Full Stack Developer – CTRM / Precious Metals Trading Platform

Job Overview We are building a Commodity Trading & Risk Management (CTRM) platform for the precious metals industry and are looking for a strong Full Stack Developer to join our team. The system is already under active development, and we are looking for someone who can take ownership of the web frontend, user experience, application security, and full-stack development. The role will focus primarily on our React/TypeScript web application, while also requiring a solid understanding of the backend, database, APIs, authentication, and security that support the platform. This is a long-term role for someone who can work independently, understand complex business requirements, and help us build a reliable, secure, production-grade financial trading platform. What You'll Work On Build, improve, and maintain the main React/TypeScript web application. Develop responsive, intuitive interfaces for trading, accounting, operations, refinery workflows, reporting, and administration. Translate complex trading and accounting requirements into clean and practical user interfaces. Work closely with the PostgreSQL/Supabase backend and understand how frontend actions interact with financial data and business logic. Implement and maintain authentication, authorization, permissions, and role-based access controls. Identify and fix security vulnerabilities across the frontend, backend, APIs, database, and application infrastructure. Follow secure development practices for sensitive financial and trading data. Review existing code and improve application architecture, performance, reliability, and maintainability. Build and integrate APIs, Supabase RPCs, Edge Functions, Realtime features, and other backend services when required. Work with PostgreSQL schemas, views, functions, triggers, and RLS policies when frontend features require backend changes. Support deployment and production infrastructure where required, including Docker and Linux servers. Participate in code reviews, testing, debugging, and technical documentation. Occasionally work with Flutter/Dart mobile applications and Python automation services where needed. Security Responsibilities Security is an important part of this role. You will be expected to: Design and implement secure authentication and authorization flows. Properly implement and review Supabase RLS policies and database permissions. Prevent unauthorized access to customer, trading, accounting, and financial data. Identify common web application vulnerabilities such as XSS, CSRF, injection, broken access control, insecure API usage, and improper data exposure. Secure frontend/backend communication and sensitive application data. Review dependencies and third-party packages for security risks. Follow secure coding and deployment practices. Help establish security standards and best practices as the platform grows. Required Skills Strong React and TypeScript experience with production applications. Strong understanding of modern frontend architecture, state management, API integration, and responsive UI development. Strong understanding of web application security and secure development practices. Experience with authentication, authorization, RBAC, permissions, and access control. Strong JavaScript/TypeScript fundamentals. Good PostgreSQL/SQL knowledge. Experience with Supabase, particularly Auth, RLS, RPC, Edge Functions, Realtime, and migrations. Strong Git and GitHub workflow experience. Ability to work with and understand backend APIs and database-driven applications. Ability to work independently and take ownership of features from development through deployment. Good understanding of performance optimization and debugging. Fluent English. Preferred Qualifications Previous experience working on fintech, financial accounting, trading systems, commodities, or precious metals. Experience with security testing or application security. Experience with OWASP principles and common web vulnerabilities. Python/FastAPI experience. Flutter/Dart familiarity. Docker and Linux server deployment experience. Experience with CI/CD and GitHub Actions. Experience working with complex financial or transactional data. Familiarity with CTRM, refinery operations, scrap gold, bullion trading, or metals workflows. Experience with OCR, document processing, Telegram bots, or automation systems. What We're Looking For We are not looking for someone who only builds UI components. You should be comfortable understanding the entire application, from the browser and frontend all the way through APIs, Supabase, PostgreSQL, authentication, permissions, and infrastructure. The ideal candidate is someone who can look at a feature and ask: How should this work for the user? How should it work technically? And how do we make sure it is secure? Experience working on financial, trading, or other data-sensitive systems is highly valuable. Job Details Employment Type: Hourly Hours: More than 30 hrs/week Duration: 6+ months Experience Level: Intermediate Hourly Rate: $10–$20 USD/hour Project Type: Complex / Long-term Location: Worldwide