Senior Full-Stack Developer to Build Secure Tokenized Incentive Dashboard (Next.js/NestJS)

We are seeking an experienced Full-Stack Engineer to develop a secure, headless digital application that will manage a proprietary incentive model. The platform will allow independent agents to be rewarded with tokenized securities based on specific KPIs and milestones related to commodity movements. The application must remain completely separate from our existing WordPress frontend to maximize security for sensitive financial and equity data. As part of the project, you will build a robust NestJS backend with Role-Based Access Control, a Next.js frontend dashboard for authenticated agent access, implement OIDC/OAuth 2.0 authentication with MFA, and handle secure encrypted file storage on AWS S3. Integration of a secure handshake between the WordPress site and the headless application is required. Experience building financial or high-security applications is important, and familiarity with smart contracts or tokenized securities is a plus, but strong fintech experience is also acceptable. You will collaborate remotely using Slack and weekly Zoom meetings, and we provide Figma prototypes for the design.

Budget range:
$5,000 – 10,000 USD

Examples:

About the client
The Invest Offshore Secure App is a private, compliance-first deal room platform that extends Invest Offshore from publisher and introducer into platform operator. It provides a controlled environment where qualified counterparties can move from introduction to diligence, negotiation, and closing support without exposing sensitive data to the public website. The architecture must remain headless. WordPress continues to serve as the public-facing brand, editorial, and lead-generation layer, while the secure application operates on separate authentication, APIs, databases, and encrypted file storage. This separation reduces exposure if the public site is compromised and strengthens the long-term enterprise value of the platform.
• Invitation-only access with approval workflow
• Multi-factor authenticated login for all private users
• Role-based and object-level authorization
• Private deal rooms for document exchange and milestone tracking
• Immutable audit logging for sensitive actions
• Signed, server-to-server lead handoff from WordPress into the protected application