Senior full-stack developer (Node.js / React / SQL Server)

Senior full-stack developer (Node.js / React / SQL Server)

We are hiring a senior full-stack developer for a long-term role building our portfolio of business applications, starting with a multi-branch school management system and followed by more systems in other sectors. Every application is API-first: each feature is delivered through a versioned, documented REST API that the web app uses today and mobile apps will use later.

About the role

You will be our lead developer across several products, each a multi-user business system with roles and permissions, records that must never be lost, payments, reporting and parent- or customer-facing portals. The first product is ready to build:

•         A business requirements document with numbered requirements and acceptance rules

•         A complete UI/UX design with workflow diagrams and a clickable prototype

•         A reviewed SQL Server data model

•         A started codebase: monorepo, database migrations, API and web shells, Azure infrastructure as code and a deployment pipeline

Later products will follow the same pattern, and you will help shape the shared foundation (sign-in, permissions, audit, payments, notifications) so each new application starts faster than the last.

What you will build and own

•         The API as the product. Design and build versioned REST APIs (/api/v1) covering every feature, documented with OpenAPI. The web app gets no back door: if a screen can do it, the API can do it, so mobile apps need no backend rework.

•         Security in the backend, not just the screen. Sign-in through Microsoft Entra ID with MFA, role-based permissions, branch or organisation scoping, and confidential records enforced in every endpoint.

•         Web applications. Build staff screens and customer or parent portals in React from approved designs, accessible (WCAG 2.1 AA) and responsive down to phone width.

•         Correct, auditable data. No physical deletes of historical records, append-only audit logs, and reversals instead of edits for posted financial transactions.

•         Money handled exactly. Billing runs that can never double-charge, payment allocation, receipts, reversals with approval and daily reconciliation.

•         Mobile-ready behaviour. Idempotent writes, offline-sync conflict handling, pagination and filtering conventions, and push-notification hooks.

•         Integrations behind adapters. M-Pesa payments and callbacks, SMS, WhatsApp and email notifications, and CSV/Excel imports for migrating existing records.

•         A reusable foundation. Shared modules and templates for identity, permissions, audit, notifications and payments that every new product reuses.

•         Quality and operations. Automated tests, CI/CD to Azure, logging and monitoring, backups and a tested restore.