Job
Description
AuthKeeper is a zero-knowledge authentication vault designed for modern security and privacy. We offer encrypted storage for TOTP secrets, passwords, secure notes, and credit card data powered by client-side encryption, real-time sync via Supabase, and robust row-level security. Our mission is to create a product where data sovereignty and usability coexist. Whether you're a developer, privacy advocate, or security-conscious individual, AuthKeeper delivers military-grade protection with zero-trust architecture ensuring your data remains private, even from us. We're hiring a Full-Stack Developer with strong experience in React, Supabase, and security-aware frontend/backend development. You'll play a central role in maintaining and scaling our secure vault infrastructure, building user-centric features, and strengthening client-side cryptography and secure storage workflows. This is a hands-on role with high-impact responsibilities and direct influence over a security-first product. Responsibilities include designing and developing secure features across the full stack (e.g., vault UI, TOTP, secure notes, password manager), writing scalable, privacy-preserving code using React, TailwindCSS, Supabase, and Netlify Functions, implementing cryptographic workflows using Web Crypto API and AES-256-GCM, enforcing strict Row Level Security in Supabase, integrating secure session handling and auto-lock mechanisms for sensitive vault data, hardening frontend components with strong CSP headers, input validation, and memory-safe design, collaborating with security engineers to address threat models and implement mitigation strategies, continuously auditing and improving encryption practices to maintain zero-knowledge guarantees, and contributing to a secure CI/CD pipeline with static analysis, secrets detection, and code linting. Required Skills: - Strong hands-on experience with React, TypeScript/JavaScript, and Tailwind CSS - Deep understanding of Supabase, particularly authentication, RLS, and real-time sync - Familiarity with Netlify Functions or similar serverless environments - Experience with client-side encryption, browser-based crypto (Web Crypto API), and secure session design - Solid knowledge of zero-knowledge architecture, memory handling, and local key derivation (PBKDF2) - Understanding of web security principles: XSS, CSRF, CSP, HTTPS, HSTS - Git, CI/CD workflows, and clean modular architecture - Proactive mindset with attention to security implications in every layer Nice to Have: - Experience building or contributing to password managers, encrypted storage apps, or MFA tools - Familiarity with OAuth2, TOTP generation, or browser extension security models - Experience implementing Progressive Web Apps (PWAs) or offline-first apps - Understanding of SSR (e.g., Next.js), advanced security headers, and anti-fingerprinting techniques Join AuthKeeper to help build a product that prioritizes privacy, encryption, and user control. Work independently with high ownership over core systems, collaborate with a mission-driven team on a modern stack, gain exposure to advanced cryptography, privacy tech, and real-world threat modeling, and make an impact in a space where security is not an afterthought - it's the foundation. To apply, send your GitHub, portfolio (or projects), and a short paragraph about why this mission excites you to developers@authkeeper.dev.,