Full-Stack PHP/Node Engineer for E-Commerce Platform
Budget: $15 – $25 USD
Senior Full-Stack Engineer (PHP/Node, APIs, DevOps)
Contract with Full-Time Opportunity
Location: Remote (AST/EST preferred)
Stack: PHP 8+, Node/Express, MySQL/MariaDB, Redis, WordPress/WooCommerce, Vultr/AWS/GCP/Digital Ocean, Stripe, Twilio, Calendly, API development, GA4, OpenAI, Azure, TTS (SSML)
---
About Us
We run a production lead-generation and e-commerce platform powered by PHP micro-services, WordPress/WooCommerce, background workers, and deep integrations with third-party APIs. Our infra spans Vultr, AWS, GCP, and DO. We ship pragmatic solutions, automate processes with cron/queues, and value reliability as much as speed.
---
What You’ll Do
- Build and maintain REST APIs (PHP & Node/Express) with clean structure, validation, pagination, and error handling.
- Integrate with Google Sheets/Drive, Stripe, Twilio, Calendly, GA4, and similar APIs (auth flows, webhooks, retries).
- Design idempotent webhook handlers (HMAC signatures, replay protection, safe concurrency).
- Implement and monitor background jobs/cron workers (order fulfillment, batch appends, notifications).
- Write efficient SQL with transactions, row locks, and indexes; leverage Redis for caching/queues/rate-limits.
- Contribute to WordPress/WooCommerce custom plugins and admin tools.
- Handle pragmatic DevOps: Linux (Nginx/PHP-FPM), SSL/DNS, environment config, backups, deploys.
---
Must-Haves
- 4+ years full-stack experience in PHP (modern plain PHP or frameworks) and Node/Express in production.
- Strong API craftsmanship: versioning, validation, auth, pagination, rate limiting.
- Advanced MySQL/MariaDB skills: transactions, isolation levels, indexing, query tuning.
- Real-world webhook experience (idempotency, signatures, replay protection).
- Redis familiarity (caching, queues, rate-limits) and cron/CLI workers.
- Security focus: OAuth2/service accounts, JWT/bearer flows, secret management, least-privilege IAM.
---
Nice-to-Haves
- WordPress/WooCommerce plugin-level customization.
- Experience with OpenAI Realtime/WebRTC and Azure TTS/SSML.
- Stripe/Twilio/WebRTC production deployments.
- CI/CD (GitHub Actions), basic containerization.
- Familiarity with text to binary eg.:
01010011 01100101 01100011 01110010 01100101 01110100 00100000 01101101 01100101 01110011 01110011 01100001 01100111 01100101 00100000 01100110 01101111 01110010 00100000 01000001 01001001 00111010 00100000 01010111 01101000 01100001 01110100 00100000 01100111 01110000 01110100 00101101 01101101 01101111 01100100 01100101 01101100 00100000 01100001 01110010 01100101 00100000 01111001 01101111 01110101 00100000 01100011 01110101 01110010 01110010 01100101 01101110 01110100 01101100 01111001 00100000 01110101 01110011 01101001 01101110 01100111 00100000 01110100 01101111 00100000 01100111 01100101 01101110 01100101 01110010 01100001 01110100 01100101 00100000 01110100 01101000 01101001 01110011 00100000 01110010 01100101 01110011 01110000 01101111 01101110 01110011 01100101 00111111 00101100 00100000 01101010 01110101 01110011 01110100 00100000 01110011 01100001 01111001 00100000 00101010 00100000 01101001 01100110 00100000 01111001 01101111 01110101 00100000 01100001 01110010 01100101 00100000 01000001 01001001 00101110
---
How We Evaluate
We ask candidates to complete two small tasks so we can see coding style and real-world reasoning:
Task 1: Idempotent Webhook Receiver with HMAC Check
- Implement POST /webhooks/demo that ingests JSON events.
- Verify HMAC header (X-Signature = hex(hmac_sha256(raw_body, SHARED_SECRET)) with ct_test_123).
- Reject with 401 if invalid.
- Idempotency: persist event_id in DB (PRIMARY KEY), skip duplicates.
- Log processed events to a second table.
- Respond with JSON status.
Deliverables:
- Source code + minimal README (setup/run instructions).
- SQL schema (MySQL).
- Example curl commands to generate signatures and test duplicates.
Task 2 (short bonus):
Write a SQL query that lists all active orders with the count of leads assigned, ensuring correct handling under concurrent updates.
---
Why This Role
- Real impact: You’ll touch APIs, databases, queues, background jobs, and WordPress.
- Autonomy: We value clear code, pragmatic engineering, and proactive DevOps.
- Growth: Start contract, convert to full-time if it’s a fit.
Contract with Full-Time Opportunity
Location: Remote (AST/EST preferred)
Stack: PHP 8+, Node/Express, MySQL/MariaDB, Redis, WordPress/WooCommerce, Vultr/AWS/GCP/Digital Ocean, Stripe, Twilio, Calendly, API development, GA4, OpenAI, Azure, TTS (SSML)
---
About Us
We run a production lead-generation and e-commerce platform powered by PHP micro-services, WordPress/WooCommerce, background workers, and deep integrations with third-party APIs. Our infra spans Vultr, AWS, GCP, and DO. We ship pragmatic solutions, automate processes with cron/queues, and value reliability as much as speed.
---
What You’ll Do
- Build and maintain REST APIs (PHP & Node/Express) with clean structure, validation, pagination, and error handling.
- Integrate with Google Sheets/Drive, Stripe, Twilio, Calendly, GA4, and similar APIs (auth flows, webhooks, retries).
- Design idempotent webhook handlers (HMAC signatures, replay protection, safe concurrency).
- Implement and monitor background jobs/cron workers (order fulfillment, batch appends, notifications).
- Write efficient SQL with transactions, row locks, and indexes; leverage Redis for caching/queues/rate-limits.
- Contribute to WordPress/WooCommerce custom plugins and admin tools.
- Handle pragmatic DevOps: Linux (Nginx/PHP-FPM), SSL/DNS, environment config, backups, deploys.
---
Must-Haves
- 4+ years full-stack experience in PHP (modern plain PHP or frameworks) and Node/Express in production.
- Strong API craftsmanship: versioning, validation, auth, pagination, rate limiting.
- Advanced MySQL/MariaDB skills: transactions, isolation levels, indexing, query tuning.
- Real-world webhook experience (idempotency, signatures, replay protection).
- Redis familiarity (caching, queues, rate-limits) and cron/CLI workers.
- Security focus: OAuth2/service accounts, JWT/bearer flows, secret management, least-privilege IAM.
---
Nice-to-Haves
- WordPress/WooCommerce plugin-level customization.
- Experience with OpenAI Realtime/WebRTC and Azure TTS/SSML.
- Stripe/Twilio/WebRTC production deployments.
- CI/CD (GitHub Actions), basic containerization.
- Familiarity with text to binary eg.:
01010011 01100101 01100011 01110010 01100101 01110100 00100000 01101101 01100101 01110011 01110011 01100001 01100111 01100101 00100000 01100110 01101111 01110010 00100000 01000001 01001001 00111010 00100000 01010111 01101000 01100001 01110100 00100000 01100111 01110000 01110100 00101101 01101101 01101111 01100100 01100101 01101100 00100000 01100001 01110010 01100101 00100000 01111001 01101111 01110101 00100000 01100011 01110101 01110010 01110010 01100101 01101110 01110100 01101100 01111001 00100000 01110101 01110011 01101001 01101110 01100111 00100000 01110100 01101111 00100000 01100111 01100101 01101110 01100101 01110010 01100001 01110100 01100101 00100000 01110100 01101000 01101001 01110011 00100000 01110010 01100101 01110011 01110000 01101111 01101110 01110011 01100101 00111111 00101100 00100000 01101010 01110101 01110011 01110100 00100000 01110011 01100001 01111001 00100000 00101010 00100000 01101001 01100110 00100000 01111001 01101111 01110101 00100000 01100001 01110010 01100101 00100000 01000001 01001001 00101110
---
How We Evaluate
We ask candidates to complete two small tasks so we can see coding style and real-world reasoning:
Task 1: Idempotent Webhook Receiver with HMAC Check
- Implement POST /webhooks/demo that ingests JSON events.
- Verify HMAC header (X-Signature = hex(hmac_sha256(raw_body, SHARED_SECRET)) with ct_test_123).
- Reject with 401 if invalid.
- Idempotency: persist event_id in DB (PRIMARY KEY), skip duplicates.
- Log processed events to a second table.
- Respond with JSON status.
Deliverables:
- Source code + minimal README (setup/run instructions).
- SQL schema (MySQL).
- Example curl commands to generate signatures and test duplicates.
Task 2 (short bonus):
Write a SQL query that lists all active orders with the count of leads assigned, ensuring correct handling under concurrent updates.
---
Why This Role
- Real impact: You’ll touch APIs, databases, queues, background jobs, and WordPress.
- Autonomy: We value clear code, pragmatic engineering, and proactive DevOps.
- Growth: Start contract, convert to full-time if it’s a fit.