A high-performance, full-stack platform built specifically for the Kenyan software engineering community to discover, analyze, and countercheck verified engineering roles across the worldwide work pool and local ecosystem.
- Overview
- Core Platform Capabilities
- 1. 100% Direct Application Rerouting & Official Requisitions
- 2. Autonomous Scam Shield & BRS Credibility Engine
- 3. Autonomous Hourly Role Scanner with 10-Minute Anti-DoS Gate
- 4. Dedicated Decoupled Admin Mission Control
- 5. Seniority Spectrum & Market Salary Intel
- 6. Anonymous Developer Reviews & Workplace Culture Hub
- System Architecture
- Seniority Benchmark Spectrum
- Quick Start Guide
- Configuration & Environment Variables
- REST API Reference
- Security & Privacy Architecture
- Contributing & License
DEV CORE KE is an engineering intelligence and job aggregation platform designed for Kenyan developers navigating the modern technical workforce. It connects software engineers across Kenya (Nairobi Silicon Savannah, Mombasa, Kisumu, Eldoret, and beyond) with verified local tech employers and high-paying worldwide remote roles.
Unlike traditional job boards that aggregate dead links, redirect candidates through invasive marketing intermediaries, or list predatory scams charging M-Pesa interview fees, DEV CORE KE enforces strict algorithmic credibility vetting, sub-millisecond DoS rate-limiting, and 100% direct-to-ATS requisition routing.
- Zero Intermediary Redirects: Every listed position routes candidates directly to the employer's official Applicant Tracking System (ATS) or primary verified listing. Candidates are never bounced to generic homepages, unverified third-party aggregators, or expired URLs.
- Integrated Enterprise ATS Links:
- Oracle Taleo: Direct links to live requisitions for Safaricom (
safaricom.taleo.net), Equity Group (equitybank.taleo.net), Co-operative Bank, Stanbic, and Kenya Airways. - Microsoft Careers Portal: Direct requisitions for Microsoft Africa Development Centre (
jobs.careers.microsoft.com). - Greenhouse & BambooHR: Direct application links for Tala, Twiga Foods, Andela, Flutterwave, Cellulant, Pesapal, and Craft Silicon (Little App).
- Government & Parastatal Portals: Official recruitment links for KRA eTIMS (
erecruitment.kra.go.ke), Central Bank of Kenya (CBK), Presidential Digital Talent Programme (PDTP), and NITA.
- Oracle Taleo: Direct links to live requisitions for Safaricom (
- Official Fingerprint Requisition Badges: Every card and modal showcases the exact employer requisition identifier (e.g.
#SAF-ATT-4091,#MSFT-ADC-17849,#EQB-SEC-7712).
- Business Registration Service (BRS) Verification: Cross-checks company registration details against verified Kenyan commercial registries to flag phantom entities.
- Kenyan Employment Act 2007 Compliance: Automatically identifies and red-flags fraudulent postings demanding upfront fees via M-Pesa for "interview bookings", "security badges", or "courier fees".
- Algorithmic Trust Score (0–100): Calculates a composite confidence metric evaluated on corporate domain verification, official email MX records, salary realism, and historical community reviews.
- Interactive Scam Auditor: Allows engineers to paste suspicious job offers, WhatsApp forwards, or recruiter emails to receive an instant, multi-factor legitimacy diagnosis.
- Continuous Multi-Source Ingestion: Ingests live developer vacancies every 60 minutes across Arbeitnow, RemoteOK, Remotive, Jobicy, curated LinkedIn feeds, and the Kenyan Tech Ecosystem.
- Sub-Millisecond Fast-Exit Gates (
<0.01ms):- In-Memory Mutex Lock: Instantly deflects duplicate scan triggers while an active run is in flight (
status: 'already_running'). - 10-Minute Freshness Shield: Rejects redundant scans if the last completed run was within 10 minutes (
status: 'cached'), protecting upstream API quotas and shielding the server from distributed DoS spikes. - Reboot Resilience: Recovers the timestamp of the last completed run from
scanner_logsacross server restarts to maintain consistent cooldown state.
- In-Memory Mutex Lock: Instantly deflects duplicate scan triggers while an active run is in flight (
- 24/7 Keep-Alive Self-Heartbeat: Built-in 10-minute heartbeat (
/api/ping) that keeps cloud instances (such as Render free-tier containers) active without spin-down.
- Isolated Private Portal: Accessible via a decoupled, private administrative interface.
- SHA-256 PIN Authentication: Timing-safe PIN verification guarding operational telemetry and admin tooling.
- Live Operational Telemetry:
- Real-time counters: Total pageviews, all-time unique visitors, today's pageviews/uniques, and active 30-minute users.
- 7-day daily trend bar chart for audience tracking.
- Top entry routes, referrer domains, and client device breakdowns.
- On-Demand Scanner Trigger: Single-click manual scanner control displaying live cooldown counters and ingestion summaries.
- Complete Professional Spectrum: Comprehensive tracking from 3-month University Attachment up to Chief Technology Officer (CTO).
- Dual Currency Salary Benchmarks (KES & USD): Real-world compensation ranges updated to reflect East African market rates and global contractor earnings (via Deel/Remote.com).
- In-Demand Skills Index: Market demand ratings for high-priority stacks in Kenya (React/Next.js, Go, Python/FastAPI, Flutter, Docker/Kubernetes, and M-Pesa Daraja APIs).
- Authentic Peer Insights: Verified feedback from Kenyan engineers covering technical leadership, engineering practices, overtime expectations, and modern tooling.
- Payment Reliability Metric: Explicit community ratings on on-time salary disbursements via bank transfer or M-Pesa.
┌─────────────────────────────┐
│ Client (Browser) │
└──────────────┬──────────────┘
│
▼
┌──────────────────────────────────────────────────┐
│ Node.js 24 Native HTTP Engine │
│ (Zero External npm Modules) │
└─────────┬──────────────────────────────┬─────────┘
│ │
┌────────────▼───────────┐ ┌────────────▼────────────┐
│ Security & Auth Shield │ │ Telemetry & Auditor │
│ • Anti-DoS Mutex Gate │ │ • Privacy Pageviews │
│ • 10-Min Cooldown Gate │ │ • Scam Pattern Analysis │
│ • SHA-256 PIN Auth │ │ • BRS Company Validator │
└────────────┬───────────┘ └────────────┬────────────┘
│ │
└───────────────┬──────────────┘
│
▼
┌──────────────────────────────────────────────────┐
│ Dual Storage Engine │
│ • Primary: Native SQLite (node:sqlite) │
│ • Resilient Fallback: State JSON Storage │
└─────────────────────────┬────────────────────────┘
│
▼
┌──────────────────────────────────────────────────┐
│ Autonomous Scanner & Daemons │
│ • Ingestion: Arbeitnow, RemoteOK, Remotive, │
│ Jobicy, LinkedIn Feed, Kenyan Tech Ecosystem │
│ • 24/7 Keep-Alive Self-Heartbeat (/api/ping) │
└──────────────────────────────────────────────────┘
| Seniority Level | Target Audience | Primary Focus | Representative Salary Band |
|---|---|---|---|
| Industrial Attachment | 3rd/4th Yr University Students (JKUAT, UoN, Strathmore, KU, Dekut) | M-Pesa APIs, Web UI, NITA Logbook Fulfillment | KES 25,000 – 35,000 / mo |
| Graduate Apprentice / Intern | Fresh CS/IT Graduates (0–12 Mos) | Production bug fixes, CI/CD pipelines, Cloud fabrics | KES 120,000 – 160,000 / mo |
| Junior Developer | Early-Career Engineers (1–2 Yrs) | REST endpoints, frontend components, unit test suites | KES 80,000 – 145,000 / mo |
| Mid-Level Engineer | Autonomous Engineers (2–5 Yrs) | Microservices, database tuning, async queue workers | KES 220,000 – 380,000 / mo |
| Senior Engineer / Architect | Seasoned Specialists (5+ Yrs) | Distributed systems, cloud resilience, security posture | KES 480,000 – 1,100,000 / mo |
| Engineering Manager | Squad Leads & Technical Managers | Team OKRs, developer mentorship, architectural delivery | KES 600,000 – 950,000 / mo |
| Chief Technology Officer | Executive Leadership | Tech strategy, CBK compliance, board governance, equity | KES 900,000 – 1,800,000+ / mo |
- Node.js version
20.0.0or higher (Node.js 24recommended). - Zero npm packages needed — the platform runs entirely on standard library modules.
git clone https://github.com/Hamidooh/dev-core-ke.git
cd dev-core-kenode server.jsNavigate to http://localhost:3000 in your web browser.
The application runs out of the box with safe defaults, but can be customized via environment variables in production:
| Variable | Default Value | Description |
|---|---|---|
PORT |
3000 |
Port for the HTTP server to listen on. |
ADMIN_PIN |
(User Defined) |
Developer secret PIN configured for private console operations. |
RENDER_EXTERNAL_URL |
(None) | Set automatically by Render for the 24/7 keep-alive heartbeat loop. |
NODE_ENV |
development |
Runtime environment mode (production / development). |
| Method | Endpoint | Description |
|---|---|---|
GET |
/api/ping |
Keep-alive heartbeat & uptime diagnostic check. |
GET |
/api/jobs |
Search & filter jobs with keywords, seniority, domain, and credibility score. |
GET |
/api/jobs/:id |
Retrieve full requisition details for a specific position. |
POST |
/api/jobs |
Submit a new opening with automated algorithmic credibility audit. |
POST |
/api/credibility-check |
Execute an on-demand scam and legitimacy audit on any job text. |
GET |
/api/reviews |
Retrieve anonymous developer reviews, filterable by company name. |
POST |
/api/reviews |
Post an anonymous developer review with compensation rating. |
GET |
/api/analytics |
Retrieve market salary benchmarks (KES/USD) and in-demand skills. |
GET |
/api/roles-guide |
Comprehensive breakdown of the 7 seniority spectrums. |
GET |
/api/scanner/status |
Live scanner status, cooldown timers, and execution history. |
POST |
/api/scanner/trigger |
Trigger immediate scan (protected by 10-minute cooldown shield). |
- Zero Tracking Cookies: Visitor analytics are derived strictly from hashed ephemeral IP signatures and daily date stamps. No cookies, fingerprinting trackers, or third-party ad networks are used.
- Strict Anti-DoS Freshness Throttle: The 10-minute scanner lock protects against upstream API abuse, rate-limiting penalties, and distributed denial-of-service attempts.
- Timing-Safe Authentication: Admin access evaluates secrets using fixed-time SHA-256 comparisons to thwart timing analysis attacks.
- Input Sanitization & XSS Mitigation: All submitted reviews, descriptions, and audit payloads are stripped of executable markup and script injections.
Contributions from the developer community are warmly welcomed!
- Fork the Repository: Click the Fork button at the top of this repository.
- Create a Feature Branch:
git checkout -b feature/NewFeature - Commit Your Changes:
git commit -m "Add descriptive feature" - Push to Your Branch:
git push origin feature/NewFeature - Open a Pull Request: Submit a PR with a summary of the improvements made.
This project is licensed under the MIT License — feel free to use, modify, and build upon it.
Built with ❤️ for the Kenyan Software Engineering Ecosystem & the Global Tech Workforce.