The Role
Build and maintain TypeScript/Node.js backend-for-frontend services and microservices for an MSP partner portal. Design REST APIs using OpenAPI, implement secure authentication with JWT, Keycloak, OAuth2/OIDC, and Redis sessions, and support integrations for quoting, contracts, billing, and provisioning. Write tested and observable code, participate in reviews, provide production support and on-call coverage, and help stabilize and assume ownership of an inherited platform.
Summary Generated by Built In
Backend Engineer, MSP Partner Portal
About the client
Our client is a leading global email and collaboration security company. It is building a new engineering team in Medellín to own its partner portal for Managed Service Providers (MSPs): the platform partners use for quoting, contracts, billing and provisioning.
About the role
We are hiring Backend Engineers at Senior and Mid level for this new team, which will take over the MSP partner portal from the systems integrator that runs it today, operate it in production and shape its roadmap. You will report to the Engineering Manager and work daily with colleagues in the United States and Europe.
The stack is a React microfrontend shell in an NX monorepo and a TypeScript/Node backend-for-frontend (BFF) over microservices, hosted on AWS EKS, with Keycloak for identity and integrations with Salesforce Revenue Cloud, Boomi, NetSuite, ZoneBilling, Snowflake and Avalara.
What you'll do
• Build and maintain the TypeScript/Node BFF layer and the microservices behind the portal.
• Design and implement REST APIs with OpenAPI specifications, including new partner API families and MSP billing APIs.
• Implement secure authentication and authorization: JWT validation, Keycloak OIDC tokens and Redis-backed sessions.
• Work with Integration Engineers on the data flows behind quoting, contracts, usage-based billing and provisioning.
• Write well-tested, observable code (unit and contract tests, logging and metrics) and take part in code review.
• Share production support and on-call for backend services once the team takes over the platform.
Level expectations
• Senior (typically 5+ years): leads the design of services and APIs, owns cross-team technical work, mentors others and is a primary on-call owner during the handover.
• Mid (typically 2–5 years): delivers well-scoped features and APIs with guidance, joins after go-live and grows into shared ownership of services and on-call.
What success looks like in your first 6 months
• Knowledge transfer complete for the BFF and your assigned services, and you can ship changes to them independently.
• Owning production for those services, including on-call, with runbooks you have written or updated.
• Every backend service has at least two engineers who can change and support it.
• A contribution to the first partner billing API, delivered against an agreed OpenAPI contract.
Tech environment
TypeScript • Node.js • BFF • Microservices • REST / OpenAPI • JWT • OAuth2 / OIDC • Keycloak • Redis • Docker • Kubernetes • AWS EKS • CI/CD
Requirements
Required
• Professional experience building backend services with Node.js and TypeScript.
• Strong REST API design and documentation skills using OpenAPI.
• Working knowledge of JWT-based authentication and OAuth2 / OIDC concepts.
• Experience with Redis (sessions or caching) and microservice patterns.
• Good testing habits and experience with CI pipelines and containerized services (Docker, Kubernetes).
• Professional English for daily work with US and European colleagues.
Nice to have
• Experience building billing, usage-metering or partner-facing APIs.
• Familiarity with AWS EKS, Helm or Keycloak.
• Exposure to Salesforce, NetSuite or Snowflake data.
• Experience taking over and stabilizing an inherited codebase.
Benefits
• Permanent contract (contrato a término indefinido) with all legal benefits
• Competitive salary
• Private health insurance (medicina prepagada)
• Be part of a new engineering team in Medellín from the start
• On-site role in Medellín with parking
Skills Required
- Professional experience building backend services with Node.js and TypeScript
- Strong REST API design and documentation skills using OpenAPI
- Working knowledge of JWT-based authentication and OAuth2/OIDC concepts
- Experience with Redis for sessions or caching and microservice patterns
- Good testing practices and experience with CI pipelines and containerized services using Docker and Kubernetes
- Professional English for daily collaboration with US and European colleagues
- Experience building billing, usage-metering, or partner-facing APIs
- Familiarity with AWS EKS, Helm, or Keycloak
- Exposure to Salesforce, NetSuite, or Snowflake data
- Experience taking over and stabilizing an inherited codebase
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Roca Alliances is a consulting agency dedicated to helping global companies build geographically diverse teams and scale their operations by outsourcing or nearshoring to Latin America. With over 15 years of expertise, the company utilizes a proprietary approach to analyze, assess, and identify ideal locations across the Americas, fostering growth and scalability for clients in various industries including technology, media, and marketing.
