Power Tech Digital Limited

About PowerTech Digital

PowerTech Digital is a UK software development and digital consultancy working with enterprise clients on digital transformation, data architecture, and AI-enabled delivery. We're a small, senior team that ships fast by pairing strong engineering judgement with AI-native tooling — and we're productising that approach.

Prompt to Production is our newest service: organisations empower their workforce to build applications on AI platforms like Lovable, Bolt, and Claude, and we take those applications to secure, production-grade deployments on the client's own cloud — their identity, their policies, their infrastructure. Every release goes through the same governed pipeline: handover → security audit → hardening → deployment. You would own that pipeline.

The role

This is a hybrid delivery-and-product role. Roughly two-thirds is running and improving the Prompt to Production service end to end; the rest is full-stack product engineering on client builds and our own tooling. You'll work directly with the founder, with real autonomy, modern AI tooling as standard, and a clear brief: make the service so repeatable that every deployment is execution, not invention.

What you'll do

• Run the deployment pipeline: take applications built by citizen developers from a GitHub handover through security audit, remediation, hardening, and release to Azure (AWS/GCP as we expand).
• Lead handover calls (30–60 min) with the people who built the apps — understanding what they made, what it touches, and who needs access.
• Execute AI-assisted security audits using Claude Code against our published checklist — auth and authorisation, RLS policies, secrets handling, data exposure, dependency vulnerabilities — and produce our standardised audit report.
• Implement production hardening: migrate authentication to Microsoft Entra ID (tenant-locked app registrations), move secrets into Azure Key Vault, configure CI/CD with GitHub Actions and OIDC federated credentials.
• Own and improve the infrastructure templates (Bicep/Terraform + cloud-init): per-app resource groups, self-hosted Supabase stacks, automated backups to Blob Storage, monitoring with Application Insights.
• Operate live tier 2 stacks: updates, backup verification, restore tests, secret rotation.
• Build product: full-stack features on client engagements and internal tooling — including AI integration work (LLM APIs, agents, structured extraction, evals).
• Make the service better every cycle: tighten the audit checklist, automate the manual steps, improve the templates. Your job is to make your own job smaller.

What you must bring

• 3–6 years as a full-stack engineer with Node.js and TypeScript/React at the core — you're genuinely strong at building product, not just gluing services.
• Must have experience managing and maintaining self-hosted Supabase
• PostgreSQL in production; Supabase experience (RLS, auth, migrations, edge functions) is a significant advantage.
• Real Docker/Compose ownership and CI/CD you've built yourself (GitHub Actions preferred).
• Cloud fundamentals — ideally Azure (VMs, networking, Key Vault, Entra ID); strong AWS/GCP experience with willingness to go deep on Azure also works.
• AI integration experience in shipped products — you've built with LLM APIs (Anthropic, OpenAI), understand prompting, structured outputs, and where AI belongs (and doesn't) in a product.
• Security instincts: you think about what an app exposes before you think about what it does.
• Excellent written and spoken English — you'll run client-facing calls and write reports that IT directors file.

The mindset we're hiring for

Product engineering, not ticket-taking. You ask why before how, you'd rather delete a step than document it, you treat every deployment as a chance to improve the system that does deployments, and you're comfortable being the person accountable for something working in production. You already use AI tools as a force multiplier in your daily work — this role assumes it.

Nice to have

• Bicep or Terraform in anger; Linux server administration.
• Experience with AI app builders (Lovable, Bolt, v0) — even personal projects.
• Security certifications or OWASP familiarity; AZ-104/AZ-204.
• Experience working directly with clients or stakeholders in a consultancy setting.

Logistics & compensation

• Remote-first. Significant overlap with UK working hours required.
• Competitive compensation based on location and experience. [Adjust per market — e.g. ₹18–28 LPA for India-based candidates; contractor or EOR arrangement available.]
• Direct exposure to the full commercial picture of a productised service — how it's priced, sold, and scaled.