{"id":3978652,"url":"https://alion.io/job/naturecan-uk-principal-developer","title":"Principal Developer","company":{"id":695704,"name":"Naturecan UK","domain":"naturecan.com","url":"https://alion.io/company/naturecan","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Stockport, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Confluence","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"Jira","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Node JS","optional":false},{"name":"PHP","optional":false},{"name":"RAG","optional":false},{"name":"Rest API","optional":false},{"name":"TypeScript","optional":false},{"name":"Windows","optional":false},{"name":"WordPress","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-11-09T13:30:23Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T19:00:09Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Group Technology\nPrincipal Developer\nFull-time · Stockport office every Thursday; remote the rest of the week · Salary dependent on experience\nAbout Naturecan\nNaturecan Group is a fast-growing, multi-entity health and wellness business operating across e-commerce, regulated pharmacy, and clinical healthcare. We run operations across the UK, Germany, and beyond - brands include Naturecan (D2C, ~50 Shopify stores), Mycannabis and Nowomed (German medical cannabis pharmacy), WMG Pharma (wholesale pharmaceutical distribution), and Dose (our CQC-registered UK medical cannabis clinic, in development).\nGroup net sales continue to group across Naturecan Core, MedCan pharmacy, WMG wholesale, and Dose all scaling simultaneously. The technology team sits at the heart of that growth: we build and maintain the platforms that underpin every entity in the group.\nThe Role\nThis is a group-level principal technical role. You will report directly to the IT Director with a remit that spans infrastructure ownership, cross-team technical collaboration, and the ability to float across streams and pick up whatever is most critical at any given point.\nThe nature of the role is breadth and depth in equal measure. One day you may be deep in a server performance issue for the MedCan WordPress estate; the next you are reviewing Dose’s payment gateway architecture or driving the security remediation programme. Context switching at pace - without losing technical rigour - is fundamental to how this role operates.\nIn practice, the role has two dimensions:\n1. Technical ownership. - owning the group’s infrastructure, security governance, DNS, AI strategy, and platform-level decisions that require principal-level experience. This includes driving improvements to internal tooling and communications infrastructure - ensuring the business operates on the right foundations as it scales.\n2. Cross-team technical collaboration. - supporting the Engineering Manager and delivery teams as a senior technical resource - available to dig into hard architectural or infrastructure problems and provide technical continuity across delivery streams when needed.\nAt the outset this is an individual contributor role with no people reporting line - influence through technical depth and judgement rather than hierarchy. That said, this role is not rigidly defined. We are looking for the right person first, and if that person brings people leadership as an additional strength, there is a natural opportunity for the role to evolve in that direction as the team grows. What matters most is exceptional technical ability and the drive to use it.\nAs an e-commerce and healthcare business, our platforms run 24/7. Occasionally that means responding to something outside of normal hours - this is part of the role and expected on those rare occasions when it’s needed. We are flexible in return: if you’ve been working late resolving a critical issue, you are not expected to be online first thing the following morning. The goal of this role is also to put the right guardrails in place so that those situations become increasingly rare.\nWhat You’ll Own\nInfrastructure & Security\nOwn all DNS and domain management across the Naturecan group - a senior-only responsibility with significant business risk\nLead the security audit remediation programme - driving findings from third-party security partners through to resolution\nEndpoint management and device security - Windows EOL, device encryption, endpoint tooling configuration, and Active Directory governance\nGCP and cloud infrastructure governance - security posture, access controls, cost management\nOversee infrastructure migration for MedCan and related legacy server decommission\nDrive the migration of internal business communications onto modern, structured tooling - reducing reliance on informal channels and building an infrastructure that scales with the business\nOngoing IT decisions that require senior judgement - device lifecycle, authorisation decisions, tooling governance across the group\nMedCan - Platform Stability & Active Workstreams\nWork with the engineering team to formalise a clear stability plan for Mycannabis 360 and Mycannabis Wuppertal - addressing current performance constraints and ensuring the platform remains stable as clinic volumes and data grow\nAssess the right path forward for the MedCan WordPress estate: near-term improvements, plugin and database maintenance, monitoring and alerting - with migration to Dose as the longer-term destination\nOwn the ongoing WordPress maintenance cadence: plugin security and rewrites, DB cleansing (every 3-6 months as order data grows), uptime monitoring improvements\nTeleclinic onboarding - technical oversight of the Clinics API and new integrations as MedCan scales its prescriber network\nPayment gateway integrations across the MedCan estate - future providers; implementation oversight and security review\nDose - Technical Oversight\nPayment gateway integration - senior technical oversight and review, working closely with the Dose team and Engineering Manager\nArchitecture review on complex Dose decisions - regulatory data handling, CQC compliance, patient data security\nDevOps support for the Dose platform - CI/CD, environment management, deployment pipeline stability\nCross-platform technical decisions, particularly where the Nowomed-to-Dose migration path intersects with MedCan infrastructure\nAI Automation & Developer Productivity\nSupport the Engineering Manager’s AI automation programme - contributing technically to the meeting-to-Jira pipeline, communications-to-ticket dashboard, and RAG systems across Jira, Confluence, and codebases\nDrive AI code completion and tooling adoption across both engineering teams - building shared workflow standards at scale\nOwn the technical strategy for Claude Enterprise, API consumption governance, and MCP integration across the group\nIdentify and ship AI-driven improvements that reduce manual overhead in sprint planning, incident response, and onboarding\nEngineering Standards\nSet and maintain code review standards and engineering quality bar across Dose and MedCan teams\nA senior technical resource for the Engineering Manager and delivery teams - available to dig into the hard problems and bring them to resolution\nTechnical mentoring for the Dose Engineering Lead and senior developers across both streams\nDeveloper productivity tooling - sprint analytics, Jira workflow improvements, shared tooling standards\nWhat We’re Looking For\nWe’re looking for someone with most of the following - you don’t need to tick every box:\nTechnical depth\n8+ years of professional software development, with strong backend and systems-level experience\nComfortable across a mixed stack: WordPress/PHP (MedCan estate), TypeScript/Bun.js (Dose). Node.js experience is directly transferable.\nDeep understanding of security architecture - authentication, authorisation, DNS/email security (SPF, DKIM, DMARC), endpoint management, access controls\nInfrastructure experience: cloud (GCP, AWS), VPS/dedicated server management, migrations, and infrastructure-as-code approaches\nPayment gateway integration experience - PSPs, webhooks, idempotency, and secure handling of payment flows in regulated contexts\nRESTful API design and review - able to audit, improve, and set standards across codebases you didn’t write\nWordPress performance, plugin management, and database optimisation - able to diagnose and resolve platform degradation under load\nRegulated environment experience\nExperience working in healthcare, fintech, or other regulated environments where data security, audit trails, and compliance requirements shape technical decisions\nFamiliarity with GDPR in a practical engineering context - not just as a compliance checkbox\nAI tooling & automation\nHands-on experience with AI-assisted development - LLMs, MCP servers, RAG systems, and automation pipelines\nAbility to build and govern AI tooling at an organisational level - team-wide adoption, standards, and cost governance\nWorking style\nThrives on context switching - equally at home firefighting a live server issue and progressing a longer-term security programme; able to reprioritise without losing momentum on either\nOperates autonomously and works at pace - picks up complex problems, drives them to resolution, and communicates clearly throughout\nComfortable as a senior technical contributor without a people reporting line - influence through depth, not hierarchy\nStrong written communication - able to translate complex technical situations into clear, concise summaries for non-technical stakeholders\nReliable under pressure - shows up on incidents, traces root causes quickly, and communicates clearly while doing it\nComfortable with the realities of e-commerce and regulated healthcare - platforms run around the clock, and occasionally so do the people who build them\nAbout the Team\nThe engineering team is small, direct, and high-trust. The Engineering Manager leads delivery across Dose and MedCan. The Dose team is a mix of FTE and senior contractors focused on the clinical platform. MedCan has a core senior developer and a growing clinic operation. Naturecan Core has two developers supporting ~50 Shopify stores.\nYou will report to the IT Director, work closely with the Engineering Manager, and have direct visibility into every significant technical decision across the group. You won't be operating in isolation - the IT Director works alongside you on the areas that need it, and the wider team is collaborative and high-trust.\nThis role is new. It was created to meet a structural need for a principal-level technical authority that can operate across every part of the group - picking up senior technical workstreams, supporting delivery teams, and building the technical foundation for a business scaling toward £150m in net sales. You will be building the function, not inheriting it.\nWhat We Offer\n\nSalary\nDepending on experience\nLocation\nStockport office every Thursday; remote the rest of the week\nPension\nCompany pension scheme\nHealth\nPrivate health insurance\nStaff discount\nNaturecan group product discount\nAI Tooling\nClaude Enterprise access - AI-assisted development workflows embedded in how we work\nCulture\nSmall team, big ambition - genuine ownership and direct access to decision-makers\nProcess\nTwo-week sprints, retrospectives, pair working practices\nFlexibility\nWe trust you to manage your time - if you’ve been working late on an incident, you are not expected in early the next morning\nEquity\nMeaningful equity conversation for the right candidate\nGrowth\nOpportunity to build a team as the business scales\nInterview Process\n Initial call (30 mins) - role overview and mutual fit\n Technical review (1 hour) - architecture, system design, prior work walkthrough\nTeam meet - working practices, Q&A with the Engineering Manager and IT Director\n Offer","description_format":"text","description_chars":10903,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Dietary Supplements","Health & Wellness Products"],"lifecycle":[{"event":"open","at":"2026-11-09T19:00:09Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:1","win:early"],"computed_at":"2026-11-09T20:51:45Z"},"pay":null,"html_url":"https://alion.io/job/naturecan-uk-principal-developer","json_url":"https://alion.io/job/naturecan-uk-principal-developer.json","meta":{"generated_at":"2026-11-09T20:51:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8513,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":695704},"rest":"https://alion.io/mcp/rest/get_company?id=695704"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnaturecan-uk-principal-developer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnaturecan-uk-principal-developer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnaturecan-uk-principal-developer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/naturecan-uk-principal-developer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnaturecan-uk-principal-developer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3978652}},{"tool":"search_jobs","arguments":{"company":"naturecan.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3978652},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}