Technical Product Manager / Lead Architect (SaaS AdTech: Wasm, Stealth, High-Load)

Tech Product Manager / Team Lead (SaaS: Crypto/Forex/Gambling) / Security Auditor (Python/FastAPI) — Control of architecture and Bus-factor / Lead Architect (SaaS AdTech: Wasm, Stealth, High-Load)

About the project

We are developing a complex infrastructure SaaS platform for traffic automation in highly competitive verticals (Crypto / Forex / Gambling). The project is transitioning from the MVP stage to a full-fledged product with strict security, anonymity, and anti-fraud system resilience requirements.

Who I am looking for

I do not need just a developer. I need a "Digital Auditor" and Technical Partner (Right Hand).

We have a Senior developer (Python/FastAPI + JS/AI), but he needs a leader who can decompose large specifications, keep a finger on the pulse, and prevent "childhood mistakes" in complex architecture. You are the last barrier before release and payment.

🚀 Your tasks (The Spec)

1. Management and Audit (Delivery & Zero-Trust Review)

* Decomposition: Transforming business ideas into strict technical tasks in Notion/Jira.

* Zero-Trust Code Review: Checking each iteration for Memory Leaks, Race Conditions, and the security of Pydantic schemas.

* Milestone Gatekeeping: You are the technical judge. Your "Approved" in the written report is the only basis for payment to the developer for the stage.

2. Implementation of "Stealth Core" (Client Side)

You control the implementation of the Phantom-Hybrid architecture:

* Steganography Load: Parsing the Wasm module from PNG/ICO via Canvas API (complete removal of lead processing logic from external JS files).

* Wasm Core Engine: Moving critical fetch inside Wasm. Managing broker responses and sessions using WebAssembly.

* Smart Interaction Hijacking: Implementing redirect logic through global listeners (touchstart, visibilitychange) and a timeout system (Auto-Fallback).

3. Architecture and Integrations (CRM & Tracking)

* Multi-Tenancy: Designing complete data isolation between buyer teams at the DB and Redis level.

* Lead Pipeline: Building API source chains -> Backend -> Broker API -> S2S Postback.

🛡️ Audit object and scope of work

Each stage of the audit concludes with a Technical Audit Report, containing an assessment of architectural risks and a verdict on payment.

* CORE Module (Backend & Logic):

* Multi-tenancy Isolation: Ensuring that no request allows data leakage between buyers (tenant_id check).

* Consistency: Auditing the PENDING -> MIRROR -> DEAD chain. Eliminating the risk of "disappearing" leads.

* Performance: Finding blocking I/O operations in FastAPI and Race Conditions in Redis.

* NETWORK Module (Proxy & Stealth):

* Real IP Leak: Ensuring that the server never "exposes" its IP (only through a chain of residential proxies).

* TLS Fingerprinting: Checking the compliance of the JA3 fingerprint with the declared User-Agent.

* Backdoor Hunting: Searching for hidden logs, tokens, or unauthorized connections.

* INFRA Module (CI/CD & DevOps):

* Disaster Recovery: Validating the deployment of the entire stack from scratch in 5-10 minutes.

* AI-Pipeline Setup: Setting up auto-code review through LLM (Claude/GPT) with reports in Notion.

* Secrets Policy: Zero-hardcoded secrets (GitHub Secrets + .env).

* JS/WASM Module (Stealth Payload):

* Wasm Parsing: Checking the mechanism for extracting code from images (Canvas API).

* Binary Protocol: Analyzing traffic. Instead of JSON — binary ArrayBuffer (OpCodes).

* Haptic UI & Anti-Tampering: Checking the logic of vibrate, Exit-Intent, and protection against debugging (F12).

⚠️ Requirements (Senior / Lead level)

* Tech Background: Deep knowledge of Python (Asyncio) and low-level web (WebAssembly, Canvas API, Binary Types).

* Affiliate Expertise: Understanding the "inner workings" (Cloaking, Fingerprinting, Postbacks). Experience with trackers (Keitaro, Binom).

* Security & Ops: Experience with Docker, residential proxies, and methods for bypassing anti-fraud systems.

* Character: Ability to firmly argue refusals and minimize Bus-factor (creating a technical passport for the project).

🧠 Filter questions (Mandatory for response)

Applications without answers will not be considered.

* Wasm & Stealth: How will you verify that the Wasm module is indeed unpacked from the LSB image, and does this process not "get caught" in the Network tab by standard scanners?

* Asyncio Check: How will you detect blocking I/O operations in asynchronous code that could "crash" the system under load?

* Event Hijacking: How to technically implement a "farewell" redirect through visibilitychange to bypass the protection of modern mobile browsers?

* Docker: What signs in the Dockerfile indicate that the project's architecture is not isolated?

💎 Conditions

* Direct contact with the Owner (minimal bureaucracy).

* Working on a product where "impossible" solutions are the standard.

If you are ready to become the technical judge and system architect — I look forward to your response.