Software Architect

We’re looking for an experienced Software Architect to lead the design and evolution of our next-generation Enterprise VPN and Zero Trust networking platform.

You’ll work across teams to define and evolve the architecture of secure, scalable systems responsible for identity, access control, and connectivity for modern organizations.

The product is in active development, is a startup product and you'll join the foundational team shaping the architecture and direction of the platform. As a key member of the founding team, you’ll shape our technical strategy, engineering practices, and system resilience. This is a high-impact technical role where your decisions will influence both product direction and company growth.

Responsibilities:

• Lead the design and evolution of secure, scalable, and observable backend systems using Node.js, TypeScript, and NestJS
  

• Define and enforce architectural standards, ensuring alignment with 12-factor app principles and modern software design patterns
  

• Design and maintain comprehensive architecture documentation (including deployment, component, sequence, and data flow diagrams)
  

• Architect and validate high-availability and fault-tolerant systems with proper load balancing, redundancy, and recovery mechanisms
  

• Oversee API design (REST, gRPC) with secure authentication, authorization, and multi-tenant access control
  

• Lead and mentor the backend engineering team; conduct design reviews, code reviews, and technical alignment sessions
  

• Guide CI/CD workflows, infrastructure-as-code practices, and ensure reliable production deployments
  

• Collaborate with product, frontend, DevOps, and security teams to align backend architecture with business goals and SLAs

• 8+ years of backend development experience, with 3+ years in architectural or technical leadership roles
  

• Expertise in Node.js, TypeScript, NestJS, and RxJS
  

• Deep knowledge of API standards: REST, gRPC, Protocol Buffers, GraphQL
  

• Advanced experience with Linux networking (e.g. ip, iptables, conntrack, routing, NAT, DNS, TLS/SSL, firewalls)
  

• Strong grasp of declarative access control models and policy engines (e.g., OPA, Cedar)
  

• In-depth knowledge of OAuth 2.0, OpenID Connect, JWT, SAML, and secure identity flows
  

• Proven experience with multi-tenant, secure, cloud-native system design at scale
  

• Hands-on knowledge of CI/CD (ArgoCD), Docker, Testcontainers, and DevOps collaboration (GitOps)
  

• Fluency in designing systems with PostgreSQL, Redis, RabbitMQ, MQTT, SNS/SQS
  

• Strong background in AWS services (e.g. EC2, ECS, Lambda, IAM, VPC, CloudWatch)
  

• Experience maintaining up-to-date, version-controlled architecture documentation
  

• Familiarity with 12-factor app principles or equivalent clean, modular software design frameworks
  

• Ability to lead remote teams with clear communication and technical authority
  
  

Nice to Have

• Experience in VPNs, access management, or cybersecurity
  

• Knowledge of Cloudflare stack (e.g., Workers, WAF, DNS, Zero Trust)
  

• Exposure to Terraform and infrastructure-as-code workflows
  

• Kubernetes and container orchestration in SaaS production environments
  

• Exposure to multi-region deployments and edge/service mesh architecture
  

• Previous experience scaling high-load, latency-sensitive systems
  

• Background in fast-paced product/startup teams
  

• BSc/MSc in Computer Science or related field