Founding Full-Stack Engineer (CTO track)

Company Description:

xPMO is an Arabic-first PMO and portfolio-governance platform built for the GCC's giga-project era — plus the consultancy that implements it. We help developers, government bodies and PMOs turn governance from documents on a shelf into a living system: portfolio, stage gates, risk, readiness and leadership reporting in one place, bilingual (AR/EN) and AI-assisted. We're pre-launch, heading to commercial launch at Cityscape Global, November 2026, and building our founding team now. Based in Riyadh, Saudi Arabia.

About the role: xPMO's platform was built end-to-end by our founder using a modern stack and AI-assisted development, and it's live in production. We're now bringing on our first engineer to own it as a human: harden security, validate our hosting and architecture, drive scalability, and become the technical backbone of the product. This is a founding, high-ownership role — with a genuine path to CTO for the right person. You won't be replacing AI-assisted development; you'll be bringing the engineering rigor, depth and accountability on top of it.

What you'll do

• Take full ownership of the xPMO codebase (Next.js, React, TypeScript, Tailwind, Supabase/PostgreSQL, Vercel).
• Lead a security review and hardening: authentication, multi-tenant data isolation (row-level security), API authorization, secrets management, security headers, rate limiting.
• Validate and evolve our hosting, infrastructure and deployment for reliability and scale.
• Own performance, database design and scalability as we onboard customers.
• Set architecture direction, code quality standards and the technical roadmap.
• Be accountable for shipping enhancements reliably and reducing 100% reliance on AI-only development.

What we're looking for

• A strong full-stack engineer with real depth — you can read, refactor and own a production codebase, not just prototype.
• Solid experience with TypeScript, React/Next.js and PostgreSQL (Supabase a plus).
• Practical security knowledge: auth, authorization, multi-tenant isolation, common web vulnerabilities.
• Experience deploying and scaling production SaaS (hosting, CI/CD, monitoring).
• Founder mindset: high ownership, pragmatic, comfortable being the technical decision-maker.

Nice to have

• B2B / multi-tenant SaaS experience · payments (Moyasar/Stripe) · Arabic/RTL or GCC-market experience · rigorous AI-assisted development.