Headless Web Platform Architect & Security Lead

Pinnacle; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

K3, based in Kuala Lumpur, is migrating its web estate from WordPress to a headless CMS (Contentful) and integrating with Salesforce and the group data platform. The Principal Web Developer will own CMS architecture, define API/MCP standards, and lead developers and Technical SEO Managers while ensuring security across the web estate.

Marketing sets priorities, but this role controls how the roadmap is built and executed, aligning with CE+ security gate and group standards.

Qualifications

• Experience owning CMS platform architecture and standards.
• Ability to define integration patterns between systems.
• Proven track record in security governance for web estates.

Responsibilities

• Sets technical architecture and standards for the web platform — CMS, integration, API/MCP design.
• Owns security policy and practice for the web estate: access control, vulnerability management, patch governance.
• Line-manages Full Stack Web Developers and Front-End Web Developer and Technical SEO Managers.
• Approves Contentful content model, environment and Environment Alias strategy before builds.
• Acts as technical owner for suppression centre integrations.
• Escalation point for technical disagreements within the web team.

Skills

Leadership

Architectural design

Security governance

Cross-team collaboration

Tools

Contentful

Salesforce

Boomi

React

Next.js

Node.js

Python

REST/GraphQL

AWS

Azure

Content delivery networks

API/MCP design

Security tooling

Job description

K3, based in Kuala Lumpur, is migrating its web estate from WordPress to a headless CMS (Contentful) and integrating with Salesforce and the group data platform. The Principal Web Developer will own CMS architecture, define API/MCP standards, and lead developers and Technical SEO Managers while ensuring security across the web estate.

Marketing sets priorities, but this role controls how the roadmap is built and executed, aligning with CE+ security gate and group standards.