Senior Full-Stack Web Developer

Role purpose Own the iinsure web platform end to end—from customer journeys through backend services and integrations. Reporting to the Senior D2C Manager, turn approved commercial requirements into secure, measurable and SEO-friendly releases fast enough for iinsure to operate as a continuously improving sales channel instead of relying on outsourced changes. Core mandate: Build, analyse, test, release and continuously improve the complete digital funnel—visit → quote → plan selection → customer data → payment → policy issuance → servicing and renewal. Key responsibilities 1. End-to-end platform ownership Develop and maintain responsive frontend journeys, backend services, APIs, data flows and third-party integrations supporting iinsure Travel, Motor, Home and future D2C products.Own the codebase, technical documentation, development and staging environments, source control, release process, rollback readiness, monitoring and incident follow-up.Work with IT and system owners on integrations involving quotation, pricing, policy administration, payment, membership, claims and customer-service systems.Reduce reliance on external vendors through structured source-code handover, architecture mapping, dependency review, and knowledge transfer.2. Requirements analysis and solution delivery Work with the Senior D2C Manager and Marketing team to understand the business problem, customer segment, campaign proposition, expected behaviour and success metric before development starts.Ask the right questions, identify missing or conflicting requirements, and understand customer journeys and business rules sufficiently to build the correct solution.Translate approved briefs into technical tasks, acceptance criteria, data requirements, API dependencies, solution designs and test cases; estimate effort and flag delivery risks early.Support UAT with the Senior D2C Manager and relevant business and IT teams; resolve defects through production acceptance.3. Experimentation and conversion optimisation Create A/B/C versions of landing pages, quotation journeys, offers, content, calls to action and checkout elements using clean experiment design, feature flags or controlled routing.Implement experiments without avoidable page flicker, duplicate tracking, SEO conflict or material performance degradation.Partner with Marketing to analyse funnel drop-off, device and traffic-source behaviour, conversion rate, ROAS and experiment results; convert findings into the next release backlog.Maintain reusable page components and campaign templates so approved variants can be launched in days rather than through a new outsourced project.4. Performance, technical SEO and discoverability Continuously improve Core Web Vitals, mobile responsiveness, image and font delivery, JavaScript payload, caching, server response, accessibility and browser compatibility.Build search-friendly architecture using server-side rendering or static generation where appropriate, semantic HTML, crawlable content and clean internal linking.Own technical SEO implementation: page titles and descriptions, canonical URLs, hreflang, redirects, structured data, robots directives, XML sitemaps and indexation controls for Thai and English pages.Monitor Google Search Console and analytics signals, diagnose crawl/indexation issues and support Marketing with scalable SEO landing-page production.5. Analytics, data quality and measurement Implement and quality-assure GA4, Google Tag Manager and agreed advertising/conversion events across the complete funnel.Maintain an event and data-layer specification with consistent naming, attribution parameters, quote/transaction identifiers and partner/campaign identifiers.Connect website and media events to quotations, payments and issued-policy records so channel performance is measured against actual sales, GWP and cost per issued policy—not platform-reported conversions alone.Protect data accuracy through release regression checks, validation dashboards and documented reconciliation with sales or policy records.6. MCP-enabled growth monitoring and agent integration Design, build and maintain secure Model Context Protocol (MCP) servers or equivalent controlled tool interfaces that allow approved AI agents to retrieve trusted iinsure funnel, channel, SEO, website-performance and system-health data.Expose small, well-defined and documented tools—such as funnel health, channel scorecards, SEO audits, API-error summaries and policy reconciliation—rather than giving agents unrestricted access to raw databases or customer records.Build scheduled monitoring services and agent workflows that identify meaningful changes in conversion, traffic quality, quotation success, payment completion, policy issuance, Core Web Vitals, crawlability, indexation and acquisition cost.Keep KPI calculations, baselines, anomaly thresholds and reconciliations deterministic in code; use AI to investigate, explain, prioritise and recommend actions rather than invent or recalculate unvalidated figures.Implement read-only access by default, least-privilege credentials, host and tool allowlists, audit logging, data minimisation and human approval for any write action involving production systems, content or media budgets.Produce actionable outputs such as incident alerts, daily performance briefs and development backlog items, with evidence, estimated business impact, recommended owner and clear separation between confirmed facts and hypotheses.7. AI-assisted rapid delivery Use KPI-approved AI coding tools for first-pass implementation, refactoring, test generation, troubleshooting and documentation when this materially shortens delivery time.Perform a mandatory second-pass manual review of logic, architecture, security, performance, accessibility, code quality and regression risk before peer review, UAT or deployment.Understand and take ownership of every line released. No AI-generated code may move to production without human review, automated testing where appropriate, security checks and compliance with KPI change controls.Create reusable prompts, coding standards and review checklists that make AI-assisted delivery repeatable without weakening engineering discipline.8. Security, compliance and reliability Apply secure coding practices for personal data, authentication, session management, payments, APIs, secrets, logging and access control in line with PDPA, KPI policy and relevant regulatory requirements.Prevent credentials, secrets, internal endpoints, customer data and sensitive configuration from being exposed in public client bundles, repositories, AI prompts or external model/tool calls.Maintain dependency scanning, vulnerability remediation, audit logs, backup/rollback procedures and production monitoring; coordinate incidents with IT and business owners.Core technology and working environment Primary capability: TypeScript/JavaScript full-stack development using Next.js, React and Node.js, with strong API integration, performance engineering, technical SEO and growth-measurement skills. Frontend: Next.js, React, TypeScript/JavaScript, HTML5, CSS, responsive design and modern component/design systems.Backend: Node.js services, REST APIs, authentication, webhooks, validation, error handling and SQL or NoSQL data access.Delivery: Git, code review, automated tests, CI/CD, staging/UAT, feature flags, observability and controlled production releases.Growth stack: GA4, Google Tag Manager, Search Console, advertising-platform APIs, experiment measurement and campaign/attribution tagging.Data and monitoring: PostgreSQL, BigQuery or equivalent analytics stores; scheduled jobs; validated KPI services; anomaly detection; dashboards and reconciliation.Agent integration: Model Context Protocol (MCP), secure tool/API design and an MCP-compatible agent framework such as the OpenAI Agents SDK or an approved enterprise equivalent.Cloud and integration: Google Cloud or equivalent, payment gateways, customer/member platforms and enterprise insurance systems.Qualifications and experience Required Four or more years of professional full-stack web development, including meaningful ownership of a live transactional or e-commerce platform.Strong hands-on experience with Next.js/React and TypeScript/JavaScript, plus backend/API development using Node.js or a comparable modern service framework.Demonstrated ability to clarify business requirements and translate them into technical solutions, acceptance criteria and production software as part of the normal development process.Practical experience with page-speed optimisation, Core Web Vitals, technical SEO, analytics tagging and conversion-funnel troubleshooting.Experience using AI coding assistants responsibly, including manual code review, test generation, security validation and clear ownership of final code.Ability to build secure APIs, internal tools or data services that expose approved operational or analytics capabilities to other applications; direct MCP experience is advantageous but demonstrable agent-tool integration capability is acceptable.Strong problem-solving, documentation and stakeholder communication skills; able to work independently while following enterprise IT governance.Working Thai and sufficient English to read technical documentation, APIs and developer tooling. Preferred Hands-on experience with MCP servers, AI agents, tool calling, workflow orchestration, anomaly detection or automated operational monitoring.Insurance, fintech, e-commerce, online payment or other regulated digital-transaction experience.Experience with experimentation platforms, feature flags, design systems, accessibility and bilingual Thai/English websites.Experience taking an outsourced platform in-house, completing vendor handover and reducing technical debt without interrupting sales.Knowledge of OWASP practices, PDPA controls, cloud security, AI/tool access controls and production incident management.