We are hiring our first engineer to run RoboHost end to end: keep it up, keep its data protected and correct, and ship the changes our hosts ask for every week. You will work directly with the founder and own production from day one.

Role snapshot

Title: Full Stack Engineer (Product, Ops & Security)

Type: Internship (6 months, with a path to full-time) or Full-time

Location: Hybrid, Noida

Reports to: Founder

Team: You are engineer #1 and take over day-to-day ownership of the codebase.

Compensation: Competitive, shared at the first call.

Start: As soon as possible

About RoboHost

RoboHost is an AI co-host for Indian short-stay and rental hosts. One dashboard runs a host's listings across Airbnb, Booking.com, MakeMyTrip, iraava.com (direct bookings) and MagicBricks (long-term rentals), at app.robohost.co.in.

- Nova is the host's co-pilot on WhatsApp: alerts, escalations, approvals and the daily ops queue.
- Jen is the guest concierge: drafts replies to guests, which a host approves or lets Auto-Pilot send.
- Channel sync keeps calendars, rates and bookings in step across platforms (via Channex), so no date is double-booked.
- Operations: cleaning dispatch through Snabbit and Urban Company, work orders and a vendor portal, readiness checks, smart-lock codes and MyGate gate passes.
- Money and compliance: Razorpay billing and payouts, GST invoicing, leave-and-licence e-sign, and DealScope for checking whether a property purchase pays back.

Hosts get a 30-day free trial, then pay per property per month.

What you will own

You own four areas. Interns share them with the founder at first; a full-time hire owns them outright.

1. Operations: keep production running

- Deploy, monitor and roll back the app on AWS Lightsail (Ubuntu, nginx, systemd, Let's Encrypt).
- Run database migrations safely: backup first, stop, migrate, start, verify.
- Watch the background schedulers (channel sync every 15 minutes, scheduled guest messages, cleaning dispatch) and fix them when they stall.
- Keep integrations healthy: Channex, WhatsApp Cloud API, Razorpay webhooks, Telegram alerts, email, and the Playwright bots that work inside platform inboxes.
- Be the first responder when a host reports a bug, and write down what happened and what changed.

2. Data: keep it correct, private and useful

- Own the PostgreSQL schema and its migrations; keep dev and prod in step.
- Run and test backups and restores.
- Make sure no host ever sees another host's properties, guests or money (every query is scoped to its account).
- Build the reports the business runs on: signups, trial-to-paid, active properties, bookings synced, AI drafts approved vs edited.
- Clean up imports from Airbnb history, calendars (iCal)



and booking emails when they arrive messy.

3. Security: protect hosts, guests and payments

- Manage secrets and API keys across environments; rotate them when needed.
- Keep platform credentials and guest data encrypted at rest, and access tokens short-lived.
- Review new endpoints for access-control gaps (IDOR), injection and unsafe file uploads.
- Verify webhook signatures (Razorpay, WhatsApp, Channex) and rate-limit public endpoints.
- Keep dependencies patched, server ports closed and SSH locked down.
- Help us meet India's DPDP Act 2023 and payment-data rules as we grow.

4. Product changes: ship what hosts ask for

- Build features end to end: API route, database change, React screen, tests, deploy.
- Improve Nova's and Jen's prompts, guardrails and fallbacks across LLM providers, and keep AI spend within budget.
- Add or update platform integrations when a channel changes its pages or API.
- Keep the app fast and usable on a host's phone.
- Review your own and AI-generated code before it reaches production.

The stack You don't need to know all of it on day one, but you should be comfortable with most of the first four rows.

- Backend: Python, FastAPI, Uvicorn, Pydantic
- Database: PostgreSQL, SQLAlchemy 2.0 (SQLite for local dev), scripted migrations
- Frontend: React 19, Vite, Tailwind CSS 4, TanStack Query, Framer Motion, Three.js
- Infra: AWS Lightsail (Ubuntu), nginx, systemd, Let's Encrypt, shell deploy scripts, Git and GitHub
- AI: Anthropic Claude and Google Gemini APIs, prompt design, model routing, cost budgets
- Automation: Playwright browser automation for platforms with no public API
- Integrations: Channex (channel manager), Meta WhatsApp Cloud API, Razorpay (subscriptions and payouts), Telegram Bot API, iCal, email parsing
- Documents: ReportLab PDFs (invoices, agreements), Pillow image processing
- Security: Encryption at rest (cryptography), token auth, account-scoped queries, webhook signature checks

Who we are looking for Must-haves (both tracks)

- You have built and shipped a full-stack app that real people used: a Python or Node backend, a SQL database and a React frontend.
- Solid SQL: joins, indexes, migrations, and the habit of backing up before you change anything.
- Comfortable on a Linux server over SSH: logs, services, nginx, disk and memory.
- You understand web security basics: authentication vs authorisation,



OWASP Top 10, how secrets leak.
- You use AI coding tools well, and you read and test what they write before it ships.
- Clear written English. You can explain a bug and its fix to a non-engineer in three sentences.
- You take ownership: when production breaks at 9 pm, you want to be the one who fixes it.

Intern track

- Final-year student or recent graduate (B.Tech/BCA/MCA or self-taught), available full-time for 6 months.
- A GitHub profile or project links that show your work.
- Good projects matter more than years of experience.

Full time track

- 1–4 years building and running production web apps, ideally at a startup.
- You have owned a deploy pipeline, a production database and an on-call incident end to end.
- Experience with payments, webhooks or third-party API integrations.

Nice to have

- FastAPI and SQLAlchemy in production.
- Building with LLM APIs: prompts, evaluation, cost control.
- Playwright or other browser automation.
- Razorpay, WhatsApp Business API or channel managers.
- Knowledge of Airbnb, Booking.com or MakeMyTrip hosting, or of India's GST and DPDP rules.
- Hindi or another Indian language for talking with hosts.

Your first 90 days

- Day 30: Run the full app locally. Shipped your first fixes. Done one supervised production deploy and one backup-and-restore drill. Written the runbook you wish you'd had.
- Day 60: Own deploys and migrations alone. Set up uptime and error alerts. Completed a security review of auth, account scoping and webhooks, and fixed what you found.
- Day 90: Shipped a host-facing feature end to end. Built the weekly metrics dashboard. Own the on-call rota and the integrations health checks.

What we offer

- Real ownership: your work reaches real hosts the same week.
- Direct work with the founder on product, not just tickets.
- Hands-on experience across AI agents, payments, channel integrations and production infra that most roles split across five people.
- Hybrid work, with flexible hours around a few fixed team hours.
- Interns who perform get a full-time offer.

How to apply Send your CV, your GitHub or project links, and three lines on the hardest production bug you've fixed to [email protected].

Hiring process (about 2 weeks)

- 20-minute intro call with the founder.
- Take-home task (paid for full-time candidates): a small FastAPI + React change on a sample repo, with one security issue hidden in it.
- 60-minute review of your task, plus a live debugging session on a Linux box.
- Offer.

Benefits:
- Commuter assistance
- Flexible schedule
- Internet reimbursement
- Leave encashment
- Paid sick time
- Work from home

Work Location: Hybrid remote in Noida, Uttar Pradesh

📌 Full Stack Engineer (Intern / Full-time) - RoboHost (Noida)
🏢 Iraava hospitality private
📍 Noida