FirstHR

Senior Web Developer Interview Questions and Scorecard

Free senior web developer interview questions for small businesses: 6 sets on architecture, performance, security, and seniority, plus a scorecard.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Hiring
16 min

Senior Web Developer Interview Questions and Scorecard

Six question sets for the owner or lead running the interview: architecture and decisions, performance and accessibility, security and production, a live site audit exercise, seniority and communication, and a scorecard with red flags. Every question comes with why it is worth asking and what a strong answer sounds like. Download as DOCX.

The first senior web developer I ever hired was chosen badly. I asked what frameworks he knew, he answered fluently, and I mistook fluency for judgment. Six months later the site was rebuilt on something nobody else could maintain, the hosting account was registered to his personal email, and I learned what a senior title costs when you interview for vocabulary instead of decisions.

A senior web developer is not a mid-level developer with more years. They are the person who decides what gets built, what gets bought, what gets left alone, and who gets called at midnight when the site is down. At a small business they usually make those calls with nobody above them to catch a bad one, which is why the interview has to test judgment directly.

At FirstHR we build for small businesses that hire without an HR department, where the owner or a single lead runs the whole process. These six question sets are written for that reader. Every question comes with why it is worth asking and what a strong answer sounds like, plus a live site audit exercise that works even if you do not write code, and a scorecard so the decision rests on evidence.

TL;DR
Interview a senior web developer on six things: architecture and technical decisions, performance and accessibility, security and production ownership, a practical exercise, seniority and communication, and documentation. Grade the reasoning rather than the terminology. Replace the whiteboard with a twenty five minute audit of a real site. Score every candidate on the same six-area rubric before anyone discusses the hire.

What a Senior Web Developer Owns

A senior web developer owns outcomes rather than tickets: the architecture of the site or application, its speed and accessibility, its security, its deployment path, and the standard that every other developer who touches it will inherit. The code is the visible part. The decisions are the part you are actually paying for.

At a small business the scope is wider still. The same person often chooses the stack, sets up hosting, handles the deploys, answers the outage, writes whatever documentation exists, and explains a tradeoff to an owner who does not code. If you are hiring your first developer, the sourcing side is covered in our guide to technical recruitment; this page is about the interview itself.

That breadth changes what you should test for. A candidate who is brilliant inside a large team, with code review and a QA function around them, can still be the wrong hire here, because the traits that make the arrangement work at your size are restraint, documentation, and honesty about what they do not know. Those are all interviewable, and the sets below test them on purpose.

Which Question Set to Use

Pick the sets that match what the role actually owns, then use them unchanged for every candidate. Most small businesses use the architecture set plus the audit exercise as the backbone, and add the security set whenever the site handles payments, logins, or customer data.

Architecture and Decisions
What you actually pay for
Stack choice, build versus buy, the rewrite question, data modeling, dependencies, and hosting. The set that separates a senior title from a senior salary.
Performance and Accessibility
Revenue and legal exposure
Page speed method, real targets, images and third-party scripts, accessibility in the markup, and the parts of search performance a developer controls.
Security and Production
Your weekends
How sites get compromised, where secrets live, the first thirty minutes of an outage, backups that have been restored, and who owns the accounts.
Live Site Audit Exercise
Better than a whiteboard
Twenty five minutes auditing a real website out loud. Works over a video call, works if you do not code, and grades the actual job.
Seniority and Communication
Scope, not years
Owned decisions, pushing back, explaining tradeoffs to a non-technical owner, mentoring, documentation, technical debt, and honest estimates.
Scorecard and Red Flags
Rate, then decide
A six-area rubric, a senior versus mid-level comparison, and a twelve-item red-flag list so the decision rests on written evidence.
Weight the Sets to Your Site, Not to the Title
Marketing site that generates leads: architecture, performance and accessibility, plus the audit exercise. Customer-facing application with a login or payments: add the full security and production set and treat it as pass or fail. Your only developer: the seniority and communication set decides whether the arrangement works at all. Broader team already in place: weight mentoring and code review. If you are still deciding what the role covers, the web developer job description templates are a faster place to start than a question list.

6 Question Sets to Download

Download all six as a single Word document, or copy the sets you need. Each one lists how to use it, the questions with why each is worth asking, what a strong answer contains, what to listen for, and space for notes. The final file is the scorecard.

Download All 6 Senior Web Developer Question Sets
Architecture, performance and accessibility, security and production, the live site audit exercise, seniority and communication, and a scorecard with red flags. All in one DOCX.

Set 1: Architecture and Technical Decisions

Stack choice, build versus buy, the rewrite question, data modeling, dependency judgment, and hosting. This is the set that separates a senior title from a senior salary, and the one most interview lists skip entirely.

Architecture and Technical Decision Questions
ARCHITECTURE AND TECHNICAL DECISION QUESTIONS
Candidate: __
Interviewer: __
Date: _

HOW TO USE THIS SET

Ask five or six. A senior web developer is paid for decisions, not for typing
speed, so this is the set that separates the title from the salary. Every
question below can be answered with a preference or with a reason. Grade the
reason. If you do not write code yourself, listen for whether the candidate
names what the choice costs as readily as what it gives, and whether the
answer changes when you change the size of the business.

QUESTIONS

1. Walk me through the last stack you chose from scratch. What did you pick and
what did you reject?
Why ask: it is the fastest way to find out whether the candidate chooses
tools for the business or for their resume.
Strong answer: names the constraints first (team size, budget, who maintains
it after they leave, hosting), then the choice, then an honest rejection with
a reason. A senior answer usually sounds boring on purpose.
2. When would you tell a small business not to build something custom?
Why ask: the most valuable senior habit is talking you out of work.
Strong answer: gives a rule, not a mood. Something like: buy anything that is
not the thing customers pay you for, build only where an off-the-shelf tool
would force an ugly workaround in the core flow. Weak answers want to build
everything.
3. A stakeholder asks for a full rewrite. How do you respond?
Why ask: rewrites are the single most expensive way for a senior hire to
waste a year of your money.
Strong answer: asks what problem the rewrite is supposed to solve, proposes
an incremental path (strangle the old system page by page, replace one
module, ship behind a flag), and reserves the full rewrite for a genuinely
dead platform. A candidate who is excited by rewrites is a warning.
4. How do you decide what goes in the database versus what stays in the
application?
Why ask: data modeling mistakes outlive every other kind, because they are
the hardest to unwind once real customer data is in there.
Strong answer: talks about constraints belonging close to the data,
normalization with a reason to break it, and migration cost. Mentions
indexes without being asked.
5. What third-party dependencies would you refuse to add, and why?
Why ask: dependency judgment is a security and maintenance question wearing
a technical costume.
Strong answer: weighs maintenance status, license, size, and what happens if
the package is abandoned. Distinguishes a well-maintained framework from an
unmaintained package with two contributors.
6. How would you set up hosting and deployment for a business our size?
Why ask: seniors have opinions here and juniors have defaults.
Strong answer: right-sizes it. Managed hosting, a staging environment, one
command or one merge to deploy, automated backups, and a rollback path. If
they design for a scale you do not have, ask why.
7. Tell me about an architecture decision you got wrong. What did it cost?
Why ask: everyone senior has one. Only some will tell you.
Strong answer: a specific decision, a specific cost in time or money, and the
rule they now apply because of it.

WHAT TO LISTEN FOR

Constraints named before the choice is named
Willingness to buy rather than build
Cost stated alongside the benefit
Preference for the boring option that survives their departure
One real story about being wrong

NOTES

__
__

Set 2: Performance, Accessibility, and Search

Page speed method, real performance targets, images and third-party scripts, accessibility built into the markup, and the parts of search performance a developer genuinely controls. Every answer here should end in a number or a test.

Performance, Accessibility, and Search Questions
PERFORMANCE, ACCESSIBILITY, AND SEARCH QUESTIONS
Candidate: __
Interviewer: __
Date: _

HOW TO USE THIS SET

For most small businesses the website is a revenue channel, so slow pages and
inaccessible pages cost money directly. This set is unusually easy to grade
without technical knowledge, because every answer should end in a number or a
test you could run yourself. Ask four or five, and weight this set heavily if
your site sells, books, or captures leads.

QUESTIONS

1. A page takes six seconds to load. Walk me through your first hour.
Why ask: it tests method rather than memory, and method is what you are
buying at the senior level.
Strong answer: measure before touching anything. Open the browser network
panel or a field-data tool, find whether the delay is server response,
images, blocking scripts, or fonts, then fix the largest item first. Weak
answers start listing optimizations before measuring.
2. Which performance numbers do you track, and what target do you set?
Why ask: a senior developer manages to a budget instead of to a feeling.
Strong answer: names the loading, interactivity, and layout-stability metrics
the major browsers report, gives real targets, and mentions that field data
from actual visitors beats a lab score on a fast laptop.
3. How do you keep images and third-party scripts from wrecking a site?
Why ask: on small business sites these two are the usual culprits, and the
marketing team keeps adding more.
Strong answer: modern formats, correct sizing, lazy loading below the fold,
a hard rule about how many tracking scripts get to run, and loading the
survivors without blocking the page.
4. How do you make sure a site is accessible?
Why ask: accessibility is a legal exposure and a customer-reach question, and
many otherwise strong developers have never thought about it.
Strong answer: starts with semantic HTML and keyboard navigation rather than
a plugin or an overlay widget, mentions the recognized web content
accessibility guidelines and a conformance level, contrast, focus states,
labeled form fields, and testing with a screen reader or with real users.
5. What does a developer control that affects search traffic?
Why ask: on a small business site the developer and the marketer are often
arguing about the same page.
Strong answer: page speed, mobile rendering, crawlable markup, clean URLs,
redirects that preserve links, structured data, and not accidentally
blocking the site. A strong candidate also says where the developer stops
and the content work begins.
6. How do you test across browsers and devices without a QA team?
Why ask: at a small company there is no QA team, so this is the real process.
Strong answer: a defined support list based on your actual analytics, real
device testing for the top two or three, and automated checks for the paths
that make money.

WHAT TO LISTEN FOR

Measures first, changes second
Real numbers and real targets, not adjectives
Accessibility handled in the markup rather than bolted on
Knows which parts of search performance are theirs

NOTES

__
__
Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

Set 3: Security, Reliability, and Production Ownership

How small business sites actually get compromised, where secrets live, the first thirty minutes of an outage, backups that have been restored at least once, and who owns the domain and hosting accounts.

Security, Reliability, and Production Ownership Questions
SECURITY, RELIABILITY, AND PRODUCTION OWNERSHIP QUESTIONS
Candidate: __
Interviewer: __
Date: _

HOW TO USE THIS SET

This is the set that protects you on the weekend. A senior web developer at a
small business is usually also the on-call engineer, the security review, and
the backup policy, because there is nobody else. Ask all of these if the role
owns a live site that takes payments, stores customer data, or runs a login.

QUESTIONS

1. What are the most common ways a small business website gets compromised?
Why ask: an honest inventory tells you whether they have ever cleaned up
after an incident.
Strong answer: out-of-date plugins and dependencies, weak or reused
credentials with no second factor, injection through unvalidated input,
exposed admin panels, and secrets committed to the repository. Practical
answers beat encyclopedic ones.
2. Where do API keys and passwords live in your projects?
Why ask: it is a one-sentence question with a disqualifying wrong answer.
Strong answer: environment variables or a managed secrets store, never in
the repository, rotated when someone leaves. If they mention a key they once
found committed and how they rotated it, better still.
3. How do you handle customer data you do not strictly need?
Why ask: data you never collected cannot leak, and seniors know this.
Strong answer: collect the minimum, set a retention rule, encrypt in transit
and at rest, and limit who can query production. Bonus for asking what
regulations apply to your industry before answering.
4. The site is down and you are the only developer. Walk me through the
first thirty minutes.
Why ask: you are hiring the person who will actually be doing this.
Strong answer: confirm the scope, check the recent deploy first, roll back
if that is the fastest fix, communicate to the business before the customers
complain, then find the root cause once service is restored. Communication
should appear in the answer without prompting.
5. What is your backup and restore process, and when did you last test a
restore?
Why ask: everybody has backups. Far fewer have ever restored one.
Strong answer: automated backups, offsite copies, and a restore that has
actually been tested. A candidate who admits they have never tested one is
at least honest, which is worth something.
6. How do you ship a change to a live site without taking it down?
Why ask: deployment discipline is the difference between a calm year and a
nervous one.
Strong answer: staging, version control, a reviewed change, a reversible
deploy, feature flags for anything risky, and error monitoring that tells
them before you do.
7. Who should own the domain, hosting, and repository accounts?
Why ask: this is where small businesses get held hostage, and the answer
reveals professional ethics in one sentence.
Strong answer: the business, always, with the developer invited in. Any
hesitation here is a red flag worth ending the process over.

WHAT TO LISTEN FOR

Secrets never in the repository
Rollback before root cause during an outage
Backups that have been restored at least once
Accounts in the business name without being asked twice

NOTES

__
__

Set 4: Live Site Audit Exercise

A twenty five minute exercise that replaces the whiteboard: send a real URL, ask what they would fix first, and score the order of the findings. It works over a video call and it works if you do not code.

Live Site Audit Exercise (Replaces the Whiteboard)
LIVE SITE AUDIT EXERCISE
Candidate: __
Interviewer: __
Date: _

WHY THIS EXERCISE

A whiteboard algorithm test tells you almost nothing about a senior web
developer, and strong candidates with other offers will decline a four-hour
unpaid take-home. Almost all of them will happily spend twenty five minutes
looking at a real website with you. This exercise grades exactly what the job
involves, works over a video call, and works even if you cannot read code.

HOW TO RUN IT (25 MINUTES)

1. Pick a real site. Yours is best, or a competitor site, or any public site in
your industry. Send the URL at the start of the call, not before.
2. Give one prompt: "Spend twenty minutes looking at this site and tell me what
you would fix first, and why." Then stop talking.
3. Let them drive. They should open the page, open developer tools, resize the
window, try it on a phone, try tabbing through the navigation with the
keyboard, and view the page source.
4. Ask only two follow-ups: "What would that cost to fix?" and "What would you
deliberately leave alone?"
5. Score the order in which they found things, not the length of the list.

WHAT A SENIOR CANDIDATE DOES

Asks what the site is for and who the customer is before critiquing anything
Checks it on a small screen within the first two minutes
Finds a real performance problem and can point at the specific cause
Tries the keyboard and notices missing focus states or unlabeled fields
Separates what is broken from what is merely not to their taste
Ranks the list by business impact, not by personal preference
Names something they would leave alone because the cost outweighs the gain
Phrases criticism the way someone would want to receive it about their own work

WHAT A MID-LEVEL CANDIDATE DOES

Starts with the framework choice or the visual design
Produces a long undifferentiated list with no ranking
Misses the mobile view entirely
Cannot estimate the cost of any fix
Criticizes the previous developer rather than the code

SCORING

Prioritization (business impact first) Score: [ 1 2 3 4 5 ]
Technical depth of the findings Score: [ 1 2 3 4 5 ]
Accessibility and mobile awareness Score: [ 1 2 3 4 5 ]
Cost and effort estimation Score: [ 1 2 3 4 5 ]
How the criticism was phrased Score: [ 1 2 3 4 5 ]
Total: ______ / 25

NOTES

__
__

Set 5: Seniority, Mentoring, and Communication

Owned decisions, pushing back on requirements, explaining a tradeoff to a non-technical owner, mentoring, documentation, technical debt, and estimates. Often the set that matters most when this is your only developer.

Seniority, Mentoring, and Communication Questions
SENIORITY, MENTORING, AND COMMUNICATION QUESTIONS
Candidate: __
Interviewer: __
Date: _

HOW TO USE THIS SET

Seniority is scope, not years. This set tests whether the candidate has owned
outcomes rather than tickets, and whether they can work with a non-technical
owner without either hiding behind jargon or quietly doing whatever they
prefer. For a small business this set often matters more than the technical
depth, because there is nobody above them to catch a bad call.

QUESTIONS

1. Describe a decision you owned end to end, from the problem to the result.
Why ask: it is the cleanest test of scope. Mid-level candidates describe
tasks they completed; senior candidates describe outcomes they owned.
Strong answer: names the problem, the options considered, the call they made,
who they consulted, and what actually happened afterward. Listen for "I
decided" rather than "we were asked to."
2. Tell me about a time you pushed back on a requirement. What happened?
Why ask: a senior hire who never pushes back is an expensive pair of hands.
Strong answer: pushed back with a reason and an alternative, not with a
refusal, and can describe a case where they lost the argument and shipped
the thing anyway without sulking.
3. How do you explain a technical tradeoff to someone who does not code?
Why ask: at a small business, that person is you, and every budget decision
runs through this skill.
Strong answer: uses plain language, frames the choice in time and money, and
offers a recommendation rather than a menu. Ask them to explain one real
tradeoff from their last job on the spot and see whether you understand it.
4. How have you helped a less experienced developer improve?
Why ask: even if you are hiring only one developer now, the senior hire sets
the standard the next hire inherits.
Strong answer: a specific person, a specific gap, and what the mentoring
actually looked like. Code review used as teaching rather than as gatekeeping
is a good sign.
5. What do you document, and who is it for?
Why ask: on a one-developer team, documentation is your insurance policy
against the day they resign.
Strong answer: a readme that lets a new developer run the project, decisions
recorded with their reasons, and runbooks for deploys and restores. Answers
that treat documentation as beneath them are a serious risk at your size.
6. How do you decide when technical debt is worth paying down?
Why ask: this is the judgment call a senior makes weekly, mostly alone.
Strong answer: pays down debt that is actively slowing delivery or creating
risk, tolerates the rest, and folds the work into feature delivery rather
than asking for a quarter of cleanup.
7. How do you estimate, and how often are you right?
Why ask: you will plan your business around these numbers.
Strong answer: breaks work down, gives ranges rather than single dates,
flags the unknowns, and updates you early when an estimate slips. Anyone who
claims their estimates are always accurate is telling you something.

WHAT TO LISTEN FOR

"I decided" and "I was wrong" in the same interview
Explanations you actually understood
Documentation treated as part of the job
Ranges and early warnings rather than confident single dates

NOTES

__
__

Set 6: Scorecard, Seniority Guide, and Red Flags

A six-area rubric with space for evidence, a senior versus mid-level comparison you can hold a candidate against, and a twelve-item red-flag checklist. Use it with any of the sets above and fill it in alone.

Scoring Rubric, Seniority Guide, and Red Flags
SENIOR WEB DEVELOPER SCORECARD
Candidate: __
Interviewer: __
Date: _
Score each area from 1 (poor) to 5 (excellent) with evidence from the
interview, not a general impression. Every interviewer scores alone before the
group talks.

SCORING AREAS

Architecture and technical decisions Score: [ 1 2 3 4 5 ]
Evidence: __
Performance, accessibility, and search Score: [ 1 2 3 4 5 ]
Evidence: __
Security and production ownership Score: [ 1 2 3 4 5 ]
Evidence: __
Live site audit exercise Score: [ 1 2 3 4 5 ]
Evidence: __
Seniority, ownership, and mentoring Score: [ 1 2 3 4 5 ]
Evidence: __
Communication with a non-technical owner Score: [ 1 2 3 4 5 ]
Evidence: __
Total: ______ / 30
Recommendation: [ ] Strong yes [ ] Yes [ ] No [ ] Strong no

SENIOR VERSUS MID-LEVEL

Scope
Mid-level: completes assigned work well
Senior: defines what the work should be
Decisions
Mid-level: follows the existing pattern
Senior: sets the pattern and can defend it
Failure
Mid-level: reports the bug
Senior: restores service, then fixes the cause, then prevents the class
Cost
Mid-level: estimates the task
Senior: estimates the task and questions whether it is worth doing
Other people
Mid-level: asks for review
Senior: raises the standard of everyone who touches the codebase
Communication
Mid-level: explains what they did
Senior: explains what it costs and what you should choose

RED FLAGS

1. Cannot show a single live URL of work they personally built
2. Vague about which parts of a project were theirs
3. Wants to rewrite everything before understanding the business
4. Keeps client domains, hosting, or repositories in their own name
5. Secrets in the repository, described without concern
6. No opinion on accessibility at all
7. Has never tested a restore from backup
8. Blames every former employer and every previous developer
9. Jargon that gets thicker when you ask for a simpler explanation
10. Will not name a decision they got wrong
11. Documentation described as a waste of time
12. Estimates delivered as certainties

DECISION

Two or more red flags, or any score of 1 on security or ownership, is a stop.
Notes: _

How to Judge Answers If You Do Not Write Code

You do not need to grade the implementation. You need to grade the reasoning, and reasoning is gradeable by anyone who listens for the right shape. Senior answers name the constraints before the choice, state the cost alongside the benefit, and survive a follow-up question without changing story.

A stakeholder asks for a full rewrite. How do you respond?
Senior answer: Asks what problem the rewrite is meant to solve before agreeing to anything, then proposes replacing the system piece by piece while it keeps running. Reserves a full rewrite for a platform that is genuinely dead. Names the cost in months, not in adjectives.
Weak answer: Agrees enthusiastically, describes the modern stack they would use, and gives no estimate. A candidate excited by a rewrite is proposing to spend a year of your budget re-creating what you already have.
A page takes six seconds to load. Walk me through your first hour.
Senior answer: Measures before touching anything: opens the network panel, checks whether the delay is server response, images, blocking scripts, or fonts, then fixes the single largest contributor and measures again. Mentions data from real visitors, not just a test on their own machine.
Weak answer: Starts listing optimizations immediately (minify, cache, compress) with no diagnosis. It sounds knowledgeable and it is the exact habit that produces a week of work and no improvement.
Who should own the domain, hosting, and repository accounts?
Senior answer: The business, without hesitation, with the developer invited in as a collaborator. Strong candidates often volunteer the reason: it protects both sides if the relationship ends. Some will offer to help you migrate accounts that are currently in the wrong name.
Weak answer: Any version of it is simpler if I hold them. This is the single answer I would end a process over, because it is how small businesses end up locked out of their own website.

Three habits make this reliable. Ask "what did that cost?" after every success story, because a candidate who has genuinely owned decisions has the number and one who has not will change the subject. Ask them to explain one tradeoff as though you know nothing, and score whether you understood it afterward. And ask for live URLs of work they personally built, then have them walk you through the parts that were theirs while you watch.

If you want technical confirmation, buy it rather than fake it. One paid hour from a developer you trust, spent sitting in on the audit exercise or reviewing a code sample, costs less than a week of a bad hire. Our guide to finding developers for a small company covers how to build that outside opinion into a small process.

What Separates Senior from Mid-Level

Seniority is scope, not years. A mid-level developer completes assigned work well; a senior developer defines what the work should be and can defend the definition. Someone with eight years of ticket work may still be mid-level, and someone with four years of owned outcomes may already be past it.

SignalMid-LevelSenior
Defines what the work should be
Sets the pattern rather than following it
Questions whether a feature is worth building
Restores service first during an outage
Raises the standard of other developers
Completes assigned work reliably

The most reliable single probe is asking for a decision they owned end to end, from the problem through the result. Listen for whether the answer is built around "I decided" or around "we were asked to." Both are honest, but only one of them is the job you are hiring for.

The second probe is a decision they got wrong. Everyone senior has one. Candidates who cannot produce one have either not owned enough to be wrong yet, or are managing the interview rather than answering it, and both are worth knowing before an offer goes out.

The Live Site Audit Exercise

Replace the whiteboard with a real website. Send a live URL at the start of the call, give the candidate twenty minutes, and ask a single question: what would you fix first, and why. It grades exactly what the job involves, it needs no technical knowledge from you, and it takes less of the candidate's time than any take-home project.

Send one real URL
Your own site, a competitor, or any public site in your industry. Send it at the start of the call so nothing is rehearsed.
Give one prompt, then stop talking
Twenty minutes, and one question: what would you fix first, and why. Silence is part of the test. Do not fill it or coach.
Ask only two follow-ups
What would that cost to fix, and what would you deliberately leave alone. Both answers separate seniors from strong mid-level candidates.
Score the order, not the length
A senior finds fewer things and ranks them by business impact. A long unranked list is a weaker signal than three well-chosen items.

What you are watching for is order. A senior candidate asks what the site is for before critiquing it, checks the mobile view within the first two minutes, finds a real performance problem and points at the specific cause, tries tabbing through the navigation with the keyboard, and then ranks the findings by business impact rather than by personal taste.

The two follow-up questions do most of the work. "What would that cost to fix?" separates people who have shipped from people who have opinions. "What would you deliberately leave alone?" is the senior question, because restraint is the trait that is hardest to fake and most valuable when nobody is checking their work. This exercise also respects the candidate, which matters when you are competing with faster employers for the same person.

Red Flags Worth Ending a Process Over

Most red flags are worth a follow-up question rather than a rejection, but a few are not. Holding client domains, hosting, or repositories in a personal account is the one I would stop for immediately, because it is how small businesses end up locked out of the website they paid for.

Evidence of the work
No live URL of anything they personally built
Vague about which parts of a project were theirs
Portfolio credits that references do not confirm
Ownership and ethics
Client domains or repositories held in their name
Reluctant to hand over account access
Secrets in the repository described without concern
Judgment
Wants a rewrite before understanding the business
No opinion on accessibility at all
Has never tested a restore from backup
Working with you
Jargon that thickens when you ask for simpler
Will not name a decision they got wrong
Estimates delivered as certainties

Treat two or more of these as a stop rather than a negotiation. The remaining flags are softer and deserve a probe: a candidate who has never tested a restore is common and can be trained, while a candidate who thinks documentation is beneath them is a genuine risk when they are your only developer and their notice period is two weeks.

Scoring the Interview

Score six areas from 1 to 5 with written evidence, immediately after each interview while the answers are still fresh. The scorecard is not bureaucracy, it is the thing that stops a confident final candidate from erasing your memory of a stronger earlier one.

Scoring areaWhat a 5 looks like
Architecture and decisionsConstraints named first, cost stated, one honest mistake
Performance and accessibilityMeasures before changing, real targets, semantic markup
Security and productionSecrets managed, rollback first, a tested restore
Live site audit exerciseFindings ranked by business impact, one thing left alone
Seniority and ownershipAn owned decision end to end, mentoring with a real example
CommunicationA tradeoff you understood, estimates given as ranges

If two or three people interview, each should score alone before the group talks, or the most technical voice in the room anchors everyone else. Trace every disagreement back to a specific answer during the feedback conversation, and record the outcome on a shared evaluation form so the reasoning survives the week. Applicant tracking is coming soon to FirstHR.

Senior Web Developer Pay and Classification

Benchmark against federal wage data first, then adjust for specialty, market, and remote scope. The band for this occupation is unusually wide, so the title on its own tells you very little about the number you should be offering.

Median $92,650 a Year (BLS OEWS, May 2025)
According to the Bureau of Labor Statistics Occupational Employment and Wage Statistics survey (May 2025), web developers had a median annual wage of $92,650, about $44.54 an hour, with the lowest 10 percent under $48,100 and the highest 10 percent above $162,290 (U.S. Bureau of Labor Statistics). Senior roles sit in the upper half of that band, and the spread between the deciles is more than three to one.

Four things move a senior candidate inside that band: years of shipped production work, specialty, the local market, and whether the role is remote. A remote posting competes against national expectations rather than local ones, which is the biggest surprise for owners in lower-cost markets. Decide the remote question and publish a range before you interview, because both change the pool you get.

Classification matters as much as the number. Under the Fair Labor Standards Act, the computer employee exemption can cover a skilled worker paid on a salary or fee basis of at least $684 per week, or at least $27.63 an hour, whose primary duties involve systems analysis or the design, development, testing, or modification of computer systems and programs. Duties and pay decide it, not the title, and some states apply a stricter test.

Whether this is a hire or a contract engagement follows the shape of the work rather than your preference: project-shaped work suits a contractor, continuous work suits an employee, and the classification test is legal rather than optional. If the role is not written out yet, the senior frontend engineer templates are the closest starting point in our library. This is general information, not legal advice.

Fair, Legal, and Structured Interviewing

A good technical interview is fair, legal, and structured, and the three reinforce each other. Asking every candidate the same job-related core questions keeps you compliant, reduces bias, and produces a better decision, which is the part most engineering question lists leave out entirely.

Ask about the job, not the person
Federal anti-discrimination law, enforced by the EEOC, prohibits basing a hiring decision on protected characteristics, and questions that probe them create exposure even when they are asked as small talk. In a senior developer interview the traps are usually friendly rather than hostile: how long have you been doing this, when did you graduate, do you have kids at home if the role is remote, where are you originally from. Age assumptions are the most common failure on a senior technical hire, because seniority gets read as a proxy for years. Ask about scope, decisions, and evidence instead. This is general information, not legal advice.
Hold the question set steady
Technical interviews drift more than any other kind, because a free conversation drifts toward whatever the candidate is fluent in, and a confident specialist can steer an entire hour onto their strongest topic. The fix is to write the core questions in advance and ask the same ones of every candidate, then let the follow-ups vary. Federal hiring guidance treats the structured interview as one of the most reliable and defensible selection methods available, and the reason is exactly this: it makes candidates comparable. The six sets on this page are built to be used unchanged across a whole candidate pool.
Score alone, then discuss
When more than one person interviews, each should complete the scorecard privately before the group talks. On a technical hire this matters more than usual, because the most technical voice in the room anchors everyone else, and a founder who cannot evaluate the code often defers to a contractor or an advisor who saw only one round. Compare written evidence first and trace every disagreement back to a specific answer. A six-area rubric filled in independently turns a debate about impressions into a decision about evidence.
Weight the sets to your actual site
A senior web developer maintaining a marketing site and one owning a customer-facing application that takes payments are different hires, so weight the question sets to your reality. If the site sells, books, or captures leads, the performance and accessibility set carries revenue and legal weight. If it stores customer data or runs a login, the security and production set is the one that protects you. If this person will be your only developer, the seniority and communication set decides whether the arrangement works at all.
Structure Is the Most Defensible Way to Interview
Federal hiring guidance describes the structured interview, in which every candidate answers the same questions and is rated on the same scale, as one of the most reliable and legally defensible selection methods available (U.S. Office of Personnel Management). Asking the same job-related questions of everyone also keeps you within the EEOC rules against basing decisions on protected characteristics.

On a senior technical hire the most common accidental problem is age, because seniority gets read as a proxy for years and the small talk drifts toward when someone graduated. Keep the questions on scope, decisions, and evidence. For the general version of this discipline, see our guides on running an interview and on questions employers cannot ask. This is general information, not legal advice.

Interviewing Without an HR Department

A large company interviews a senior web developer through an engineering manager, a panel, and a code review round. A small business interviews through the owner, between everything else, usually with no technical backup at all. That gap is where the avoidable mistakes live, and it is worth naming them directly.

You are hiring someone more technical than you are
Most owners making this hire cannot grade the code, and the usual response is to over-index on confidence, which is exactly the wrong signal. You do not need to evaluate the implementation. You need to evaluate the reasoning, and reasoning is gradeable by anyone. Every question in these six sets comes with why it is worth asking and what a strong answer contains, so you can listen for a specific, consistent, cost-aware answer rather than for terminology you cannot check. If you want a technical second opinion, buy one hour from a developer you trust to sit in on the audit exercise. It is the cheapest insurance available on this hire.
This person will probably be your only developer
At a larger company a senior web developer sits inside a team with code review, a QA function, an on-call rotation, and someone above them to catch a bad architectural call. At a small business there is none of that, so the traits that matter shift. Documentation, testing discipline, restrained architecture, and honest communication outrank raw speed, because nothing here gets caught by anybody else. It also changes what a departure costs you: if only one person understands the system and nothing is written down, their notice period is a business risk. Weight the seniority and documentation questions accordingly, and hire the person whose work the next developer could pick up. Applicant tracking is coming soon to FirstHR.
Strong candidates are interviewing you back, and they are quick about it
Senior web developers with real production experience usually hold more than one conversation at a time, so a slow, unstructured process loses them to a faster employer rather than to a better offer. Decide your questions before the first call, run the audit exercise in the same week, and move from decision to written offer in days rather than weeks. Being organized is itself a signal to a senior candidate, because it suggests the job will be run the same way. Then close properly: a clear written offer, the paperwork ready, and access provisioned before day one rather than during it.
Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

Two practical rules follow. Weight documentation, testing, and production discipline above raw delivery speed, because at your size nothing that slips gets caught by anybody else. And move quickly once you decide, since the same candidate is usually talking to two other employers. More question sets for the rest of the team sit in the hiring templates library, including a broader web developer question kit if the role you are filling is not a senior one.

The simplest rule I have found for this hire: choose the candidate who made you understand something, not the one who made you feel behind. Technical depth matters, and an hour of outside review will confirm it. Everything else about whether a senior developer succeeds at a small company comes down to judgment, restraint, and whether they write anything down.

From Interview to Onboarding

The interview is step one, and a strong hire who lands badly still leaves within a year. Move fast from decision to a written offer letter, run a reference check that confirms what the candidate personally built rather than what the team shipped, and have access ready before day one instead of during it.

Offer, IP assignment, and NDA
Put the title, pay, classification, and remote expectations in writing, and have the intellectual property assignment and confidentiality agreement signed before the first commit.
Accounts in the business name
Create the domain, hosting, repository, and analytics accounts under the company, then invite the developer in. Never inherit an account registered to an individual.
Agree the reliability rules on day one
Version control, a staging environment, backups, and who gets called during an outage, settled in the first week rather than during the first incident.
Store the signed records
Keep the offer, IP assignment, NDA, I-9, W-4, and policy acknowledgments organized on the employee profile so they are findable later.

The account ownership step is the one people skip and regret. Create the repository, hosting, domain, and analytics accounts in the business name and invite the developer into them, rather than inheriting accounts registered to an individual. Pair that with a confidentiality agreement and an intellectual property assignment signed before the first commit, alongside the standard new hire paperwork.

Then give the first ninety days a shape: a small shipped change in week one, ownership of one area by month two, and a written check-in at thirty, sixty, and ninety days. Our guide to developer onboarding covers the access and environment side, and an onboarding template keeps the first week from being a laptop and a password.

FirstHR connects the offer, the agreements, e-signature, the paperwork, and the access-and-policy checklist in one place, so a small business can onboard a senior technical hire with everything tracked from a single system. FirstHR is an onboarding and HR platform, not a payroll provider, so connect payroll separately. Applicant tracking is coming soon to FirstHR.

Key Takeaways
Interview a senior web developer on decisions, not definitions: architecture, performance, security, seniority, and communication.
Grade the reasoning rather than the terminology, so a non-technical owner can run the interview credibly.
Replace the whiteboard with a twenty five minute audit of a real website and score the order of the findings.
Seniority is scope, not years: ask for a decision owned end to end and for one the candidate got wrong.
Treat personal ownership of client domains, hosting, or repositories as a reason to stop the process.
Benchmark pay against the federal median of $92,650 a year, then check the overtime exemption duties honestly.

Frequently Asked Questions

What should I ask a senior web developer in an interview?

Ask about decisions rather than definitions. The six areas worth covering are architecture and technical decisions, performance and accessibility, security and production ownership, a practical exercise, seniority and communication, and how they document their work. Strong opening questions include: walk me through the last stack you chose and what you rejected, a page takes six seconds to load so walk me through your first hour, where do API keys live in your projects, describe a decision you owned end to end, and who should own the domain and hosting accounts. Each of these has a clearly better and worse answer that a non-technical interviewer can grade, because the difference shows up in the reasoning rather than in the terminology. Ask the same core set of every candidate so the answers stay comparable.

How do I interview a senior web developer if I am not technical?

You do not need to grade the code, you need to grade the reasoning, and reasoning is gradeable by anyone. Listen for three patterns: the candidate names constraints before naming a choice, states what an option costs as readily as what it gives, and explains a tradeoff in language you actually understood. Use the live site audit exercise on this page, where you send a real URL and ask what they would fix first and why. It works over a video call, needs no code from you, and grades exactly what the job involves. If you want a second opinion, pay a developer you trust for one hour to sit in on that exercise or review a code sample. That single hour is the cheapest insurance available on a senior technical hire.

What is the difference between a senior and a mid-level web developer?

Seniority is scope, not years. A mid-level developer completes assigned work well and follows the existing patterns in the codebase. A senior developer defines what the work should be, sets the patterns and can defend them, and questions whether a requested feature is worth building at all. During an outage a mid-level developer reports the problem while a senior restores service first, then finds the cause, then prevents that whole class of failure. Seniors also raise the standard of everyone around them through code review and documentation, and they explain what a choice costs rather than only what they did. Someone with eight years of ticket work may still be mid-level, and someone with four years of owned outcomes may already be senior, which is why the interview should test scope directly.

Should I give a senior web developer a coding test?

A long unpaid take-home is a poor filter at the senior level, because strong candidates holding several conversations at once will simply decline it, so the test selects for availability rather than skill. Two alternatives work better. The first is a live site audit: send a real URL, give twenty minutes, and ask what they would fix first and why. The second is a small, scoped, paid work sample that resembles the real job, which also shows you how they ask questions and how they communicate about scope. If you do want to see code, ask them to walk you through something they already built and explain the decisions in it. Whichever you choose, keep it under two hours of the candidate’s time and pay for anything longer.

How much does a senior web developer cost?

Pay depends on specialty, local market, and whether the role is remote. According to the Bureau of Labor Statistics Occupational Employment and Wage Statistics survey (May 2025), web developers had a median annual wage of 92,650 dollars, about 44.54 dollars an hour, with the lowest 10 percent under 48,100 dollars and the highest 10 percent above 162,290 dollars. Senior roles sit in the upper half of that band, and a remote posting competes against national pay expectations rather than local ones, which is the most common surprise for owners in lower-cost markets. Decide the remote question and publish a range before you start interviewing, because both change the pool you get. Benchmark to your own market and to the scope you actually need rather than to the title.

Is a senior web developer exempt from overtime?

It depends on duties and pay, not on the title. Under the Fair Labor Standards Act, the computer employee exemption can cover a skilled worker paid on a salary or fee basis of at least 684 dollars per week, or at least 27.63 dollars an hour, whose primary duties involve systems analysis or the design, development, testing, or modification of computer systems and programs. Employees who mainly operate computers, or who make or repair hardware, are generally not covered by that exemption. Some states apply a stricter test or a higher salary threshold, and the state rule wins where it is more protective. Decide the classification before you write the offer, document the duties honestly, and consult a qualified advisor if the role sits close to the line. This is general information, not legal advice.

What are red flags in a senior web developer interview?

The most serious red flag is holding client domains, hosting, or repositories in their own name, because that is how small businesses end up locked out of their own website. Close behind it are secrets committed to a repository described without any concern, and wanting to rewrite everything before understanding the business. Others worth weighing: no live URL of anything they personally built, vagueness about which parts of a project were theirs, no opinion on accessibility at all, never having tested a restore from backup, jargon that gets thicker when you ask for a simpler explanation, refusing to name a decision they got wrong, and estimates delivered as certainties. Two or more of these, or a serious failure on security or ownership, is a reason to stop rather than to negotiate.

How many interview rounds does a senior web developer hire need?

Two or three rounds is usually right, and more than that costs you candidates. A practical sequence is a short screening call covering scope, shipped work, and availability, then a longer conversation combining the architecture and seniority questions with the live site audit exercise, then a final round on security, production ownership, and how you would work together. Run the whole process inside two weeks if you can, since senior candidates with real production experience are usually talking to more than one employer. Score after each round while the answers are fresh, and keep the same core questions across every candidate. If you use a technical advisor for a second opinion, put them in the audit round where their hour is worth the most.

Ready to transform your onboarding?

7-day free trial No credit card required
Start Your Free Trial