Senior PHP Software Engineer

Build the ESG Operating System of the future and own the technology of an ESMA-licensed rating agency. Be part of the Executive team with equity Ecomate is a European ESG rating agency and the first ESG Operating System: a self-service SaaS and PaaS suite that lets any company integrate, manage, and report sustainability — or monitor the ESG performance of the businesses it works with. We are an ESG rating provider under Regulation (EU) 2024⁄3005 , supervised by ESMA, accredited by Accredia under ISO/IEC 17029, and built in Europe for European companies across every EU framework (CSRD, ESRS, Taxonomy, SFDR, CSDDD). Our roadmap spans thirty-plus interconnected products — from a two-hour SME rating to unsolicited ESG risk scores on millions of companies, a white-label platform, an API, and an “open-ESG” scientific committee. Located in Milan or willing to relocate (80% ON SITE, 20% REMOTE) Super fluent in Italian and sufficiently fluent in English Wanting to work for equity as much as in the fixed salary If your instinct is to solve problems by hiring, this isn’t the fit. That makes this an unusual Senior Software Engineer / CTO role. You will hold two disciplines at once that most technology leaders only ever hold one of. On the other, an aggressively AI-native product layer: agents, copilots, and intelligence products that reward speed and breadth. The whole architecture rests on keeping those two planes separate and connecting them through a single, controlled gate. You will be the person who understands why that line exists and never lets it blur. Your job is to design the system in which humans and agents together produce far more than a conventional team, while keeping the quality a regulated codebase demands. And you will lead a team that isn’t only human. You’ll orchestrate people on-site, remote, and contract — alongside AI agents that write code, review it, test it, and operate the platform. Directing that hybrid workforce well is the central skill of this job, not a side feature of it. Great communication skills (must be able to function very well in a team) Open minded with deep interest for technology and its experimentation Great project management skills Previous

experience:
Proven experience of architecting and shipping production platforms — ideally data-intensive, multi-tenant B2B SaaS — and of making them scale. Experience with Agile (Kanban, scrum) youtrack, Jira or other PM tools Real experience in a regulated or high-trust domain (financial services, fintech, insurance, healthtech, or similar), where reproducibility, audit trails, and supervisory scrutiny were part of the job. Deep, current fluency in AI-native engineering: LLM-based products, agent orchestration, RAG, evals and guardrails and daily, personal use of AI coding agents. You’ve built with these tools, not just read about them. Strong data-platform

experience:
pipelines, entity resolution, lakehouse architectures, and provenance and lineage at scale. The ability to lead a small senior team with clarity, to run distributed, hybrid, and contract collaborators well, and the judgment to extend that leadership to AI agents. GDPR, data residency, secure architecture. Product sense: you make technology decisions in service of what the business is trying to become, and you can explain them to a board, a regulator, and an engineer. Deliver methodology-as-code: versioned, immutable, tested rule sets with full lineage from input to score, meeting ESMA’s expectations on methodology versioning, material change, and auditability. Build for reproducibility — event-sourced audit trails, pinned methodology and data versions, human analyst sign-off Run a model-agnostic strategy: routing, tiering, and the ability to swap or self-host models, including European ones, as the landscape shifts. Composable platform of shared rails (identity, entitlements, data, AI gateway, billing, events) on which thirty products run as modules, so interconnection and cross-sell fall out of the design rather than being bolted on. Keep the platform portable and sovereign: open formats, open standards, EU data residency, and no lock-in Own AI governance: risk classification per product, technical documentation, monitoring, and transparency obligations under the EU AI Act. Build the data engine behind with ingestions from external APIs, official EU registries and OSINT sources, entity resolution across countries, a data lakehouse and provenance on every data point. Run security as the public face of a regulated agency demands: server-enforced data gating, edge protection, hardened surfaces, and a path to ISO 27001 and SOC 2 on top of our existing accreditation. Design for GDPR, data residency, and lawful, licensed data sourcing with recorded provenance. Be a real partner to product: translate the ESG OS vision into a phased build, protect the team from building everything at once, and keep the roadmap honest