Custom Client Hiring Portal - TriFloq

Full-Stack Web Developer — Trifloq Portal Enhancement & Security Project overview We are Abrar Infotech Solutions Private Limited, an Indian IT company. We have built a work management portal called Trifloq (trifloq.com / trifloq.in) — similar to Upwork — designed to manage employees, clients, projects, timesheets, attendance, screen recordings, billing, and payments for our internal operations. The portal currently has three separate login portals — Admin, Client, and Employee — and is live on our website (abrarinfotech.com) for testing. We are now looking for an experienced Full-Stack Developer to take ownership of this portal and: Strengthen security across all three portals Migrate all three portals from abrarinfotech.com to trifloq.com Customize and improve the existing UI/UX Add new features based on a detailed requirements list Fix existing bugs found during internal testing Provide documentation and handover for future maintenance This is a long-term engagement. We expect an ongoing relationship with the right developer or small agency. You may build from scratch on top of our existing design/flow, or enhance what is already built — we are open to either approach, but you must justify your recommendation. What the portal currently does Admin Portal Dashboard with audit logs — login/logout time of each user Address master — add/import countries, states, cities Availability management — set employee availability hours Client management — add, edit, activate/deactivate clients Employee management — add, edit, professional details, PDF download Hire request approvals — approve or decline client hire requests with reasons Project management — approve/reject client projects with reasons Task management — add and manage project tasks Timesheet viewer — view employee work records with screenshots every 5 minutes Chat oversight — view all client ↔ employee conversations Billing & payments — currency master, HSN codes, invoice creation, payment tracking Language master — add/manage languages Client Portal Dashboard — total projects, working projects, completed projects count Browse and chat with employees, schedule calls with Google Meet links Employee hire request flow — submit request for admin approval Project creation, publishing, and management (limited edits post-publish) Timesheet viewer — filter by employee and date, download weekly Excel Work screenshot viewer — see employee screenshots captured every 5 minutes Invoice management — view current and paid invoices, make payments Employee Portal Dashboard — total, working, and completed project counts View all assigned projects and project details Timesheet with live timer — select project and task, grant screen permission, start/stop timer Screenshots captured automatically every 5 minutes while timer is running Chat with assigned clients Profile management Note to applicants: We will share full documentation, screenshots, and access to the existing portal during the interview stage. Please do not ask for access before shortlisting. What we need you to do 1. Security hardening Implement proper authentication — JWT or session-based with refresh tokens Role-based access control (RBAC) — Admin, Client, Employee cannot access each other's routes Two-factor authentication (2FA) for Admin and optionally Client logins Input validation and sanitization across all forms to prevent SQL injection and XSS Secure password hashing (bcrypt or Argon2), enforce strong password policy Rate limiting on login endpoints to prevent brute-force attacks HTTPS enforcement and secure cookie settings Audit log improvements — log all sensitive actions with IP, device, timestamp 2. Domain migration Move all three portals (Admin, Client, Employee) from abrarinfotech.com to trifloq.com Set up 301 redirects from old abrarinfotech.com URLs to new trifloq.com URLs SSL certificate setup on trifloq.com and trifloq.in Update Login button on abrarinfotech.com to point to trifloq.com Set trifloq.in as redirect to trifloq.com 3. UI/UX improvements Rebrand all three login pages from Abrar Infotech design to Trifloq branding Improve mobile responsiveness across all portals Redesign dashboards for cleaner, modern UI (we will provide design references) Add loading states, error messages, and empty state screens throughout Improve notification system — in-app + email notifications for key actions 4. New features to be added Unified login page on trifloq.com with role selector (Admin / Client / Employee) Forgot password and email-based password reset flow Employee availability calendar — visual weekly/monthly calendar view Payment gateway integration — online invoice payment for clients Real-time notifications — bell icon with live alerts for all key events Reporting & analytics — revenue reports, hours worked charts, project progress Mobile app or PWA (Progressive Web App) version — open to discussion Export improvements — PDF invoices, Excel timesheets with better formatting 5. Bug fixing & code quality Review and fix all bugs identified during internal testing phase Code review and refactoring if building on existing codebase Write unit and integration tests for critical features Provide clean documentation and deployment guide