Full-Stack & Platform Engineer

LYDIAM GROUP

Full-Stack & Platform Engineer

Global Treasury, FX & Digital-Asset Infrastructure

Engineering · Reports to the Director of Operations and technical lead · Full-time · Remote (South Africa) · Start: immediate

R25,000 – R55,000 per month · based on experience Mid (3–5 yrs) R25,000–R40,000 · Senior (6+ yrs) R40,000–R55,000

ABOUT LYDIAM GROUP

Lydiam Group is a regulated treasury-services firm working across the United Kingdom, UAE, Poland, Canada and the United States. We provide FX in more than 140 currencies, crypto on- and off-ramps, cross-asset swaps, hedging, OTC and payments for institutional, corporate and private clients.

We build and run our own operational platform rather than buying it off the shelf: client onboarding, compliance and KYC, a double-entry ledger, payment-rail integrations, e-signing and client reporting are all maintained in-house. Because we operate in a regulated financial environment, everything we build has to be secure, auditable and ready for a regulator to inspect.

THE ROLE

We are hiring a Full-Stack & Platform Engineer to build, run and secure the systems behind the business. The work spans the whole stack: React front ends, a PostgreSQL/Supabase backend with row-level security, serverless edge functions, integrations with Microsoft and our banking partners, and the infrastructure that holds it together.

This is a broad remit. Alongside application development, you will be the person who runs our technology estate day to day: the Microsoft 365 tenant, hosting and domains, vendor accounts and the integrations between them. You will ship features end to end, keep production healthy, and keep the whole environment secure and tidy, working closely with operations, compliance and leadership.

ENGINEERING — WHAT YOU WILL BUILD

• Front end. Build and maintain our admin Command Centre and client portal (React 18, Vite, Tailwind CSS). Staff and clients use these every day, so they need to be responsive, accessible and consistent with the brand.
• Backend and data. Design and evolve the PostgreSQL schema, write secure SQL and stored procedures, enforce row-level security and least-privilege access, and protect the integrity of the double-entry ledger.
• Serverless. Build and deploy TypeScript/Deno edge functions that power document generation, e-signing, email, statements and money movement.
• Integrations. Connect and maintain Microsoft Graph (SharePoint, Outlook, Entra ID), banking and payment-rail partners and our CRM, using REST APIs and webhooks with proper idempotency and error handling.
• Quality. Automated tests, code review, clear documentation and careful change management, with staged rollouts checked in production.

PLATFORM & IT — WHAT YOU WILL RUN

• Hosting and deployments. Own CI/CD and deployments on Vercel, the Supabase project, database migrations, environment and secrets management, logging, monitoring and incident response. Keep the front ends and backend in step and releases safe.
• Microsoft 365 tenant. Administer the group's Microsoft estate: Entra ID users, groups and app registrations, licences, Exchange/Outlook, SharePoint and Teams, with MFA and conditional access enforced throughout.
• Domains and email. Manage domains, DNS, SSL certificates and email deliverability (SPF, DKIM, DMARC) across the group's brands.
• Vendor and SaaS accounts. Own the accounts behind the platform: e-signing, CRM, banking and payment-rail portals, monitoring and email services, including API keys, billing and renewals.
• Access control. Run joiner, mover and leaver processes across every system; review access regularly and keep it least-privilege.
• Backups and continuity. Keep backups running and tested, and make sure we can recover quickly from an incident.
• Cost control. Track subscription and infrastructure spend and keep it lean.
• Internal support. Be the first port of call for staff on accounts, email and access issues.

SECURITY & COMPLIANCE — ALWAYS ON

Security runs through everything above. You will handle secrets and keys carefully, keep systems auditable, and work within our AML/KYC and financial-promotions obligations. In a regulated firm, mistakes carry real consequences, and we build accordingly.

TECH STACK

Area

Technologies

Front end

React 18, Vite, Tailwind CSS, JavaScript / TypeScript

Backend & data

Supabase (PostgreSQL, row-level security, Auth), SQL and PL/pgSQL

Serverless

Supabase Edge Functions (Deno, TypeScript)

Integrations

Microsoft Graph (SharePoint, Outlook, Entra ID), REST APIs, webhooks

Infra & DevOps

Vercel (CI/CD and hosting), Git/GitHub, database migrations, secrets management

IT & admin

Microsoft 365 (Entra ID, Exchange, SharePoint, Teams), DNS and domains, vendor and billing portals

Domain systems

Double-entry ledger, payment rails, KYC/onboarding, e-signing and PDF generation, self-hosted CRM

WHAT WE ARE LOOKING FOR

• Strong full-stack experience with modern React and a relational database backend, including production applications you have owned yourself
• Solid PostgreSQL: schema design, complex queries and stored procedures, and a firm grasp of transactions and data integrity
• Comfortable building serverless or edge functions and integrating third-party REST APIs and webhooks
• Hands-on DevOps: CI/CD, deployments, environment and secrets management, and debugging live production issues
• Comfortable acting as systems administrator: Microsoft 365 and Entra ID, DNS and domains, and the accounts, keys and billing behind a SaaS stack
• Good security instincts: authentication and authorisation, row-level or equivalent access control, and safe handling of credentials and sensitive data
• A Git-based workflow and tested, reviewable, well-documented code
• Able to take work from requirement to production with little supervision, and to explain it clearly to non-technical colleagues

The role suits an engineer who treats production reliability and data integrity as a personal responsibility, and who enjoys being the person who keeps the whole technology estate in order, not just the codebase. Clear communication with operations and compliance matters as much as clean code.

NICE TO HAVE

• Fintech, payments, banking or trading-platform background; experience in regulated environments (AML/KYC, auditability, data protection)
• Supabase and PostgreSQL row-level security specifically; Deno; Microsoft Graph or wider Microsoft 365 administration
• Crypto or digital-asset exposure such as on/off-ramp, custody or wallet infrastructure; familiarity with double-entry accounting or ledger systems
• Deeper TypeScript, Nx monorepos, NestJS or comparable frameworks

YOUR FIRST 90 DAYS

• 30 days: productive in the codebase, shipping small, safe changes across the stack; across the architecture, security model and the accounts and services that make up our estate
• 60 days: owning a feature area end to end, writing migrations and edge functions, and running the Microsoft tenant, hosting and vendor accounts day to day
• 90 days: trusted with production changes to core systems, with a visible impact on reliability, security, costs and developer workflow

HOW TO APPLY

Send your CV, a GitHub profile or portfolio, and the level and salary you are applying at, to the Recruitment Team at info@lydiamgroup.com with the subject line “Full-Stack & Platform Engineer — [Your Name]”.

Recruitment Team · Lydiam Group

Confidential. This description outlines the principal duties of the role and is not exhaustive; responsibilities may evolve with the needs of the business.

Pay: R25 000,00 - R55 000,00 per month

Work Location: Hybrid remote in Johannesburg, Gauteng