First seen by Alion on Nov 4, 2026.
Senior full-stack developer (Node.js / React / SQL Server)
We are hiring a senior full-stack developer for a long-term role building our portfolio of business applications, starting with a multi-branch school management system and followed by more systems in other sectors. Every application is API-first: each feature is delivered through a versioned, documented REST API that the web app uses today and mobile apps will use later.
About the role
You will be our lead developer across several products, each a multi-user business system with roles and permissions, records that must never be lost, payments, reporting and parent- or customer-facing portals. The first product is ready to build:
• A business requirements document with numbered requirements and acceptance rules
• A complete UI/UX design with workflow diagrams and a clickable prototype
• A reviewed SQL Server data model
• A started codebase: monorepo, database migrations, API and web shells, Azure infrastructure as code and a deployment pipeline
Later products will follow the same pattern, and you will help shape the shared foundation (sign-in, permissions, audit, payments, notifications) so each new application starts faster than the last.
What you will build and own
• The API as the product. Design and build versioned REST APIs (/api/v1) covering every feature, documented with OpenAPI. The web app gets no back door: if a screen can do it, the API can do it, so mobile apps need no backend rework.
• Security in the backend, not just the screen. Sign-in through Microsoft Entra ID with MFA, role-based permissions, branch or organisation scoping, and confidential records enforced in every endpoint.
• Web applications. Build staff screens and customer or parent portals in React from approved designs, accessible (WCAG 2.1 AA) and responsive down to phone width.
• Correct, auditable data. No physical deletes of historical records, append-only audit logs, and reversals instead of edits for posted financial transactions.
• Money handled exactly. Billing runs that can never double-charge, payment allocation, receipts, reversals with approval and daily reconciliation.
• Mobile-ready behaviour. Idempotent writes, offline-sync conflict handling, pagination and filtering conventions, and push-notification hooks.
• Integrations behind adapters. M-Pesa payments and callbacks, SMS, WhatsApp and email notifications, and CSV/Excel imports for migrating existing records.
• A reusable foundation. Shared modules and templates for identity, permissions, audit, notifications and payments that every new product reuses.
• Quality and operations. Automated tests, CI/CD to Azure, logging and monitoring, backups and a tested restore.

