Quick Summary
Tms Llc is seeking a contract PHP Lead Developer / Architect with 10–15 years of experience for a long-term, remote role working in the UK time zone. The position entails hands-on coding, architecture design, and security management for ERP applications using PHP, Laravel, MySQL, Linux, Docker, AWS, and CI/CD pipelines, along with executing SAST/DAST security testing and ensuring SOC 2 and GDPR compliance.
Job Description
Role: PHP Lead Developer / Architect (LAMP)
Duration: Long Term
Location: USA - Remote (UK time zone work required)
Experience: 10-15 Years
We are hiring a hands-on technical leader to own the architecture, security posture, and delivery quality of our business-critical ERP applications. You will write and review production code, setting architectural direction. You will also collaborate with infrastructure and security teams to ensure our applications are scalable, secure, and resilient.
Technical Skills
- Core: PHP 5.x–8.x (deep OOP, SOLID, DRY, design patterns), Core PHP, Laravel 10.x–13.x, REST API design
- Data: MySQL (schema design, indexing, query optimization, replication/backup strategies)
- Platform: Linux (Ubuntu), Docker, web server tuning (Nginx/Apache)
- Cloud: AWS EC2, S3, Secrets Manager (plus IAM, VPC, security groups)
- CI/CD: Jenkins, GitHub Actions
- Testing: Phpunit, unit/integration/API testing, debugging and profiling tools
- Template Engines: Working experience with templating engines like Blade, Smarty, Twig
- Frontend: JavaScript (ES6+), HTML5, CSS3
Core Responsibilities/Capabilities
- Design, evaluate, and recommend technical architectures for ERP modules, integrations, and platform evolution.
- Stay hands-on: develop critical components, debug complex production issues, and lead performance profiling and tuning.
- Own production deployments, environment setup, and release readiness across dev, staging, and production.
- Establish engineering standards: SOLID, DRY, design patterns, Phpunit test coverage, and code quality gates.
- An eye for security vulnerabilities, SQL Injection, DDOS, XSS.
- Partner with infrastructure/DevOps on CI/CD (Jenkins, GitHub Actions), containerization, and AWS hosting.
- Implement and operationalize SAST and DAST in CI/CD pipelines, and triage and close findings.
- Conduct vulnerability assessments and remediate issues in live production systems.
- Run security-first code reviews and threat modeling for new features and integrations.
- Compliance exposure to SOC 2 and GDPR.
- Secrets handling, CI/CD design, containerization, and deployment safety.
Additional Information
All your information will be kept confidential according to EEO guidelines.