Full-Stack Developer (React + Supabase)

As a Full-Stack Developer at AuthKeeper, you will be playing a crucial role in maintaining and scaling our secure vault infrastructure, building user-centric features, and strengthening client-side cryptography and secure storage workflows. Your responsibilities will include: - Designing and developing secure features across the full stack such as vault UI, TOTP, secure notes, and password manager - Writing scalable, privacy-preserving code using React, TailwindCSS, Supabase, and Netlify Functions - Implementing cryptographic workflows using Web Crypto API and AES-256-GCM - Enforcing strict Row Level Security in Supabase - Integrating secure session handling and auto-lock mechanisms for sensitive vault data - Hardening frontend components with strong CSP headers, input validation, and memory-safe design - Collaborating with security engineers to address threat models and implement mitigation strategies - Continuously auditing and improving encryption practices to maintain zero-knowledge guarantees - Contributing to a secure CI/CD pipeline with static analysis, secrets detection, and code linting Required Skills: - Strong hands-on experience with React, TypeScript/JavaScript, and Tailwind CSS - Deep understanding of Supabase, particularly authentication, RLS, and real-time sync - Familiarity with Netlify Functions or similar serverless environments - Experience with client-side encryption, browser-based crypto (Web Crypto API), and secure session design - Solid knowledge of zero-knowledge architecture, memory handling, and local key derivation (PBKDF2) - Understanding of web security principles: XSS, CSRF, CSP, HTTPS, HSTS - Git, CI/CD workflows, and clean modular architecture - Proactive mindset with attention to security implications in every layer Nice to Have: - Experience building or contributing to password managers, encrypted storage apps, or MFA tools - Familiarity with OAuth2, TOTP generation, or browser extension security models - Experience implementing Progressive Web Apps (PWAs) or offline-first apps - Understanding of SSR (e.g., Next.js), advanced security headers, and anti-fingerprinting techniques Join AuthKeeper to help build a product that prioritizes privacy, encryption, and user control. Work independently with high ownership over core systems, collaborate with a mission-driven team on a modern stack, gain exposure to advanced cryptography, privacy tech, and real-world threat modeling, and make an impact in a space where security is not an afterthought - it's the foundation.,