highly experienced Senior Full-Stack Developer / Software Architect-

Review Existing Applications, Architecture, Security & Code Quality We are looking for a -highly experienced Senior Full-Stack Developer / Software Architect- to conduct a comprehensive technical review of several existing software projects. This is not initially a “build from scratch” position. Our first priority is to bring in an experienced developer who can -carefully inspect the codebases we already have-, understand what has been built, determine what was done correctly, identify problems or technical debt, and provide a clear roadmap for improving the applications before we continue further development. We want someone who is comfortable opening an unfamiliar repository, understanding a complex application, tracing how the pieces connect, and giving an independent professional assessment. Your Initial Assignment You will receive access to our existing repositories and development environments. Your responsibility will be to perform a -complete technical audit- and answer questions such as: * What percentage of the application appears properly completed? * Which parts of the existing architecture are well designed? * Which parts should remain unchanged? * Which areas need improvement? * Which areas should be refactored? * Is there duplicated, unnecessary, obsolete, or poorly structured code? * Are there unfinished or partially implemented features? * Are there features that appear finished in the UI but are not properly connected to the backend? * Are APIs correctly implemented? * Is the database architecture appropriate? * Are authentication and authorization implemented properly? * Are database permissions and security policies configured correctly? * Are sensitive API keys and secrets protected? * Are there security vulnerabilities? * Are there scalability concerns? * Are there performance problems? * Are there broken integrations? * Are there unnecessary dependencies? * Are error handling and logging implemented correctly? * Are automated tests sufficient? * Is the code maintainable by another development team? * Is the current architecture suitable for production? * What should be fixed **before launch**? * What can safely be improved **after launch**? Areas You Will Review The review may include: Frontend * React * Next.js * TypeScript * JavaScript * HTML/CSS * Tailwind CSS * Responsive design * Component architecture * State management * Performance * Accessibility Backend * API architecture * Server-side logic * Authentication * Authorization * Business logic * Background processes * Edge/serverless functions * Third-party integrations Database Experience with *PostgreSQL and Supabase is highly preferred*. You should be able to review: * Database schemas * Tables * Relationships * Foreign keys * Indexes * Constraints * Functions * Triggers * Migrations * Row Level Security (RLS) * Database permissions * Query performance * Data integrity * Backup/recovery considerations AI Integrations Some projects may include AI functionality. Experience with the following is valuable: * OpenAI API * LLM integrations * AI assistants/agents * RAG * Vector databases * Embeddings * AI routing * Prompt architecture * Streaming responses * Usage/token tracking * AI security * Rate limiting * Cost controls Infrastructure / DevOps You should also be able to evaluate: * GitHub repositories * Git structure * Branching strategy * CI/CD * Environment variables * Production vs. development configuration * Deployment architecture * Logging * Monitoring * Error tracking * Scalability * Backups * Disaster recovery Security Review Security is extremely important. We expect you to review areas including: * Authentication * Authorization * User permissions * Admin permissions * RLS policies * API security * API key protection * Secret management * Database exposure * Input validation * SQL injection risks * XSS risks * CSRF risks * Rate limiting * File-upload security * Payment-related security * User data protection Required Deliverable We do not want someone who simply looks at the code and says, “Everything looks good.” We expect a professional written technical assessment. For every major system or feature, classify it as: ✅ GOOD Properly implemented and should remain. 🟡 NEEDS IMPROVEMENT Works, but should be optimized or cleaned up. 🟠 NEEDS REFACTORING Functional but architecturally weak or difficult to maintain. 🔴 CRITICAL Security, reliability, data integrity, or production-launch concern. ⚪ INCOMPLETE Started but not fully implemented. ⚫ NOT IMPLEMENTED Expected functionality is missing. Your final report should include: 1. Executive Technical Summary 2. Overall Code Quality Score 3. Architecture Assessment 4. Frontend Assessment 5. Backend Assessment 6. Database Assessment 7. Security Assessment 8. Performance Assessment 9. API and Integration Assessment 10. AI Integration Assessment, where applicable 11. Testing Assessment 12. Deployment/Infrastructure Assessment 13. List of Broken or Incomplete Features 14. Technical Debt List 15. Security Risks 16. Recommended Improvements 17. Priority Ranking for Every Major Issue 18. Estimated Level of Effort for Major Fixes 19. What Should Be Fixed Before Production 20. What Can Be Improved After Launch We also want a high-level estimate such as: Current Production Readiness: ___ / 100 and an approximate breakdown of: * Properly completed: ___% * Completed but needs improvement: ___% * Requires significant rework: ___% * Incomplete/missing: ___% These percentages must be based on your technical assessment, not guesses. Important Do not rewrite working code simply because you would personally code it differently. We are looking for someone who understands the difference between: * code that is different, * code that could be cleaner, * code that actually creates technical risk, * and code that genuinely needs to be rebuilt. Preserving good existing work is just as important as identifying bad work. Who We Are Looking For You should ideally have: * 5+ years professional software-development experience * Strong full-stack development experience * Strong React / Next.js experience * Strong TypeScript experience * Strong PostgreSQL knowledge * Supabase experience * API architecture experience * Authentication and authorization experience * Software architecture experience * Security knowledge * Git/GitHub experience * Production application experience * Experience inheriting and auditing existing codebases * Ability to understand code written by other developers * Ability to explain technical issues clearly to a non-technical founder Experience with large SaaS platforms, AI applications, marketplaces, mobile/web applications, or multi-role platforms is a major advantage. Potential Long-Term Opportunity The initial engagement is a -technical audit and evaluation. However, if the working relationship is successful, there is significant opportunity for ongoing work. We are developing multiple technology platforms and expect continued development, optimization, testing, maintenance, security work, AI integration, and new feature development. We are therefore interested in finding someone who could potentially become a **long-term senior developer or technical lead**, not simply complete one small assignment. Confidentiality Because you will be reviewing proprietary software and source code, you must be willing to: * Sign an NDA * Keep all source code confidential * Never copy or reuse proprietary code * Never share repository access * Follow appropriate security procedures * Work through authorized GitHub access How to Apply Please begin your application with the words: CODE AUDIT This tells us that you actually read the entire posting. Then answer the following: 1. How many years have you worked professionally as a software developer? 2. What is your strongest technology stack? 3. How strong are you with React and Next.js? 4. How strong are you with TypeScript? 5. What experience do you have with PostgreSQL? 6. What experience do you have with Supabase? 7. Have you worked extensively with Row Level Security? 8. Have you previously audited or inherited another developer's codebase? 9. Have you identified serious architectural or security problems during a previous code audit? Give one example. 10. What experience do you have with OpenAI or other AI APIs? 11. What experience do you have with GitHub and CI/CD? 12. How would you approach reviewing a large unfamiliar codebase? 13. What would you examine first before deciding whether code should be kept, refactored, or rewritten? 14. Can you produce a detailed written technical audit after reviewing the system? 15. Are you comfortable explaining technical problems to a non-technical business owner? 16. Please provide links to GitHub, portfolio, LinkedIn, or projects you have personally worked on. 17. What is your hourly rate or expected compensation? 18. What is your current availability? 19. Are you interested in a longer-term position if the initial audit goes well? Final Screening Question Assume you inherit a large application that appears to be -80% complete-. The interface looks finished, but you don't yet know whether the backend, database security, APIs, and business logic are properly implemented. Describe, step by step, how you would determine whether the application is truly 80% complete and production-ready. Please provide a thoughtful technical answer. Generic or AI-generated applications without evidence of relevant experience will not be prioritized.