Clients give us access to their operation. You make sure that access is well kept: the infrastructure, the monitoring, the permissions and the security standard every Nuvnext project meets.
The role
- Run deployments, databases and monitoring for the platform and for client projects.
- Review data access policies, secrets and per-client permissions.
- Own the security standard: sweeps, evidence and the quarterly review.
- Respond to incidents and write down what happened and what changed.
Your first 90 days
- Day 30
You learn the infrastructure and the standard; you close your first findings.
- Day 60
You run the security sweep of a complete project with its evidence.
- Day 90
You own monitoring and incident response for the platform.
Stack and tools
VercelSupabase / PostgresSentryGitHub ActionsTypeScript
What we look for
Must have
- You have run something in production and watched it break.
- You understand access control, secrets and row-level policies in databases.
- You document what you do so someone else can repeat it.
- You would rather prevent than put out fires, and you know how to put them out.
Nice to have
- Experience with SOC 2, ISO 27001 or similar frameworks.
- Postgres and Supabase in production.
- Web application security.
What working here is like
What you build goes into products that operate real organizations. You work directly with the founders, with no layers between your code and production, under the same rule we give the intelligence: a person signs what is critical.