About the Role
We are hiring a Web Developer who can operate across the full spectrum of modern web development — from crafting precise, responsive frontends to building robust Drupal backends with a security-first mindset. This is a single, flexible role open to candidates at both junior and senior levels. The depth of responsibilities and compensation will be calibrated to your experience, with junior candidates expected to have strong frontend fundamentals and Drupal exposure, and senior candidates expected to bring full-stack Drupal expertise along with a proven command of web security protocols.
If you are someone who takes pride in clean code, thinks about security from the ground up, and wants to grow within a collaborative remote-first team — we would like to hear from you.
Key Responsibilities
Frontend Development
- Develop responsive, cross-browser-compatible web interfaces using HTML5, CSS3, and JavaScript.
- Build and customise Drupal frontends — including theme development, Twig templating, and site configuration.
- Translate design mockups and wireframes into pixel-accurate, accessible, and performant UI components.
- Ensure consistent UI quality across devices, browsers, and screen resolutions.
Backend Development
- Develop and maintain Drupal backends — custom module development, hook system, entity API, Views, and third-party integrations.
- Design and manage content architectures, database structures, and server-side logic within the Drupal ecosystem.
- Build and consume RESTful and GraphQL APIs securely and efficiently.
- Maintain and optimise Drupal installations, including core and contributed module updates.
Web Security
- Implement and enforce web security protocols across all development work — HTTPS/TLS configuration, CSRF protection, input validation, and secure authentication mechanisms.
- Apply OWASP Top 10 guidelines consistently to mitigate common web vulnerabilities.
- Conduct periodic security reviews of codebases to identify and remediate vulnerabilities.
- Ensure Drupal-specific security hardening — role-based access control, secure configuration, and timely patch management.
Collaboration & Quality
- Participate in code reviews, maintain coding standards, and provide constructive feedback to peers.
- Work closely with designers, product stakeholders, and backend engineers in a fully remote, async-first environment.
- Document technical decisions, module behaviour, and security configurations for team reference.
Required Skills & Qualifications
- Solid command of HTML5, CSS3, and JavaScript — semantic markup, responsive design, and accessibility basics.
- Hands-on experience with Drupal frontend development — theming, Twig templating, and site-building.
- Awareness of web security fundamentals and secure coding practices.
- Familiarity with Git-based workflows and collaborative development.
- Ability to work independently, communicate clearly, and manage tasks in a remote environment.
- Expert-level Drupal frontend — advanced theming, CSS architecture (BEM/Sass), JavaScript integration, and performance optimisation.
- Strong Drupal backend development — custom modules, PHP (7.x/8.x), Drupal's OOP architecture, services, and API integrations.
- Demonstrated expertise in web security: OWASP Top 10 mitigation, HTTPS/TLS, CSRF, secure API design, and Drupal security hardening.
- Experience conducting security audits and vulnerability assessments on Drupal web applications.
- Proven ability to mentor junior developers and lead technical decisions.
Good to Have
- Exposure to headless or decoupled Drupal architectures (JSON:API, GraphQL).
- Familiarity with JavaScript frameworks such as React or Vue.js.
- Knowledge of server infrastructure — Linux, Nginx/Apache, Docker, or cloud platforms (AWS/GCP/Azure).
- Understanding of CI/CD pipelines and automated testing practices.
- Awareness of GDPR and data privacy considerations in web development.
- Experience with Drupal multisite configurations or large-scale content migrations.
