Remote Fullstack Engineer - SecurityFirst, Production Ready

Wearefram; Lavamünd; Remote; EUR 70,000 - 110,000; Full time

Job summary

fram^ is seeking a Remote Fullstack Engineer to advance an AI-native platform that serves Swiss fiduciary firms with bookkeeping, payroll and compliance via a WhatsApp-first workflow. You will own the n8n automation layer, close a security backlog, and prepare production-ready tooling, CI/CD, observability, and staging.

You’ll work on authentication, RLS, multi-tenant data isolation, and a Next.js/TypeScript backend tied to PostgreSQL and Supabase, collaborating across time zones to ship safely.

Qualifications

• 4+ years of professional experience with Node.js/TypeScript in production backend systems.
• Strong hands-on experience with Next.js (App Router) and building/maintaining REST and webhook APIs.
• Deep, practical knowledge of PostgreSQL, including Row-Level Security (RLS) policy design and multi-tenant data isolation.
• Production experience with Supabase, or an equivalent BaaS (Firebase, AWS Amplify) — auth, storage and database.
• Experience with n8n, Zapier, or a comparable workflow-automation tool, ideally including securing/hardening automations that touch production data.
• Working DevOps fluency: CI/CD pipeline design, staging environments, secrets management, and basic monitoring/alerting setup.
• Solid understanding of authentication/authorization patterns and common web-application security pitfalls.
• Comfortable working in and improving a codebase with minimal existing test coverage or documentation.
• Clear written communication in English; able to work asynchronously across time zones.

Responsibilities

• Remediate the platform’s active security exposure: enforce authentication and row-level security (RLS) on every API route.
• Replace n8n’s direct database master-key access with an authenticated ingestion API that derives tenant identity server-side.
• Design and implement a background job queue for heavy document processing to remove timeouts.
• Make cloud storage private and put the database schema into version control with a real staging environment.
• Build CI/CD pipelines, automated tests, and baseline observability (logging, monitoring, alerting).
• Harden and maintain the n8n workflows for WhatsApp document intake and accounting-automation flows.
• Implement data-subject-rights tooling and an append-only accounting ledger, coordinating with external advisor.
• Redact personal data from logs and enforce least-privilege access patterns.
• Collaborate with AI/Agent Engineer on backend integration points for the LLM-driven agent.

Skills

Node.js/TypeScript

English communication

Tools

Next.js App Router

PostgreSQL with RLS

Supabase

n8n

Job description

fram^ is seeking a Remote Fullstack Engineer to advance an AI-native platform that serves Swiss fiduciary firms with bookkeeping, payroll and compliance via a WhatsApp-first workflow. You will own the n8n automation layer, close a security backlog, and prepare production-ready tooling, CI/CD, observability, and staging.

You’ll work on authentication, RLS, multi-tenant data isolation, and a Next.js/TypeScript backend tied to PostgreSQL and Supabase, collaborating across time zones to ship safely.