Full-Stack Engineer (Australia-based) — Secure App Foundation & Data Architecture

Job ID: 40577114

Budget: $1,500 – $3,000 AUD

Location requirement — please read first:

Open only to independent contractors based in Australia, performing all work in Australia, who hold (or can obtain) a valid ABN. Applications from outside Australia can't be considered.

Overview:

An early-stage, Australian startup needs an experienced AI/ML full-stack engineer to build the foundation and secure infrastructure for a new consumer web application. This is a single, fixed-price milestone — what matters is meeting the milestone's acceptance criteria, not fixed hours.

This is Milestone 1 of a larger build; later milestones involve an orchestrated multi-agent AI system. Continuation past this milestone is possible but not guaranteed — it depends on successful, on-spec delivery of this one. Full product detail is shared with shortlisted candidates under NDA.

What you'll build (this milestone):

Environments & database: provision production and staging Supabase environments (Australian region) and design the core relational schema — future-proofed for scale and multi-tenancy (organisation/user keys, role separation, soft-deletes), with migrations managed as version-controlled code. Confirm encryption at rest, TLS, and private-by-default storage.

Auth & consent: secure registration, email verification, login, session handling and password reset, plus an immutable, append-only consent log capturing timestamp, IP and policy version.
Data segregation: a strict privacy architecture — personal/identity data isolated in a separate vault, linked to other data only by an opaque key (pseudonymisation), with re-identification gated server-side.

Clean architecture & handover: all data access routed through a central Data Access Layer (no direct client-to-database queries; no bypassing row-level security with service keys), delivered as a reviewable pull request. Payment is released on PR approval.

Tech stack (defined — you'll work within it):

Next.js (App Router) + React + TypeScript.
Supabase — you should be genuinely strong with Row-Level Security, secure auth/session handling, private storage, and relational schema design for multi-tenancy.

You're a strong fit if you:

Are an Australian-based independent contractor with your own ABN (or able to obtain one), performing the work in Australia.

Have shipped production apps on Next.js/TypeScript and can evidence secure, well-architected data layers.

Have a security-first instinct for handling personal data (RLS, data isolation, least privilege).

Can build to a defined architecture and clear acceptance criteria, and deliver independently.
(For continuation past this milestone) have built multi-agent or LLM-orchestration systems — a plus, not required for this milestone.

Engagement:

Fixed-price for this milestone only: [$ amount], approximately [4–6] weeks, remote.
First milestone of a larger build; further milestones may follow subject to successful delivery of this one.

Australian independent-contractor engagement under a written agreement governed by the law of Victoria, including IP assignment. You meet your own obligations — ABN, income tax, GST, superannuation and any insurances (guidance: Fair Work Ombudsman, ATO, business.gov.au).
Shortlisted candidates sign an NDA before any specific product detail or architecture is shared.

To apply, please include:

A short intro with confirmation you're Australia-based with an ABN (or can obtain one)