The Role
Own the end-to-end architecture of an MSP partner portal built with React, TypeScript, Node.js, microservices, and AWS EKS. Lead API design, identity architecture, hosting design, architecture documentation, vendor knowledge transfer, technical risk assessment, design reviews, and engineer mentorship. The role remains hands-on while guiding production ownership, partner API development, and an identity-provider migration.
Summary Generated by Built In
Tech Lead / Solution Architect, MSP Partner Portal
About the client
Our client is a leading global email and collaboration security company. It is building a new engineering team in Medellín to own its partner portal for Managed Service Providers (MSPs): the platform partners use for quoting, contracts, billing and provisioning.
About the role
As one of the first hires of this new team, at Staff level, you will own the end-to-end architecture of the MSP partner portal as the team takes it over from the systems integrator that runs it today. You will report to the Engineering Manager and work daily with colleagues in the United States and Europe.
The stack is a React microfrontend shell in an NX monorepo and a TypeScript/Node backend-for-frontend (BFF) over microservices, hosted on AWS EKS, with Keycloak and the client's Universal Login for identity, and integrations with Salesforce Revenue Cloud, Boomi, NetSuite, ZoneBilling, Snowflake and Avalara.
What you'll do
• Own the end-to-end architecture of the portal: React microfrontend shell, TypeScript/Node BFF, microservices and their integrations.
• Set up and maintain Architecture Decision Records (ADRs), system diagrams and runbooks, building a documentation practice that is thin today.
• Lead API design for five planned partner API families, including MSP billing APIs: REST/OpenAPI standards, versioning, security and contract-first workflows.
• Own the identity architecture: SAML-based Universal Login to Keycloak (OIDC), JWT validation across the BFF and services, and the plan for the upcoming Keycloak-to-Universal Login migration.
• Guide the AWS EKS hosting design (Helm, ALB, ECR, ACM, Route 53, NGINX) across Dev, QA, Staging and Production with the DevOps and Platform engineers.
• Lead the technical knowledge transfer from the current vendor, reviewing code and infrastructure and identifying risks and technical debt.
• Mentor engineers, lead design reviews and stay hands-on with code in critical areas.
What success looks like in your first 6 months
• Knowledge transfer complete for architecture, identity and hosting, with a documented current-state architecture.
• An ADR practice in place, with key past and new decisions recorded and reviewed.
• The team owning production with you as the technical escalation point, and at least one other engineer able to cover each critical component.
• Agreed target designs for the partner API families and a sequenced plan for the identity migration.
Tech environment
React • NX monorepo • TypeScript • Node.js • BFF • Microservices • REST / OpenAPI • AWS EKS • Helm • Keycloak • OIDC • SAML • JWT • Salesforce Revenue Cloud • NetSuite • Boomi
Requirements
Required
• Significant experience as a senior or staff engineer or architect on production web platforms, with hands-on TypeScript and Node.js.
• Design experience with BFF and microservice architectures, and with REST/OpenAPI API design.
• Practical knowledge of identity protocols (OIDC, SAML and JWT), ideally with Keycloak.
• Experience running workloads on AWS, including Kubernetes (EKS) and core networking services.
• A habit of writing clear architecture documentation and decision records, and of explaining trade-offs to technical and non-technical audiences.
• Professional English, comfortable presenting to US and European architecture and leadership forums.
Nice to have
• Experience with partner or B2B billing platforms and integrations (Salesforce Revenue Cloud / CPQ, NetSuite, Boomi).
• Experience planning or running an identity provider migration.
• Background in React microfrontends and NX monorepos.
• Experience taking over a codebase from a systems integrator.
Benefits
• Permanent contract (contrato a término indefinido) with all legal benefits
• Competitive salary
• Private health insurance (medicina prepagada)
• The chance to shape the architecture of a new engineering team from day one
• On-site role in Medellín with parking
Skills Required
- Significant experience as a senior or staff engineer or architect on production web platforms
- Hands-on experience with TypeScript and Node.js
- Design experience with backend-for-frontend and microservice architectures
- Experience with REST and OpenAPI API design
- Practical knowledge of OIDC, SAML, and JWT identity protocols
- Experience with Keycloak
- Experience running workloads on AWS
- Experience with Kubernetes and AWS EKS
- Knowledge of core AWS networking services
- Ability to write architecture documentation and architecture decision records
- Ability to explain technical trade-offs to technical and non-technical audiences
- Professional English suitable for US and European architecture and leadership forums
- Experience with partner or B2B billing platforms and integrations
- Experience with Salesforce Revenue Cloud or CPQ, NetSuite, or Boomi
- Experience planning or running an identity-provider migration
- Experience with React microfrontends and NX monorepos
- Experience taking over a codebase from a systems integrator
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Roca Alliances is a consulting agency dedicated to helping global companies build geographically diverse teams and scale their operations by outsourcing or nearshoring to Latin America. With over 15 years of expertise, the company utilizes a proprietary approach to analyze, assess, and identify ideal locations across the Americas, fostering growth and scalability for clients in various industries including technology, media, and marketing.
