Principal Web Developer

K3 Advisory Group; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

K3 Advisory Group is seeking an experienced technology leader to drive the web platform across CMS, integrations, and security. You will own Contentful content modelling, environment strategies, and API/MCP standards while guiding a cross-functional team of developers and SEO specialists.

Lead architecture, enforce secure coding practices, and coordinate with Salesforce and Boomi to deliver a scalable, compliant web estate across the group sites.

Qualifications

• Experience owning CMS platform design and security.
• Proven track record in migration projects.
• Leads cross-functional teams across marketing, product and engineering.

Responsibilities

• Sets technical architecture and standards for the web platform.
• Owns security policy and practice for the web estate.
• Line-manages Full Stack Web Developers, Front-End Web Developer, and Technical SEO Managers.
• Approves Contentful content model, environments and Environment Alias strategy.
• Acts as named technical owner for the suppression/preference centre with the dedicated developer.
• Escalation point for technical disagreements and group standards questions.

Skills

Leadership

Strategic thinking

Security governance

Cross-functional collaboration

Tools

Contentful

Salesforce

Boomi

React

Next.js

Node.js

REST APIs

GraphQL

AWS

Azure

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

TOOLS & PLATFORMS

Contentful — content modelling, Content Management API, GraphQL Content API, App Framework, webhooks, environments & Environment Aliases, Live Preview SDK; Salesforce integration patterns; Boomi (coordination with Platform Engineering integration layer).

React, Next.js, Node.js/Python; REST & GraphQL APIs; AWS, Azure, CDN; API/MCP design standards; security tooling (access control, vulnerability management, patch governance).

COMMERCIAL OBJECTIVES

Successful, on-time, on-budget delivery of the headless CMS migration (Contentful).

Secure, governed integration between the web estate, Salesforce and the group data platform.

Site health, performance and CVR uplift across all K3 brand sites on the platform.

Zero security or data-governance incidents attributable to the web estate.

KEY RESPONSIBILITIES

Leadership & Management

Sets technical architecture and standards for the web platform — CMS, integration, API/MCP design

Owns security policy and practice for the web estate: access control, vulnerability management, patch governance

Line-manages Full Stack Web Developers, Front-End Web Developer, and both Technical SEO Managers

Approves the Contentful content model, environment and Environment Alias strategy before any build begins

Acts as named technical owner for the suppression/preference centre where it touches the web estate, working alongside the dedicated Suppression Centre Developer reporting to Azeem Rosli

Escalation point for technical disagreement within the web team; escalates unresolved group-standards questions to Matt Kilmister (Group Solution Architecture)

Functional Responsibilities

CMS platform ownership: Contentful content model design, environments & Environment Aliases, App Framework customisation, webhook-driven integration triggers

Integration architecture: designs the Salesforce data platform web estate integration pattern, working with Automation Engineers (Boomi) on shared pipelines

API/MCP design standards: defines and enforces API contracts and MCP server design where applicable across the web estate

Security: sets and enforces secure coding standards; reviews Full Stack and Front-End deliverables for security compliance before release

Technical roadmap: maintains a platform/technical roadmap distinct from Marketing's content and feature roadmap, sequencing migration work across brand sites (KBS/KB, Tax, Pinnacle — subject to the CE+ security gate) as decisions land

Governance: acts as the mandatory sign-off gate for CMS platform choice, integration pattern and security posture — decisions that previously had no named owner

Provides architecture input to the Website Business Analyst's backlog and requirements documentation so technical constraints are captured before commitments are made to Marketing

KEY PERFORMANCE MEASURES

Platform stability and uptime across all sites on Contentful.

Security incident rate (target: zero attributable incidents).

Headless migration delivery against agreed milestones and budget.

API/integration defect rate post-release.

Adoption of architecture standards across the web team (measured via code/PR review).

Core Web Vitals and site health scores group-wide.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .