sydney region), where the business logic and security actually ---------- row-level security on every table, SECURITY DEFINER functions, around 100 SQL migrations, pg_cron scheduled jobs. Vercel serverless functions handle Stripe billing webhooks (signature verification, idempotency), AI-powered CV parsing, and health checks. Sentry, GitHub Actions, Playwright smoke tests.
- The VoIP/CRM platform: Next.js 14, Twilio, Prisma, Neon Postgres, deployed on Vercel.

Both codebases are built and maintained with AI coding tools (Claude Code). You must be strong at directing, reviewing and catching mistakes in AI-generated code at speed. If AI-assisted development bothers you, this is the wrong job. If you approve whatever the AI writes without checking it, also the wrong job.

FIRST 90 DAYS, ROUGHLY IN ORDER: transactional email and push notifications (our biggest functional gap), monitoring and alerting so nothing fails silently, CI hardening in GitHub Actions, rate limiting on the CV parsing endpoint, a proper staging environment, secrets hygiene. After that it is stewardship: releases, database migrations against production, i ---------- response, and the technical side of our verification queue while we run a pilot with real mining companies and tradies.

WHO WE WANT: a Postgres-first engineer. Most JavaScript-first developers are weak exactly where this product is strong, in the database. If you can read an RLS policy and spot the hole in it, you are who we are looking for. A pragmatist who ships the half-day fix and keeps a paper trail. If your first instinct in an unfamiliar codebase is "this needs a rewrite", please do not apply.

YOU DO NOT NEED: native mobile depth (it is Expo on web), machine learning, microservices, or a CTO title.

HOURS AND PAY: full-time, 40 hours per week on Australian Western Standard Time, which is the same timezone as the Philippines. No night shift, ever. USD 2,000 to 3,500 per month depending on demonstrated depth, paid directly, 13th month paid. Engaged as an independent contractor with a written agreement covering confidentiality and IP assignment. This is a long-term role, not a project.

HOW TO APPLY: start your application with the word SWING, then answer these three questions. Applications missing the word or the answers will not be read.

1. Describe a row-level security policy you wrote for production, and one edge case or bug it had.
2. A payment webhook fails silently in production. Walk us through what you check, in what order.
3. Which AI coding tools do you use daily, and what was the last AI-generated mistake you caught before it shipped?

Shortlisted candidates complete a paid 2 to 4 hour work sample before any offer.