Hire Track Supplementary Reference

Hire Track Supplementary Reference

Reference content. This page is supplementary - return when retention from Module 5 is solid AND you have hit the self-serve ceiling. Until then, Module 4: Build It Yourself is the path.

This page is a reference, not a linear read. Jump to your need:

The hire track as a left-to-right strip of four numbered cards: step 1 find your developers - pick a geography and two platforms; step 2 the Fractional CTO bridge - 5 hours a week of senior eyes at $400-600 a week; step 3 the interview screen - 7 questions where Q7 splits the pool; step 4 read the SOW - the milestone clause is the $78K line.

Steps 2 and 4 on the map now live on the companion page: Fractional CTO Bridge & Reading the SOW.


Where to find developers in 2026 #

The developer hiring market reshaped between 2024 and 2026. Algorithm interviews stopped filtering for the skill that ships product - the model passes them. The question now is whether the candidate can own a system, direct AI tools, and put a thoughtful hand on the output before it merges.

Rate-and-platform companion: Where to Hire a Developer in 2026 - the map breaks the same market down by platform and region with rate bands.

The 2026 AI-Augmented Developer profile #

Pre-seed founders still hire on resume signals that stopped predicting outcomes around 2024. Five criteria are the new screen.

5 to 10 years of shipped engineering experience. Not 0-3. The Junior who passes algorithm interviews is the Junior the model now replaces. The 5-10 year engineer knows where the load-bearing decisions live, which is the part the model still cannot do alone.

Daily user of at least one of Cursor, Claude Code, Aider, or Copilot. Ask them to walk you through their .cursorrules file or their CLAUDE.md. If they cannot, they are not directing the tools, they are watching them.

Has shipped AI-generated code to production AND reviewed someone else’s AI-generated code in pull request. Both halves matter. Shipping alone produces the 45% security-flaw rate Veracode flagged in their GenAI Code Security Report 2025. Reviewing alone produces a senior who never tests the model’s claims.

Can articulate where the AI is wrong. A real AI-Augmented Developer will tell you, unprompted, that the model invents npm packages (the slopsquatting attack vector), hallucinates database column names, and confidently rewrites authentication code that ships a CSRF hole. If they tell you the model is “amazing” and stop there, the screen is over.

Salary band: $85K-$120K Junior with Senior productivity, or $100K-$140K for the AI Integration Engineer specialty. The old Senior at $235K is a luxury, not a necessity for pre-seed.

Four geographies #

The 2026 hire decision is not “remote vs in office.” It is which of four regions the role belongs to.

Onshore (US / EU) - $130K to $210K+ per year. 30 to 60 day hire cycle. Pick this when the role demands it: regulated industry (HIPAA, SOC 2 - the security audit big customers require before they buy - with US-data-residency clauses, fintech with state licensing), security clearance, or a board mandate. Otherwise the cost-to-output ratio is the worst on the map.

Nearshore (LATAM) - $45 to $100 per hour. Equivalent to $90K to $200K per year. 2 to 5 day hire cycle. Full timezone overlap with US Pacific through Eastern. English fluency at the level needed for daily standups and Slack. The talent pool is dense in Argentina, Brazil, Mexico, and Colombia. The 2026 default for most US founders who do not have a regulated industry mandate.

Tier-2 offshore India - $15 to $70 per hour. Equivalent to $30K to $140K per year. 1 to 5 day hire cycle. The structural shift is away from overheated Bangalore (rates compressed by global hyperscaler offices) toward Tier-2 cities: Jaipur, Kochi, Indore, Coimbatore. Senior engineers with seven to ten years of production ships in these cities accept rates 20% to 30% below Bangalore because the local cost-of-living is lower. The catch: async-first culture. You will not get standups at 9am Pacific. You will get pull requests merged overnight, code reviewed against your CLAUDE.md by morning, and a Slack thread with answers to your async questions before you finish coffee. Pick this for backend-heavy work where async is acceptable.

Mass-market (Upwork) - $35 to $120 per hour. Self-vetting required: the marketplace does no quality screen, you become the technical interviewer. Acceptable for point tasks only - a single landing page, a logo, a one-off web scraper. Anything load-bearing (payments, auth, multi-tenant data, a third-party integration with retry logic) belongs on one of the three professional platforms above, not Upwork.

Which geography for which build (rate bands and hire cycles are in the four paragraphs above):

If your build is…Route toWhy
In a regulated industry (HIPAA / SOC 2 / fintech), or your budget sits in the onshore band aboveOnshore (US / EU)Compliance, data-residency, or a board mandate justifies the highest cost-to-output ratio on the map
Backend-heavy, async is fine, and you want the lowest rate band aboveTier-2 India - Jaipur, Kochi, Indore, Coimbatore (not Bangalore)Senior engineers accept 20-30% below Bangalore; PRs merge overnight against your CLAUDE.md
Backend-heavy, async is fine, at the mid rate band aboveNearshore (LATAM)Same async workflow, shorter hire cycle, closer timezone overlap
Anything needing live timezone overlap for daily standupsNearshore (LATAM)Full US Pacific-to-Eastern overlap; English fluency for standups and Slack
A single point task - logo, landing page, one-off scraperUpworkSelf-vetting marketplace; non-load-bearing work only

Six platforms ranked #

The hiring market for AI-Augmented Developers in 2026 lives across six platforms. Pick two based on your geography decision above. Post the role on both, and do not waste a Friday on a tour of all six.

  • Toptal Fractional Executives - Senior + screened, 3-5 day hire cycle, $90-$200/hr. Best for Senior fractional roles where the cost of a wrong hire would dwarf the platform markup.
  • Bolster - the largest curated fractional executive marketplace. Strong for fractional CTO and VP Engineering.
  • LatHire - LATAM nearshore developers, full-time and contract. Pre-screens for English fluency and engineering depth.
  • AI People Agency - AI-native engineer screening. Sub-48-hour candidate slates for AI Integration Engineer and AI Quality Engineer roles.
  • Seedium - AI-first software agency. Project work via SOW, not headcount.
  • Upwork - mass-market freelance for point tasks only.

Job description that screens for the right signal: Five lines: (1) 5-10 years engineering, (2) daily Cursor or Claude Code or Aider user, (3) shipped Rails / Django / Laravel apps to production, (4) reviewed AI-generated code in pull request, (5) can articulate where the model is wrong. Skip “5+ years of React and Node.” Skip “Big Tech experience preferred.” Both screens filter against the wrong signal in 2026.


What stack to ask your hired team to use #

You are not picking the stack alone - your Fractional CTO or hired engineer makes the technical call. But you need the vocabulary to (a) have an informed conversation, (b) recognize when a contractor proposes the hipster-of-the-month stack that nobody can hire for in 6 months, and (c) push back without escalating to a holy war. The frame below is what we recommend out of rescue calls going back to 2011.

Default: Rails (Ruby on Rails) #

Rails is the JetThoughts default and the Indie Hackers / DHH / Pieter Levels community standard. The reasoning is empirical, not religious:

  • Rails ships fast, and one engineer can operate the full stack end-to-end.
  • The conventions are tight enough that the next engineer you hire reads the codebase in a day.
  • Deployment (Heroku, Fly.io, Render) costs $7-$50/month at pre-seed scale.

Basecamp (DHH’s One-Person Framework essay) is the case study - two decades of products on a Rails monolith run by a famously small team - and Shopify serves millions of merchants on one Rails monolith. At your scale (47-5,000 paying users) one Rails engineer can ship and operate the whole thing.

Why Rails wins for the non-technical founder’s hired team: the hire pool is deep (15+ years of Rails engineers), the framework opinions are tight (less time arguing about conventions, more time shipping), background jobs / email / file uploads / authentication / payment / admin / search are all batteries-included rather than 12 separate npm packages, and the Rails community produced the rescue patterns we see work in production (Pundit for authorization, Devise for auth, Sidekiq for jobs, ActiveAdmin for staff tools).

Acceptable alternatives, with caveats #

StackWhen it’s rightCaveat
Laravel (PHP)Your hired team is PHP-comfortable; you need WordPress integration; you’re in a market with deeper Laravel hiring than Rails (Europe, Indonesia, Brazil)Same conventional-monolith strengths as Rails. PHP hosting is cheaper. Hiring outside Rails-strong markets is often easier in Laravel.
Django (Python)Your product has serious ML / data / scientific workloads; the team will use Python for the model pipeline anyway and consolidation reduces cognitive loadSlightly less batteries-included than Rails; admin panel + auth + ORM are strong; the migration story is bumpier. Ship Django when ML is the moat, not “we like Python.”
Next.js + Postgres (frontend monolith with API routes)Your product is content-heavy, SEO-critical, and the build is mostly screens with light backendNext.js is excellent for static-heavy products. It becomes a footgun when the backend grows: API-route monoliths trap you in serverless cold starts and React-only data-fetch idioms. Cap Next.js at the marketing site + light dashboard.

Explicit “do NOT accept” patterns #

If your contractor or FCTO proposes any of these in week 1, push back hard. They are real architectural choices, but not for your scale and not for the non-technical founder context:

  • Microservices for 200 users. Microservices solve a coordination problem teams of 50+ have. At 1 contractor + 1 non-technical founder, microservices add 5x the operational complexity for zero scaling benefit. Counter-proposal: one monolith, period.
  • Separate React frontend + separate Node API + separate Python ML service for a single workflow. Three deployments, three CI pipelines, three on-call rotations, three places auth has to be enforced. At pre-seed, this is the rebuild-in-9-months pattern we see most often. Counter-proposal: one Rails or Django app that does everything; add the second service only when a real bottleneck appears.
  • GraphQL because “REST is old.” GraphQL solves a frontend-team coordination problem you don’t have. It also makes caching, monitoring, and rate-limiting harder. REST is fine for 0 to 50K users. Counter-proposal: REST with sensible JSON; add GraphQL the day a frontend team asks for it.
  • Kubernetes / Docker Swarm for an MVP. Container orchestration is correct for 20+ services across 3 environments. It is wrong for “1 web process + 1 database + 1 cron job.” Counter-proposal: Heroku, Fly.io, Render, or a single Hetzner VPS with a deploy script.
  • Hand-rolled auth (“we’ll just build login”). Auth is where rescue calls start. Counter-proposal: Devise (Rails), django-allauth (Django), or Auth.js (Next.js). Buy the proven implementation; never build your own.

The 3-question script for the contractor stack conversation #

When you interview a contractor or FCTO, ask these three questions before signing anything. The right answers map to the recommendations above; the wrong answers are the red flags.

  1. “What stack would you build this in, and why?” Good answer: “Rails (or Laravel/Django depending on team) - I can ship a working signup + paywall + one workflow end-to-end in 4-6 weeks solo, and the hire pool for the next engineer is deep.” Bad answer: a 3-stack architecture diagram, or “whatever you prefer.” The first signals over-engineering; the second signals they have no opinion (which means they’ll default to what’s trendy).
  2. “If we hit 5,000 paying users, what breaks first?” Good answer: a specific component (database read replicas, background job queue, image processing). Bad answer: “we’ll rewrite in [NEW_STACK] then.” Rewrite-driven engineers are expensive.
  3. “How many other engineers can I hire who would be productive in this stack within 30 days?” Good answer: a real number for your market (Rails: thousands worldwide; Laravel: similar; Django: similar; Elixir or Clojure: dozens; Rust web framework: a handful). Bad answer: vagueness, or “we don’t need to think about that yet.”

The Indie Hackers community spent the last decade learning what one-person and two-person engineering teams can sustain. The answer almost always rhymes with Rails / Laravel / Django + Postgres + a single hosted deployment + boring open-source libraries. Trust the empirical evidence; resist the JavaScript fashion cycle.


Interviews that catch AI theater #

Every engineer claims AI fluency on a 2026 resume. Most are typing prompts, accepting suggestions, and pushing the diff to PR. Veracode measured what that produces: 45% of LLM-generated code shipped at least one exploitable security flaw. The market split into two populations behind the same resume language. The 80% run AI theater - they accept the model’s first suggestion, never disagree, and never check the dependency. The 20% direct the model - they read the diff, reject most of it, and catch the hallucinated package before it merges.

For the verbatim 7-question script + per-question Pass/Fail rubric + scoring sheet, see the Hiring Interview Script template. Below is the brief on when and why to use it.

When to run the 7-question screen #

Run it after the resume passes, before any technical take-home. The 30-minute screen sits between phone screen (culture/role context) and the deeper paired-coding session you do with finalists. Three of seven questions are about AI tooling, four about engineering judgment - the split mirrors what an AI-Augmented Developer actually does in a week.

Why these seven questions, not a different seven #

The seven questions are organised around what costs the most when a candidate fakes it.

Question pairCatches the candidate who…What faking it costs you
Workflow + cost (Q1, Q2)Has never set up a .cursorrules file (the repo’s standing instruction file for AI coding tools) or seen a personal Anthropic invoiceSilently runs your monthly AI bill from $200 to $4,800 in their first sprint
Verification + slopsquatting (Q3, Q4)Outsources PR review to the model (slopsquatting = installing a fake package the AI invented)Their name ends up next to the CSRF hole in your incident postmortem
Accountability + refactor (Q5, Q6)Has never owned a system through a production incident or a non-trivial rewriteThe “I refactor as I go” answer is the kind of rewrite that kills startups
Disagreement (Q7)Accepts the model’s first suggestion and cannot show one PR where they disagreed with itThis is the one question that actually splits the population - a candidate who directs the model reads the diff, rejects most of it, and can show you the PR comment where they did it

The scoring discipline #

Score within five minutes of hanging up - not after the next call. Use the three-axis sheet in the script (Specificity, System judgment, Communication). The one rule worth repeating: do not let a strong Communication score override a failed Q7. Q7 is the load-bearing question; if they cannot show one PR where they disagreed with the model, the answer to every other question was a story.

Send the polite-no email the same evening, not Friday: “Thank you for the time. We are pausing the search to refine our requirements. We will keep your details on file.”


Next steps #

If you are reading this because you are ready to hire, the sequence is:

  1. Pick your geography and two platforms from the hire section above. Post the role this week.
  2. If you have budget for it, hire the Fractional CTO before the first developer starts. The $400-$600 per week for architecture review and PR coverage pays back in the first sprint.
  3. Run every candidate through the seven-question interview. Score within five minutes of the call. Do not let good conversation scores override a failed Q7.
  4. Before you sign any SOW, read the milestone-acceptance clause word by word. If it says “upon deployment to staging,” strike it and replace it with the redline paragraph.

The From Idea to First Paying Customer course covers the full sequence from problem validation through your first paying customer.