Senior Full-Stack Engineer (Web + Infrastructure)

• We are hiring a senior engineer who works across our web frontend and our infrastructure — the same two codebases, in the same week. Someone who ships a product screen on Monday, changes an identity-provider flow on Wednesday, and considers those the same job
• We are looking for a broad profile rather than a specialist. The next year is mostly platform work with a user-facing edge — user management, API gateway management, payments, SEO, and a great deal of compliance, GDPR and ISO 27001
• Some of the items on our tech roadmap for the coming year. Bets are picked a cycle at a time and shared out, so you would take the ones that suit you and grow into the rest
• Product and marketing UI in React — multi-brand, WCAG AA, strong on technical SEO, fast enough to hold a performance budget
• User management and identity — Keycloak realms, organisation hierarchies, partner brokering, and the entitlement model in the app
• API gateway work in APISIX — routes, plugins and auth policy as code
• Payments and billing
• ISO 27001 and GDPR — access control, change management, audit logging, observability and alerting, consent and retention
• The infrastructure underneath — Pulumi in TypeScript, Docker Swarm on Hetzner, Cloudflare at the edge, Tailscale for all engineer and CI access
• Third-party integrations — usually the seam between two systems that were never designed to meet
• Also in daily use: Postgres and PostGIS, Valkey, ClickHouse; Vite, Tailwind and Radix; Jest and Playwright; GitHub Actions; HAProxy. Most of what we write is TypeScript, strict — though our core API is Java and Spring, and the identity layer has Java in it too, so how far you go into that side is up to you

Benefits

• Remote first
• Opportunity to work with colleagues and customers across the globe in an innovative start up environment

• If you are passionate about the environment, proactive and pragmatic in getting things done, and love to work in a complex but fascinating industry where you learn every day — then this is the place for you
• Senior full-stack experience — you have owned features from the browser to the machine they run on
• A track record of taking something and running with it — a domain, a migration, a subsystem you took on, decided and stayed accountable for
• Taste. You can tell a good design from a merely plausible one, and you will reject work that functions but is not right — your own, and an agent’s
• TypeScript at strict — typed boundaries, and an instinct for when types are carrying real weight
• React beyond the client — server rendering, static generation, data loading and hydration; you know what runs where and why it matters
• Infrastructure as code — Pulumi ideally; Terraform if you are ready to pick up Pulumi
• Containers and Linux in production — not writing a Dockerfile, but debugging a service on a machine you have to SSH into
• Postgres beyond queries — backup and restore, migrations, what a schema change does under load
• Wholehearted LLM-assisted development — you use coding agents daily, have opinions about steering them, and review their output as critically as a colleague’s
• Integration instincts — third-party APIs, webhooks, OAuth/OIDC, and patience for other people’s undocumented edge cases
• A working day that overlaps ours: based within CET ±3
• Fluent in English, our working language
• Payment systems, billing models, or PSP integrations
• Identity and API gateways in depth — Keycloak, OIDC, SAML brokering, APISIX
• Observability and alerting — Prometheus, Grafana or equivalent
• Experience in the maritime, logistics or freight industry
• Familiarity with emissions accounting frameworks (GHG Protocol, GLEC, EU ETS..)
• Compliance from the inside — an ISO 27001 certification lived through, or GDPR beyond a cookie banner