Skip to content
Ordermatic Docs

Job Descriptions
Owner [Security Owner / hiring manager]
Effective date [set on approval]
Review cadence Annual, and when a role materially changes
Version 0.1 — DRAFT
TSC mapping CC1.4 (Job Descriptions, Engineering Job Description)

Every role at Ordermatic has a written job description that includes security responsibilities. The Engineering JD below is concrete; the template after it is reused for other roles. Each JD is referenced at hiring and at performance review.

Software Engineer (Engineering)

Section titled “Software Engineer (Engineering)”

Reports to: Engineering Lead / CTO Purpose: Build and operate the Ordermatic order-processing platform.

Responsibilities

  • Design, build, and maintain platform features across the monorepo (webapp, Dagster pipelines, packages).
  • Ship changes through the reviewed feature → staging → main flow; write tests; keep CI green.
  • Operate infrastructure (Google Cloud Run, Neon, Cloudflare) and respond to incidents.
  • Generate database migrations with Drizzle; gate ERP writes behind feature flags; keep bronze writes append/merge-only.

Security responsibilities (apply to every engineer)

  • Follow the Acceptable Use, Access Control, and Change Management policies.
  • Never commit or log secrets; read credentials from Infisical / 1Password.
  • Enforce least-privilege and tenant isolation (clerkOrganizationId) in every data path.
  • Participate in code review and the incident-response process.

Qualifications: [fill — e.g. proficiency in TypeScript/Python, cloud infra, secure-coding awareness].

JD template (other roles)

Section titled “JD template (other roles)”
# [Role Title] ([Function])


Reports to: [manager]
Purpose: [one sentence]


Responsibilities
- [core duties]


Security responsibilities
- Follow the Acceptable Use Policy and complete annual security-awareness training.
- Use MFA and individual accounts; handle customer data per the Data
  Classification & Retention Policy.
- Report suspected security issues per the Incident Response Policy.
- [role-specific data-handling duties]


Qualifications
- [skills / experience]

Roles to fill from the org chart: Operations/CSR, Go-to-market / Customer Success, and any leadership roles.