Application Platform Technical Lead

Quick Facts

• Role: Application Platform Technical Lead

Description

You will own the architecture and ongoing evolution of the Tetra Apps platform, a secure, scalable, multi-tenant application runtime used to build and deploy containerized applications for scientists, partners, and internal teams. This is a hands-on technical authority role spanning cloud infrastructure, security, platform architecture, and developer experience. You will inherit a live platform and make meaningful improvements while remaining deeply involved in code and operations.

Responsibilities

• Own technical architecture and platform evolution: application packaging, provisioning, routing, authentication, isolation, monitoring, upgrades, and retirement.

• Design and improve the application runtime using AWS ECS, including proxy/routing layers and application lifecycle management.

• Architect identity and authorization for individual applications (service accounts, IAM roles, database credentials).

• Build reliable installation, upgrade, and rollback processes for both multi-tenant cloud and customer-hosted environments.

• Integrate security across the platform: tenant isolation, delegated authorization, secrets management, and browser security.

• Threat-model risks from executing externally developed code and AI agents.

• Establish production readiness standards: monitoring, metrics, distributed tracing, alerting, incident response, and capacity planning.

• Partner with DevOps and security teams on infrastructure-as-code and deployment automation for multi-tenant infrastructure.

• Own developer experience by improving templates, SDKs, CLI tools, local workflows, and documentation.

• Lead sprint and quarterly planning with the Product Manager (prioritization, estimation, sequencing, and delivery commitments).

• Balance feature work with platform maintenance, technical debt reduction, and long-term architectural improvements.

• Serve as technical design authority through architecture reviews, RFCs, and best-practice guidance.

• Stay hands-on by designing and shipping code across TypeScript/Node.js services, React, AWS infrastructure, Python tooling, and CI/CD automation.

• Troubleshoot customer deployments with field engineers and convert feedback into platform improvements.

• Mentor engineers via code reviews and technical guidance.

Requirements

• 10+ years of professional software engineering experience, including technical lead or architect experience.

• Experience architecting and operating production platforms for external teams/customers to build and deploy applications.

• Proven experience with multi-tenant application platforms (PaaS/runtime environments, plugin/extension systems, or internal developer platforms).

• Deep hands-on Docker experience (image pipelines, provisioning, networking, service discovery, scaling, lifecycle management).

• Strong production experience with AWS (ECS, ALB/NLB, VPC, IAM, KMS, CloudWatch, S3, Lambda).

• Strong security engineering background (IAM, least-privilege, identity propagation, tenant isolation, browser security, secrets management).

• Experience securing multi-tenant platforms executing external/untrusted code.

• Expert-level TypeScript and Node.js for backend services and APIs.

• Strong React experience for frontend architecture contributions.

• Working knowledge of Python for SDKs, developer tooling, and automation.

• Experience with infrastructure-as-code (CloudFormation or equivalent).

• Strong API design experience (REST, OpenAPI, versioning, backward compatibility).

• Observability experience (OpenTelemetry, distributed tracing, metrics, SLI/SLO).

• Experience leading design reviews and producing architecture documentation/RFCs with migration plans.

• Ability to lead planning and delivery accountability (sprints/quarterly).

• Ability to troubleshoot and improve complex live production systems without disrupting existing customers.

• Ability to use AI-assisted development tools while maintaining quality, security, and architectural integrity.

• Authorized to work in the US full-time now and in the future.

Benefits

Not specified in the provided posting.