Full-Stack Django Developer

Role overview

Greener by Default is hiring a backend-leaning Django/HTMX developer to wrap an existing Python foodservice analysis pipeline with a public-facing web application (V1). The project includes a small server-rendered frontend (upload, status, download) and a secure backend with a Django web service + Python background worker connected to Supabase Postgres and Storage.

Position objective

• Build a Django service and worker that connect to Supabase
• Implement a direct-to-storage signed-URL upload flow
• Add migrations and Row Level Security (RLS) rules to protect real client data
• Audit the existing codebase and add security guardrails

Responsibilities

Database & migrations

• Stand up the local Supabase environment
• Express the agreed schema as Django migrations
• Implement strict RLS policies to isolate client data

Data security

• Treat data security as the highest priority (secrets, environment variables, permissions, private client data)
• Audit and verify existing code; add security guardrails

Web service

• Verify the Django application (base layout, HTMX partials)
• Ensure basic-auth middleware is implemented
• Provide UIs for:
  • Upload
  • Status checking
  • Download

Upload flow

• Implement a two-step direct-to-Supabase upload logic
• Validate uploads and fail fast with human-readable UI errors (no stack traces), including:
  • wrong extension
  • missing columns
  • files > 100MB

Operations & deployment

• Deploy to Render (one web service + one background worker) using a shared Dockerfile
• Configure basic operational alerts (e.g., worker crashes, storage thresholds)
• Document service settings

Handover

• Create documentation so a small data team can run, understand, and maintain the system without you

Requirements

• Security discipline with excellent judgment around secrets, env vars, permissions, and private client data
• Mid-to-senior Django experience (production apps; ORM, migrations, middleware, settings)
• Strong Postgres/SQL comfort (migrations by hand, transaction boundaries, row locking)
• Experience with background jobs and file upload workflows (web request hands work to a worker; cloud object storage; signed URLs; CORS; orphaned uploads)
• Ability to step into and debug existing prototypes/codebases, including AI-generated code

Nice to have

• Experience with Supabase (the posting truncates here, but indicates Supabase familiarity is optional)