Sr Full-Stack Engineer — Next.js, Supabase & Row-Level Security (RLS) (FT-NA)

Role Overview

We are in search of a highly skilled Senior Full-Stack Engineer to advance a fully specified, largely pre-built multi-tenant B2B SaaS application through its final stages of integration, security hardening, testing, and production deployment. This role is critical in ensuring the application's integrity and security, particularly focusing on Supabase Row-Level Security (RLS) to maintain strict tenant-level data isolation.

Responsibilities

• Integrate and enhance an existing Next.js 14 + TypeScript application for a robust production environment.
• Design, implement, and rigorously test Supabase Row-Level Security (RLS) policies to ensure secure multi-tenant data segregation.
• Conduct comprehensive testing of RLS policies to prevent unauthorized cross-tenant data access.
• Develop and maintain authentication, organizational access, roles, and permissions.
• Collaborate extensively with Supabase/PostgreSQL for database management, including real-time subscriptions.
• Integrate third-party APIs and manage production webhook workflows for various external services.
• Develop server-side API routes and application logic using Next.js.
• Implement scheduled and cron-based workflows in a serverless or edge environment.
• Support real-time collaboration and messaging using Supabase subscriptions.
• Integrate AI-powered functionalities using LLM APIs.
• Ensure secure handling of API keys, credentials, and secrets through environment variables.
• Deliver responsive applications optimized for both desktop and mobile platforms.
• Execute deployment of builds and production environments using Vercel.
• Conduct thorough QA, performance reviews, security hardening, and production-readiness testing.
• Maintain a disciplined GitHub commit history and thrive in an async-first work environment.

Required Skills

• Extensive production experience with Next.js and TypeScript, including server-side API development.
• Proven expertise with Supabase and PostgreSQL.
• Demonstrated success in implementing Supabase Row-Level Security (RLS) for secure multi-tenant data management.
• Experience in developing multi-tenant SaaS applications with complex access models.
• Proficiency in integrating third-party APIs and managing production webhooks.
• Experience with serverless or edge environment scheduled tasks.
• Strong grasp of backend security, authorization, and secure secret management.
• Ability to adhere to detailed specifications and execute precise requirements.
• Excellent written communication skills in English and the ability to work independently.

Nice to Have

• Experience with LLM API integration using Anthropic or OpenAI.
• Familiarity with Stripe for payment processing.
• Experience with e-signature platforms like DocuSign.
• Knowledge of email platforms such as Resend.
• Experience with notification tools like Knock or Novu.
• Familiarity with SMS platforms such as Twilio.
• Understanding of email deliverability standards, including SPF, DKIM, and DMARC.
• Experience with deploying applications on Vercel.