REMOTE – USA | Hiring PHP Lead Developer / Architect (LAMP) | PHP, Laravel & AWS

Role: PHP Lead Developer / Architect (LAMP)

Duration: Long Term

Location: USA- Need someone who can work in the UK time zone- Remote

Experience: 10-15 Years

Job Description:

We are hiring a hands-on technical leader to own the architecture, security posture and delivery quality of our business-critical ERP applications. You will write and review production code, set architectural direction. You will also work with infrastructure and security teams to keep our applications scalable, secure and resilient.

Technical Skills

• Core: PHP 5.x–8.x (deep OOP, SOLID, DRY, design patterns), Core PHP, Laravel 10.x–13.x, REST API design
• Data: MySQL (schema design, indexing, query optimization, replication/backup strategies)
• Platform: Linux (Ubuntu), Docker, web server tuning (Nginx/Apache)
• Cloud: AWS EC2, S3, Secrets Manager (plus IAM, VPC, security groups)
• CI/CD: Jenkins, GitHub Actions
• Testing: Phpunit, unit/integration/API testing, debugging and profiling tools
• Template Engines: Working experience with templating engines like Blade, Smarty, Twig
• Frontend: JavaScript (ES6+), HTML5, CSS3

Core Responsibilities/Capabilities:

1. Design, evaluate and recommend technical architectures for ERP modules, integrations and platform evolution.
2. Stay hands-on: develop critical components, debug complex production issues and lead performance profiling and tuning.
3. Own production deployments, environment setup and release readiness across dev, staging and production.
4. Establish engineering standards: SOLID, DRY, design patterns, Phpunit test coverage and code quality gates.
5. An eye for security vulnerabilities, SQL Injection, DDOS, XSS
6. Partner with infrastructure/DevOps on CI/CD (Jenkins, GitHub Actions), containerization and AWS hosting.
7. Implement and operationalize SAST and DAST in CI/CD pipelines, and triage and close findings.
8. Conduct vulnerability assessments and remediate issues in live production systems.
9. Run security-first code reviews and threat modelling for new features and integrations.
10. Compliance exposure to SOC 2 and GDPR
11. Secrets handling, CI/CD design, containerization and deployment safety.