Senior Product and Platform Engineer (Remote)

About PowerTech Digital PowerTech Digital is a UK software development and digital consultancy working with enterprise clients on digital transformation, data architecture, and AI-enabled delivery. We're a small, senior team that ships fast by pairing strong engineering judgement with AI-native tooling — and we're productising that approach. Prompt to Production is our newest service: organisations empower their workforce to build applications on AI platforms like Lovable, Bolt, and Claude, and we take those applications to secure, production-grade deployments on the client's own cloud — their identity, their policies, their infrastructure.

Every release goes through the same governed pipeline: handover → security audit → hardening → deployment. You would own that pipeline. The role This is a hybrid delivery-and-product role. Roughly two-thirds is running and improving the Prompt to Production service end to end; the rest is full-stack product engineering on client builds and our own tooling. You'll work directly with the founder, with real autonomy, modern AI tooling as standard, and a clear brief: make the service so repeatable that every deployment is execution, not invention.

What you'll do Run the deployment pipeline: take applications built by citizen developers from a GitHub handover through security audit, remediation, hardening, and release to Azure (AWS/GCP as we expand). Lead handover calls (30–60 min) with the people who built the apps — understanding what they made, what it touches, and who needs access. Execute AI-assisted security audits using Claude Code against our published checklist — auth and authorisation, RLS policies, secrets handling, data exposure, dependency vulnerabilities — and produce our standardised audit report.

Implement production hardening: migrate authentication to Microsoft Entra ID (tenant-locked app registrations), move secrets into Azure Key Vault, configure CI/CD with GitHub Actions and OIDC federated credentials. Own and improve the infrastructure templates (Bicep/Terraform + cloud-init): per-app resource groups, self-hosted Supabase stacks, automated backups to Blob Storage, monitoring with Application Insights.

Operate live tier 2 stacks: updates, backup verification, restore tests, secret rotation. Build product: full-stack features on client engagements and internal tooling — including AI integration work (LLM APIs, agents, structured extraction, evals). Make the service better every cycle: tighten the audit checklist, automate the manual steps, improve the templates. Your job is to make your own job smaller.

What you must bring 3–6 years as a full-stack engineer with Node.js and TypeScript/React at the core — you're genuinely strong at building product, not just gluing services. Must have experience managing and maintaining self-hosted Supabase PostgreSQL in production; Supabase experience (RLS, auth, migrations, edge functions) is a significant advantage. Real Docker/Compose ownership and CI/CD you've built yourself (GitHub Actions preferred).

Cloud fundamentals — ideally Azure (VMs, networking, Key Vault, Entra ID); strong AWS/GCP experience with willingness to go deep on Azure also works. AI integration experience in shipped products — you've built with LLM APIs (Anthropic, OpenAI), understand prompting, structured outputs, and where AI belongs (and doesn't) in a product. Security instincts: you think about what an app exposes before you think about what it does.

Excellent written and spoken English — you'll run client-facing calls and write reports that IT directors file. The mindset we're hiring for Product engineering, not ticket-taking. You ask why before how, you'd rather delete a step than document it, you treat every deployment as a chance to improve the system that does deployments, and you're comfortable being the person accountable for something working in production.

You already use AI tools as a force multiplier in your daily work — this role assumes it. Nice to have Bicep or Terraform in anger; Linux server administration. Experience with AI app builders (Lovable, Bolt, v0) — even personal projects. Security certifications or OWASP familiarity; AZ-104/AZ-204. Experience working directly with clients or stakeholders in a consultancy setting. Logistics & compensation Remote-first.

Significant overlap with UK working hours required. Competitive compensation based on location and experience. [Adjust per market — e.g. ₹18–28 LPA for India-based candidates; contractor or EOR arrangement available.] Direct exposure to the full commercial picture of a productised service — how it's priced, sold, and scaled.