Find Node.js Projects Faster on Upwork

Quillt (pronounced “quilt”) is a personal journaling platform designed to be a private, secure space for recording thoughts and reflections. Our mission is to empower users to document their personal journeys with complete privacy and control.

Our platform blends thoughtful design with strong technical foundations to ensure that every user’s story is protected and meaningful.

We are seeking an experienced Fullstack Developer for a short-term remote contract to deploy and optimize our application on AWS. The role involves collaborating with our founding team to ensure our Next.js frontend, NestJS backend, and PostgreSQL database are production-ready and fully integrated into a scalable AWS environment.

This is an ideal opportunity for an engineer who is comfortable working across the stack and enjoys taking ownership of deployment, configuration, and performance tuning in a cloud-based setup.

Requirements:
Proven experience with Next.js and NestJS in production environments.
Strong understanding of AWS services (Cognito, S3, ECS/Fargate, RDS).
Hands-on experience deploying Dockerized fullstack applications.
Solid grasp of PostgreSQL database setup and migrations.
Familiarity with CI/CD pipelines (GitHub Actions, AWS CodePipeline, etc.).
Comfortable working independently and communicating remotely.

Tech Stack
Frontend: Next.js (React-based)
Backend: NestJS (Node.js)
Database: PostgreSQL (TypeORM ORM)
Authentication: AWS Cognito
Storage: AWS S3
Containerization: Docker / Docker Compose
Testing: Jest

This opportunity has the potential to turn into a longer term role supporting, designing and implementing new product features.

We’re looking for an experienced Full Stack Developer to join our team on a long-term basis.
You’ll help build and maintain web and mobile applications using modern technologies with a strong focus on TypeScript for both frontend and backend development.

Responsibilities
• Develop and maintain scalable web and mobile applications.
• Build and integrate APIs using Node.js and Laravel.
• Implement clean, responsive frontends using React.js.
• Contribute to mobile projects using React Native, Flutter, or Kotlin.
• Write high-quality, maintainable code in TypeScript.
• Collaborate with the team to deliver features on time and ensure code quality.

Tech Stack
Backend: Node.js (TypeScript), Laravel
Frontend: React.js, Vue.js, Angular.js (TypeScript)
Mobile: React Native, Flutter, Kotlin

Requirements
• 3+ years of full stack development experience.
• Strong proficiency in TypeScript (frontend and backend).
• Solid experience with Node.js and Laravel.
• Experience with modern frontend frameworks — React.js, Vue.js, or Angular.js.
• Experience developing mobile applications using React Native, Flutter, or Kotlin.
• Good understanding of RESTful APIs and modern application architecture.
• Familiarity with version control (Git).
• Excellent communication and time management skills.
• Must have earned at least $10,000 on Upwork with a strong work history and positive feedback.
• Ability to work starting at 9 AM EST (Eastern Standard Time).

Nice to Have
• Experience with AWS, Firebase, or other cloud platforms.
• Knowledge of CI/CD pipelines.
• Strong UI/UX sensibility.

Work Details
• Type: Part-time (long-term collaboration)
• Hours: 10–20 hours per week
• Start Time: Must be available starting at 9 AM EST
• Location: Remote / Flexible
• Compensation: $10–$15 per hour (based on experience)

How to Apply
Please include:
1. Your Upwork profile link showing total earnings ($10k+).
2. Your resume or portfolio (GitHub, LinkedIn, or website).
3. A short note about your relevant experience.

• Can you work in the EST time zone?

We are seeking a skilled full stack developer to join our team and work on a dynamic project involving React, Next, Nest, and Node. The ideal candidate will have a strong understanding of both front-end and back-end technologies and be able to deliver high-quality solutions efficiently.

I’m building a digital learning ecosystem of apps.
I need a skilled full-stack developer to handle the technical setup — installing frameworks like React Native, connecting Firebase, and preparing a clean structure so my future developers can build on it easily.

The goal is to get everything ready for development — frameworks, folder structure, and deployment setup.
I’ll provide all design files from Figma.

I’m looking for someone reliable who can work closely with me and understand the long-term vision of the project.

What we do:
Customizable wedding templates (digital) with an in-browser editor. Exports CMYK-ready PDFs and RGB JPEG/PNG.

Why new partner:
Prior team delivered low quality, slow on small tasks, and had poor communication. Seeking a proactive agency that owns outcomes.

Current stack:
Next.js (React, TypeScript preferred), Node.js (Heroku), custom React/canvas editor, Paddle checkout, GA4/Pinterest pixels, JSON-LD.

60–90-day scope (prioritized):
- Audit & stabilize (bug fixes, CI/CD, Sentry).
- Editor UX: bleed/safe-area, snapping, lock/layer tools, mobile polish, font/color presets, auto-resize to other sizes.
- Exports: PDF/X (CMYK, 300 dpi, bleed/crops, fonts embedded) + RGB JPEG/PNG bundle.
- PDP SEO/perf: unique meta, schema, alt text, fast images/Core Web Vitals.
- Adding some small functions

Success looks like:
- Stable editor, zero print-shop rejections, faster page loads, higher conversion, predictable delivery, clear weekly comms.

What we expect:
- Proven experience with Next.js, canvas editors (Polotno/Fabric/Konva or similar), PDF/CMYK/ICC, and Paddle (or similar).
- Process: PM ownership, weekly standups, Slack/Notion/Jira, PR reviews, QA.
- Quality: TypeScript, tests (unit + Playwright), accessibility (WCAG 2.1 AA).

Your proposal should include:
Team + case studies, 60–90-day plan/timeline, CMYK/PDF/X approach (tools/ICC), comms & QA process, pricing (rates + 90-day ballpark), references, and IP/warranty terms.

I need a developer who can expose my on-premise Microsoft SQL Server to both our office network and the public internet through a hardened API layer.

Scope
• Build or configure an API gateway/proxy that sits in front of the database.
• Internal requests should be allowed automatically once my companion application passes a single “safe word” to the gateway.
• External requests must trigger a time-based one-time-password flow—Google Authenticator (or a comparable authenticator app) is preferred. The system should remember a validated device or browser for 24 hours to avoid re-prompting every call.
• The API must handle both sensitive and general data, so transport encryption, parameterised queries, and input sanitisation are mandatory.

Key goals
• Zero direct SQL exposure to the public internet.
• Clean, documented endpoints (REST or GraphQL—open to your recommendation).
• Role-based access so future services can be whitelisted easily.
• Clear setup scripts and instructions so I can redeploy in staging and production without guesswork.

Please outline the stack or gateway tool you propose (e.g. .NET Core, Node.js with Express, Nginx reverse proxy, Azure API Management, etc.) and any experience you have with MFA integrations.

Skills: Nginx, Node.js, Microsoft SQL Server, RESTful, Documentation, Security, API Development, API Integration

We are seeking an experienced Cybersecurity Auditor or Application Security Consultant to conduct a comprehensive vulnerability assessment and, if needed, a light penetration test for our SaaS platform.

Our system is built using AWS, Node.js, Next.js, MySQL, and Stripe Connect. We recently experienced developer turnover, and we want to confirm that all systems, credentials, and configurations are secure and that no vulnerabilities or unauthorized access remain.

The ideal candidate will have a proven background in cloud-based application security, ethical hacking, and vulnerability remediation for SaaS or marketplace-style platforms.

I'm leading the development of a startup: a cross-platform mobile application (for iOS, Android, Apple Watch, and tablets). The key differentiator of my project is that the entire app flow is driven by advanced, custom-developed AI, built on a microservices architecture and a neural network. I already have an early-stage codebase and am seeking expert technical assistance to take development to the next stage. My native language is Spanish. While my English isn't fluent, I have a moderate understanding and I'm confident it won't hinder effective collaboration. I'd like to talk with you to introduce the project and discuss how we could work together.

My architecture is:

Application Architecture

1. Backend (The "Brain")

* Language: Node.js (using TypeScript and JavaScript).

* Framework: Express.js (to handle API routes, such as /api/services or /api/payments).

* Database (SQL): PostgreSQL (where users, services, etc. are stored).

* ORM (Database Connection): Prisma (the translator between the code and the database).

* Cache: Redis (to store temporary data and make the app faster).

* Real-Time: Socket.IO (for live chat and location updates).

* Testing: Jest and Supertest.

2. Frontend (The Mobile App)

* Framework: React Native (to build the app for iOS and Android).

* Language: TypeScript.

* State Management: Redux Toolkit (to manage global app information, such as the current user).

* Navigation: React Navigation (to move between screens).

* Local Storage: AsyncStorage (to save data on the phone).

3. External Services (Third-Party APIs)

The application relies on several external services to function:
* Payments: Stripe
* Push Notifications: Firebase Cloud Messaging
* Optional Authentication: Firebase Auth
* IoT (Internet of Things): AWS IoT Core
* Error Monitoring: Sentry
* Messaging (SMS/WhatsApp): Twilio

I’m building a modern EdTech platform (LMS) that teaches employees how to use Generative AI tools like ChatGPT and Microsoft Copilot in their daily work.

The platform will feature interactive learning paths, a prompt builder, a prompt library, and role-based AI courses — all inspired by DataCamp’s clean, engaging UX.

I’m looking for an experienced Next.js + Supabase developer (or small team) to build the MVP, focusing on usability, interactivity, and beautiful design.

I will send the brief and images from my prototype and inspiration for the design and layout.

I’d like to hire you again to get the website running smoothly. I’m having issues with WooCommerce/FooEvents not syncing with Authorize.net, the wrong user info showing in the cart, and spam from forms. I also need help verifying my domain (TXT record) and adding a membership plugin to create a paywall for monetized content. Can you assist and share your rate?

Summary
- Location: Remote
- Schedule: Full-time, Monday–Friday, 9 AM – 7 PM Amsterdam time (1-hour break) Experience: 5+ years
- Type: Full-time
- Compensation: $4,000–$6,000/month (based on experience and expertise)
- Note: Full-time only – no freelancers or agencies

Important Notice
- Individual developers only, no agencies or consulting firms. If we discover you are working through an agency, we will report the violation to Upwork and pursue account sanctions.
- This is a full-time position through Upwork requiring exclusive commitment
- No freelancers or part-time arrangements will be considered
- You will be required to sign an NDA and employment contract confirming exclusivity

## About the Company
We are an innovation-driven AI & SEO technology company building next-generation tools that merge Generative AI with Search Optimization. Our mission is to redefine how businesses optimize content performance across both traditional search engines and emerging AI-driven search ecosystems.
As part of our engineering team, you’ll help develop powerful AI-driven SEO tools that enable users to analyze, optimize, and scale their online visibility like never before.

## Position Overview
We’re seeking a Senior MERN Stack Engineer with deep expertise in Generative AI and SEO to join our growing product team. This role involves designing, developing, and deploying advanced AI-powered SEO platforms and web applications. You’ll integrate cutting-edge AI models, develop intelligent SEO automation systems, and build scalable full-stack solutions that push the boundaries of modern web and AI technology.
The ideal candidate combines strong MERN stack engineering expertise with practical knowledge of AI model integration, prompt engineering, and SEO optimization strategies.

## Key Responsibilities

### AI & SEO Product Development

- Design, develop, and scale AI-driven SEO tools using the MERN stack (MongoDB, Express.js, React, Node.js)
- Build systems for AI-powered keyword research, content optimization, and SEO analytics
- Implement AI integrations with APIs from OpenAI, Anthropic, and other providers
- Develop predictive and intelligent algorithms to optimize SEO performance
- Work on AI model fine-tuning for SEO-specific use cases and improve generative model outputs

### Backend Architecture & API Engineering

- Build robust, scalable RESTful APIs and microservices for SEO automation tools
- Integrate AI, analytics, and SEO data pipelines into product backends
- Manage data flow and caching with MongoDB, Firebase, and cloud platforms (GCP/AWS)
- Ensure system reliability, scalability, and security through best DevOps practices

### SEO & AI Innovation
- Apply advanced SEO principles to improve AI-generated outputs and rankings
- Use AI and data-driven insights to enhance technical SEO strategies
- Continuously experiment with AI-enhanced SERP analysis, semantic search, and content scoring
- Collaborate with product and data teams to align AI innovations with SEO goals


## Required Qualifications

### Technical Expertise
- 5+ years of experience in full-stack development using the MERN stack
- Strong proficiency in JavaScript, TypeScript, React, Node.js, Express.js, and MongoDB
- Hands-on experience with Python for AI integration and automation
- Proven track record of building production-grade AI-powered web applications
- Solid understanding of microservices architecture, APIs, and distributed systems
- Proficiency with Git, CI/CD, and cloud platforms (GCP preferred)


### AI & SEO Expertise
- Deep knowledge of SEO fundamentals, ranking algorithms, and optimization techniques
- Experience integrating generative AI models (OpenAI, Anthropic, etc.)
- Strong command of prompt engineering and AI model fine-tuning for content/SEO tasks
- Familiarity with semantic search, knowledge graphs, and content scoring models
- Understanding of how AI impacts modern search optimization (AI Overviews, GEO)

### Preferred Qualifications
- Experience with Next.js or NestJS
- Familiarity with vector databases (Pinecone, Weaviate, Qdrant)
- Knowledge of Google Cloud Functions and Firebase integrations
- Prior work developing AI-driven analytics dashboards or SEO automation tools
- Understanding of Generative Engine Optimization (GEO) principles

### Project Focus Areas
You’ll contribute to innovative AI-driven SEO platforms such as:
- AI-SEO Studio: Intelligent SEO optimization suite leveraging LLMs
- Keyword Intelligence Engine: AI-based semantic keyword clustering & content mapping
- Predictive SEO Analyzer: Machine learning models that forecast search performance
- Content Generation Assistant: Human-like AI content system optimized for SEO metrics

## Employment Requirements
- Must work exclusively for our company during employment
- Must sign NDA and exclusivity agreement done by our lawyer
- Must be available during Amsterdam business hours (9 AM–7 PM)
- Strong written and spoken English skills required

## Why Join Us

- Innovation at Scale: Work on AI-powered SEO solutions used globally by marketers and developers.
- Cutting-Edge Tech: Leverage state-of-the-art AI models, APIs, and generative systems.
- Career Growth: Shape the evolution of AI-driven SEO as part of a visionary engineering team.
- Collaborative Culture: Join a high-performance, innovation-driven environment focused on quality and impact.


How to Apply
Required Application Materials:
1\. Technical Portfolio (Required)
○ GitHub or project links showcasing MERN + AI projects
○ SEO tools or AI-powered web applications you’ve developed
○ AI integrations or fine-tuning examples

2\. Cover Letter (Max 400 words) – Include:
○ Your experience with AI and SEO integration
○ A key technical challenge you’ve solved using AI for SEO
○ Your approach to building scalable AI-based SEO tools

3\. Resume – Highlight:
○ AI-powered web development experience
○ SEO-focused projects and quantifiable impact
○ Relevant full-stack engineering and cloud architecture work

4\. Optional: Certifications, publications, or open-source contributions in AI/SEO

We are seeking an experienced full stack developer with a strong background in the MERN stack, specifically React and Node.js. The ideal candidate will have a proven track record of developing and maintaining complex web applications.

We are seeking an expert mobile application developer with extensive experience in Node JS to lead our development team. The ideal candidate will have a strong background in building scalable and efficient mobile applications and be proficient in using Node JS for backend development.

Develop a comprehensive Care Home Management App for Android, Web, and future iOS compatibility using Flutter. The app will cater to staff and residents, focusing on incident tracking, staff training, maintenance logs, governance planning, invoicing, and asset tracking.

Core Tasks:

- Design, build, and deploy agentic AI systems that autonomously plan, execute, and optimize marketing tasks (e.g., campaign setup, ad testing, creative generation, and reporting)
- Integrate LLMs, APIs, and marketing platforms (Roku ads platform, Meta, TikTok, Google Ads, etc.) into cohesive multi-step agent frameworks
- Develop memory, reasoning, and feedback loops for agents to improve over time
- Implement automation pipelines connecting data sources (e.g., CRM, Sheets, analytics dashboards) to agentic workflows
- Collaborate with marketing and data teams to identify high-ROI use cases for AI agents
- Maintain system performance, logging, and monitoring to ensure safe, efficient operation


Must Haves:

- 5+ years of development experience with Python or Node.js
- Strong understanding of LLMs, vector databases, API orchestration, and agent frameworks (LangChain, CrewAI, AutoGen, etc.)
- Proven experience integrating marketing APIs (Meta, Google, TikTok, etc.)
- Familiarity with prompt engineering, tool calling, and autonomous task planning
- Experience with cloud deployment (AWS, GCP, or Azure)
- Strong communication and documentation skills
- Strong (C-level) written and verbal English communication skills
- Ability to work full-time EST


Nice to Haves:

- Prior experience in marketing automation or ad tech systems
- Exposure to ReAct, RAG, or self-reflective agent architectures
- Experience working in a startup or fast-paced environment

Compensation
$1,000 - $1,500 Monthly

• Create a 60-second video answering these questions: Tell us about yourself. What city are you from? How many years of experience do you have? What made you interested in this role? What do you do for fun?

Project Overview

We have a nearly complete Next.js site (~95%) that needs final polish and deployment to our production domain. Core pages, integrations, and functionality are in place. The remaining work is production configuration, QA, and go-live.
Tech Stack
• Next.js 16 (App Router) + TypeScript
• Tailwind CSS v4 + shadcn/ui
• Supabase (database & auth)
• Stripe (payments)
• Hosting target: Vercel (preferred)
Scope of Work
• Review and test all pages for functionality, responsiveness, and basic accessibility
• Fix minor bugs and styling inconsistencies
• Production hardening: performance & SEO (metadata, OG, sitemap), security, SSL
• Configure and verify integrations (Supabase, Stripe, email service) in production
• Deploy to production domain with DNS + SSL
• Provide brief docs for future updates and environment variable management
Critical Tasks (High Priority)
1. Email Service Integration
o Current routes log to console only
o Files: app/api/send-collectibility-email/route.ts, app/api/send-placement-emails/route.ts
o Integrate Resend (preferred) or SendGrid and verify real sends
2. Stripe Webhook Secret
o File: app/api/stripe-webhook/route.ts
o Configure /api/stripe-webhook in Stripe dashboard and set STRIPE_WEBHOOK_SECRET
o Verify subscription lifecycle events sync to DB


3. Auth Middleware
o Add middleware.ts for Supabase auth token refresh (based on official example)
o Ensure session persistence
4. Postgres Direct Vars (Optional)
o Add POSTGRES_URL etc. if needed (Supabase core vars already working)

• Include a link to your GitHub profile and/or website
• Describe your recent experience with similar projects

For a fintech project focused on high-frequency trading, we are looking for a top-tier specialist focused on high-performance data acquisition.

The Core Challenge:
The role involves creating and maintaining a suite of robust, low-latency parsers. The primary goal is to acquire data from web sources protected by sophisticated bot-mitigation technologies with millisecond-level speed.

This is a role for an expert in protocol-level interaction. We are looking for a specialist in API reverse-engineering, network traffic analysis, and replicating client-server communication.

Stack & Requirements:

The parsers can be developed in any suitable high-performance language (Python, Go, Rust, Node.js, etc.). The choice of technology is secondary to your proven ability to deliver low-latency, reliable results.

You must be able to demonstrate existing work or a Proof-of-Concept of a high-speed parser.

Developers must be fluent in Ukrainian or Russian.

To ensure you have read this description carefully, please start your proposal with the word "millisecond".

This is a long-term opportunity for developers who enjoy solving technical puzzles.

• What is your primary method for parsing data from a site protected by Cloudflare when a public API is unavailable? What technologies do you prioritize for high-speed (millisecond-level) tasks?
• Have you developed parsers for crypto exchange announcements or social networks (e.g., Truth Social, Twitter)?
• Provide a specific example of a high-performance parser you have built. What was the target, and what was the lowest stable latency (in milliseconds) you were able to achieve?
• Do you have an existing parser or a PoC that you can demonstrate (e.g., via a short video or a live demo) that meets the low-latency requirement?
• Include a link to your GitHub profile and/or website

Problem / Business Need

Currently:

Tenant employees cannot clock in/out within the platform.

There is no native scheduling or timekeeping, even though an employee directory exists.

Tenants use external tools or manual processes to build schedules, track time, and match employees to clients.

There is no AI assistance to recommend staff or auto-build schedules.

This causes:

Fragmented workflows between care delivery and scheduling/time tracking.

Higher risk of errors, time fraud, and poor coverage.

Inconsistent continuity of care for clients.

Lost opportunity to sell a Time & Scheduling + AI module.

We need a multi-tenant Time & Scheduling module with AI, where:

A Platform Super Admin can enable/disable features per tenant.

Tenants can configure locations, geofences, rules, employees, and client assignments.

Employees can see shifts and clock in/out with geofencing.

Managers can create, edit, and swap shifts, and approve employee requests.

AI learns from historical usage to recommend staff and auto-create schedules.

AI operates in a HIPAA-aligned, PHI-minimizing way, using only IDs and operational metadata (no PHI).

Note: This feature supports compliance-related workflows; it does not itself guarantee legal or HIPAA compliance.

Goals

Provide a configurable Time & Scheduling module that can be enabled per tenant.

Allow employees to clock in/out with geofencing and rule enforcement.

Use client–employee assignments to support continuity of care.

Use AI to recommend employees and auto-generate schedules within defined constraints.

Support manager edits/swaps and employee requests (swap, time off, early leave).

Ensure AI uses only non-PHI operational data.

User Roles

Platform Super Admin

Tenant Admin

Scheduler / Manager

Employee (time-eligible)

User Stories

Platform / Super Admin

As a Platform Super Admin, I want to enable/disable Time & Scheduling and AI Scheduling per tenant and configure global defaults.

Tenant Admin / Scheduler / Manager

As a Tenant Admin, I want to configure locations, geofences, and time rules for my organization.

As a Tenant Admin, I want to mark employees as time-eligible, define where they can work, and assign them to clients.

As a Scheduler/Manager, I want to create, edit, and manage shifts and schedules.

As a Scheduler/Manager, I want AI to recommend the best employees for a shift, considering availability, rules, geofence, and client assignments.

As a Scheduler/Manager, I want AI to auto-generate a draft schedule for a date range.

As a Manager, I want to edit shifts and swap employees with rule validation.

As a Manager, I want a central place to review and approve or reject employee requests (swaps, time off, early leave).

Employee

As an Employee, I want to see my shifts and clock in/out (with geofencing) from web or mobile.

As an Employee, I want to request swaps, time off, and early leave from within the app.

Acceptance Criteria

AC1 – Time & Scheduling Feature Access (Platform Super Admin)

Super Admin can view all tenants with Time & Scheduling status (Enabled/Disabled).

Super Admin can toggle Time & Scheduling per tenant.

Global defaults configurable (overridable per tenant where allowed):

Max shift duration.

Whether geofencing is required.

(Optionally) basic rounding rules.

When disabled for a tenant, all Time & Scheduling UI and APIs are unavailable to that tenant.

AC2 – AI Scheduling Feature Access

Super Admin can toggle AI Scheduling per tenant, separate from base Time & Scheduling.

AI modes at tenant level (if allowed by platform):

Recommend-only (AI suggests; no auto-generation).

Auto-schedule + review (AI drafts schedule; human approves).

When AI Scheduling is disabled, AI options (suggestions, auto-schedule) do not appear.

AC3 – Tenant Setup: Locations, Geofences, Rules

For Time & Scheduling–enabled tenants:

Tenant Admin can:

Create/manage Work Locations: name, address, time zone, coordinates.

Configure Geofences per location: radius; whether required for clock-in and/or clock-out.

Set Time Rules:

Allow/disallow unscheduled punches.

Require reason for off-geofence punches (if allowed).

Max shift hours.

System must:

Enforce geofence rules for clock-in/out.

Block actions violating hard rules; flag soft rule violations for review.

AC4 – Employee Directory Integration & Client Assignments

Tenant Admin can:

Mark employees as time-eligible.

For each time-eligible employee, configure:

Default location.

Allowed locations.

Scheduling role (e.g., Caregiver, RN, Scheduler).

Manage Client–Employee Assignments:

Primary caregiver/owner.

Secondary / backup caregivers.

Time & Scheduling applies only to time-eligible employees.

Client-facing shifts can be linked to Client IDs, so AI can support continuity of care.

AC5 – Employee Clock In/Out

Employees (time-eligible, tenant enabled):

Can see upcoming and active shifts.

Can clock in/out via web or mobile.

System:

Validates:

Tenant feature enabled, employee time-eligible.

Geofence requirement (must be within radius if required; capture reason if outside and allowed).

Time Rules (max hours, unscheduled punches, etc.).

On clock-in: creates Time Entry with start timestamp, location (lat/lng), device/source.

On clock-out: updates Time Entry with end timestamp, duration, end location.

Flags entries exceeding max shift duration and other defined conditions.

AC6 – Scheduling & Shifts (Baseline)

Scheduler/Manager can:

Create, edit, cancel Shifts with:

Employee (optional for unassigned shifts).

Location.

Start time, end time.

Optional: client ID, notes.

View schedules by day/week, location, and employee.

See coverage vs. unfilled blocks.

System validates:

No overlapping shifts that break defined rules.

Employee is allowed at that location and in that role.

AC7 – Review, Reporting & Export

Tenant Admin / Manager can:

View Time Entries filtered by date, employee, location, and status (Normal, Needs Review, Off Geofence, Over Max Duration, etc.).

Edit and approve flagged entries; all changes are audit logged.

Export time data (CSV) including employee ID, date, start/end time, duration, location, flags, and (if applicable) request IDs.

AC8 – AI Recommendations for Individual Shifts (with Client Context)

For AI-enabled tenants:

From a shift screen, Scheduler clicks “Suggest employees” and receives:

A ranked list of suggested employees with:

Availability/conflicts.

Role and location fit.

Client relationship indicator (primary/secondary caregiver, previous visits with that client ID).

Flags: potential overtime, rest-period issues, etc.

AI must:

Honor hard constraints (hours, rest rules, allowed locations/roles, tenant rules).

Prefer employees who:

Are primary caregiver for that client ID.

Then secondary/backup caregivers.

Then those with previous shifts for that client ID.

Only use client IDs and operational metadata (no PHI).

Scheduler can accept or ignore suggestions.

AC9 – AI Auto-Scheduling for a Date Range

For AI-enabled tenants:

From schedule view, Scheduler can:

Define auto-schedule parameters: date range, locations, coverage template (roles/headcount per block).

Click “Auto-generate schedule”.

AI produces a Draft schedule that:

Covers required roles/time blocks per location.

Respects availability, employee rules, and location permissions.

Minimizes overtime and balances fairness.

For client-facing blocks, prefers primary/secondary caregivers and those with prior client contact (by client ID).

Draft schedule:

Marks AI-assigned shifts as AI Suggested and optionally shows reasoning.

Is not visible to employees until Scheduler clicks Publish.

AC10 – AI Learning & Feedback Loop (Non-PHI)

AI learns per tenant from:

Historical shifts and time entries (IDs, times, locations, flags).

Which AI suggestions are accepted/overridden.

Repeated patterns where certain employees are chosen for specific client IDs.

All learning signals:

Use non-PHI operational data only (IDs, times, locations, roles, flags).

Never use client names, diagnoses, notes, addresses, or free-text PHI.

Tenant Admin can optionally give feedback (e.g., “Good schedule” / “Needs improvement”) to influence future behavior.

AI remains advisory; humans always have final control.

AC11 – Manager Shift Edits & Swaps

Manager/Scheduler can:

Edit shifts (employee, time, location, notes).

Swap shifts:

Direct two-shift swap between employees.

Reassign a shift from Employee A to Employee B.

System:

Re-validates all rules/constraints after changes.

Blocks edits/swaps that cause violations (hard rules).

Logs all changes in an audit trail with before/after values.

When reassigning, system can optionally show AI suggestions for suitable replacements.

AC12 – Employee Requests: Swap, Time Off, Leave Early

Employees can:

Request Shift Swap

Select an upcoming shift.

Request a swap with a specific coworker or open swap to eligible peers.

Provide a reason.
System:

Notifies coworker and Manager.

Coworker accepts/declines; Manager approves/rejects (configurable).

Only after approval is the shift reassigned and schedule updated.

All steps logged.

Request Time Off

Select date/time range and reason/type (PTO, sick, unpaid, etc.).
System:

Creates a Time Off Request (Pending → Approved/Rejected).

Approved time off flags conflicting shifts for reassignment.

AI can suggest replacements for affected shifts.

Request to Leave Early

On an upcoming/active shift, propose earlier end time and reason.
System:

Sends to Manager for decision.

If approved, shift and Time Entry are shortened; coverage gap is flagged (AI can suggest fill-in).

AC13 – Manager Review & Approvals

Manager/Scheduler has a Requests dashboard to:

View all Swap, Time Off, and Early Leave requests.

Filter by type, employee, status (Pending, Approved, Rejected, Completed).

Approve/reject with optional comment.

System updates shifts, Time Off, and Time Entries accordingly and logs all decisions.

AC14 – Security, Privacy & Auditability (incl. PHI Boundaries)

Strict tenant isolation for all scheduling/time/location data.

Location data treated as sensitive; stored and accessed securely.

Clear employee messaging about use of location for geofencing.

Comprehensive audit trails for:

Feature toggles.

Shift/Time Entry changes.

AI scheduling runs.

Requests and approvals.

AI / PHI Boundaries:

AI Scheduling service only sees:

tenant_id, employee_id, client_id (opaque IDs).

Shift/timeslot info (start/end, location ID, role).

Time entries (timestamps, durations, flags).

Client–employee assignments (client_id ↔ employee_id, assignment type).

Coverage templates and operational rules.

AI Scheduling service must not see or rely on:

Client names, addresses, phone, email.

Clinical notes, diagnoses, conditions, assessments.

Any free-text fields that may contain PHI.

Enforced via:

Dedicated, PHI-free database views or APIs.

Schema review by compliance/security to ensure no PHI columns are exposed.

Logs that only contain IDs and technical metadata (no PHI).

Business Impact

Revenue / Packaging

New Time & Scheduling module.

Premium Time & Scheduling + AI tier/add-on.

Customer Value & Retention

Integrated schedules, time tracking, and continuity of care by client.

Reduced manual scheduling effort via AI.

Better control over fraud and compliance via geofencing and rules.

Internal & Strategic

Fewer support issues around time tracking and imports.

Differentiation vs. generic timekeeping tools with AI + client-aware scheduling.

Technical Notes (Dev / Tech Lead)

Core Entities

TimeTrackingFeatureToggle (tenant_id, is_enabled, timestamps)

AISchedulingFeatureToggle (tenant_id, mode, is_enabled, timestamps)

WorkLocation (tenant_id, name, address, timezone, geo_lat, geo_lng)

Geofence (location_id, radius_meters, require_for_clock_in, require_for_clock_out)

Employee (extended: is_time_eligible, default_location_id, allowed_location_ids, scheduling_role)

ClientEmployeeAssignment (client_id, employee_id, assignment_role: PRIMARY/SECONDARY, etc.)

Shift (tenant_id, employee_id, location_id, client_id, start_time, end_time, notes)

TimeEntry (tenant_id, employee_id, shift_id, clock_in_time, clock_in_location, clock_out_time, clock_out_location, duration, status, source)

TimeRule (tenant_id, allow_unscheduled_punches, require_reason_for_off_geo, max_shift_hours, rounding_policy, etc.)

ShiftChangeRequest (tenant_id, type SWAP/LEAVE_EARLY, from_employee_id, to_employee_id, shift_id, proposed_end_time, status, reason, manager_comment)

TimeOffRequest (tenant_id, employee_id, start_datetime, end_datetime, type, status, reason, manager_comment)

AISchedulingRun (tenant_id, type: SUGGEST or AUTO_GENERATE, parameters, result summary, timestamps)

Services & APIs

Platform Admin APIs:

Get/set Time & Scheduling and AI Scheduling toggles.

Configure global defaults.

Tenant Admin APIs:

Manage locations, geofences, time rules.

Manage employee time eligibility and client assignments.

Scheduling & Time APIs:

CRUD for shifts.

Clock-in/clock-out.

List/edit TimeEntries.

Export endpoints.

Requests APIs:

Create/cancel ShiftChangeRequest and TimeOffRequest (employee).

List/approve/reject requests (manager).

AI Scheduling APIs (PHI-safe):

POST /ai/scheduling/suggest-employees (input: tenant_id, shift_id/params; no PHI).

POST /ai/scheduling/auto-generate (input: tenant_id, date range, coverage template; no PHI).

AI Architecture & Privacy

Separate AI Scheduling service using PHI-free views/APIs.

Rule engine enforces hard constraints; AI scores candidates and generates schedules.

Any cross-tenant learning uses anonymized/aggregated aggregates (no raw IDs).

Logs are free of PHI (IDs and metadata only).

Feature Flags & Rollout

Flags per tenant:

time_scheduling_enabled

ai_scheduling_enabled

We are seeking a skilled developer with expertise in Golang, Node.js, TypeScript, MongoDB, and microservices to work on a complex project involving API development and Kubernetes deployment. The ideal candidate will have experience in building scalable applications and integrating various technologies to create efficient solutions.