Tech Lead / Solution Architect, MSP Partner Portal

Medellin, Colombia | Posted on 10/28/2026

At Roca Alliances Our mission is to inspire nearshore outsourcing to Latin America, as our expertise is providing customized services to help companies from the U.S., Canada, and Europe expand their operations through guided entry with our consolidated experience in the Latin American region.
We are an expert recruitment firm, connecting top talent with leading global companies. We deliver tailored hiring solutions to ensure the perfect match for each role. With deep insight into industry trends, we drive targeted, efficient recruitment that builds long‑lasting partnerships and supports business growth.

Our mission is to inspire and help businesses thrive by delivering the right professionals to meet their needs.

Job Description

Tech Lead / Solution Architect, MSP Partner Portal

About the client

Our client is a leading general email and collaboration security company. It is building a new engineering team in Medellín to own its partner portal for Managed Service Providers (MSPs): the platform partners use for quoting, contracts, billing and provisioning.

About the role

As one of the first hires of this new team, at Staff level, you will own the end-to-end architecture of the MSP partner portal as the team takes it over from the systems integrator that runs it today. You will report to the Engineering Manager and work daily with colleagues in the United States and Europe.

The stack is a React microfrontend shell in an NX monorepo and a Type Script/Node backend-for-frontend (BFF) over microservices, hosted on AWS EKS, with Keycloak and the client's Universal Login for identity,



and integrations with Salesforce Revenue Cloud, Boomi, Net Suite, Zone Billing, Snowflake and Avalara.

What you'll do

- Own the end-to-end architecture of the portal: React microfrontend shell, Type Script/Node BFF, microservices and their integrations.
- Set up and maintain Architecture Decision Records (ADRs), system diagrams and runbooks, building a documentation practice that is thin today.
- Lead API design for five planned partner API families, including MSP billing APIs: REST/OpenAPI standards, versioning, security and contract-first workflows.
- Own the identity architecture: SAML-based Universal Login to Keycloak (OIDC), JWT validation across the BFF and services, and the plan for the upcoming Keycloak-to-Universal Login migration.
- Guide the AWS EKS hosting design (Helm, ALB, ECR, ACM, Route 53, NGINX) across Dev, QA, Staging and Production with the Dev Ops and Platform engineers.
- Lead the technical knowledge transfer from the current vendor, reviewing code and infrastructure and identifying risks and technical debt.
- Mentor engineers, lead design reviews and stay hands‑on with code in critical areas.

What success looks like in your first 6 months

- Knowledge transfer complete for architecture, identity and hosting,



with a documented current‑state architecture.
- An ADR practice in place, with key past and new decisions recorded and reviewed.
- The team owning production with you as the technical escalation point, and at least one other engineer able to cover each critical component.
- Agreed target designs for the partner API families and a sequenced plan for the identity migration.

Requirements

Required

- Significant experience as a senior or staff engineer or architect on production web platforms, with hands‑on Type Script and Node.js.
- Design experience with BFF and microservice architectures, and with REST/OpenAPI API design.
- Practical knowledge of identity protocols (OIDC, SAML and JWT), ideally with Keycloak.
- Experience running workloads on AWS, including Kubernetes (EKS) and core networking services.
- A habit of writing clear architecture documentation and decision records, and of explaining trade‑offs to technical and non‑technical audiences.
- Professional English, comfortable presenting to US and European architecture and leadership forums.

Nice to have

- Experience with partner or B2B billing platforms and integrations (Salesforce Revenue Cloud / CPQ, Net Suite, Boomi).
- Experience planning or running an identity provider migration.
- Background in React microfrontends and NX monorepos.
- Experience taking over a codebase from a systems integrator.
- Permanent contract (contrato a término indefinido) with all legal benefits
- Private health insurance (medicina prepagada)
- The chance to shape the architecture of a new engineering team from day one

#J-18808-Ljbffr

📌 Tech Lead / Solution Architect, MSP Partner Portal (Medellín)
🏢 Roca Alliances
📍 Medellín