Founding Full-Stack Engineer (CTO track)

Company Description:xPMO is an Arabic-first PMO and portfolio-governance platform built for the GCC's giga-project era — plus the consultancy that implements it. We help developers, government bodies and PMOs turn governance from documents on a shelf into a living system: portfolio, stage gates, risk, readiness and leadership reporting in one place, bilingual (AR/EN) and AI-assisted. We're pre-launch, heading to commercial launch at Cityscape Global, November 2026, and building our founding team now. Based in Riyadh, Saudi Arabia.About the role: xPMO's platform was built end-to-end by our founder using a modern stack and AI-assisted development, and it's live in production. We're now bringing on our first engineer to own it as a human: harden security, validate our hosting and architecture, drive scalability, and become the technical backbone of the product. This is a founding, high-ownership role — with a genuine path to CTO for the right person. You won't be replacing AI-assisted development; you'll be bringing the engineering rigor, depth and accountability on top of it.What you'll doTake full ownership of the xPMO codebase (Next.js, React, TypeScript, Tailwind, Supabase/PostgreSQL, Vercel).Lead a security review and hardening: authentication, multi-tenant data isolation (row-level security), API authorization, secrets management, security headers, rate limiting.Validate and evolve our hosting, infrastructure and deployment for reliability and scale.Own performance, database design and scalability as we onboard customers.Set architecture direction, code quality standards and the technical roadmap.Be accountable for shipping enhancements reliably and reducing 100% reliance on AI-only development.What we're looking forA strong full-stack engineer with real depth — you can read, refactor and own a production codebase, not just prototype.Solid experience with TypeScript, React/Next.js and PostgreSQL (Supabase a plus).Practical security knowledge: auth, authorization, multi-tenant isolation, common web vulnerabilities.Experience deploying and scaling production SaaS (hosting, CI/CD, monitoring).Founder mindset: high ownership, pragmatic, comfortable being the technical decision-maker.Nice to haveB2B / multi-tenant SaaS experience · payments (Moyasar/Stripe) · Arabic/RTL or GCC-market experience · rigorous AI-assisted development.