{"id":2443778,"url":"https://alion.io/job/flatgigs-platform-architect-backend-lead","title":"Platform Architect & Backend Lead","company":{"id":672990,"name":"Flatgigs","domain":"flatgigs.com","url":"https://alion.io/company/flatgigs","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":100,"open_postings":48,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["IN","EG","PK"],"hiring_countries_total":3,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":101000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1790},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon Kinesis","optional":false},{"name":"Apache Kafka","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"CoAP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Go","optional":false},{"name":"GraphQL","optional":false},{"name":"IAM","optional":false},{"name":"InfluxDB","optional":false},{"name":"Least Privilege","optional":false},{"name":"MQTT","optional":false},{"name":"Node JS","optional":false},{"name":"OPC UA","optional":false},{"name":"Python","optional":false},{"name":"RabbitMQ","optional":false},{"name":"Rest API","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Terraform","optional":false},{"name":"Time Series Forecasting","optional":false},{"name":"TimescaleDB","optional":false},{"name":"TypeScript","optional":false},{"name":"WebSockets","optional":false},{"name":"Amazon ECS","optional":true},{"name":"Digital Twin","optional":true},{"name":"Docker","optional":true},{"name":"EMQX","optional":true},{"name":"Erlang","optional":true},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true},{"name":"PostgreSQL","optional":true}],"status":"live","first_seen_at":"2026-10-13T12:53:50Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T00:18:11Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About the Role\nWe are building a multi-tenant, hardware-agnostic IoT platform from the ground up. We need a senior engineer who can design the system architecture in the morning and write production backend code in the afternoon. This is not an architecture-only role and not a coding-only role - it is both, simultaneously, in a fast-moving early-stage environment. You will also own cloud infrastructure as interim DevOps until we scale.\nThe Ideal Candidate\nYou have built IoT backend platforms before - not just used them. You understand the hard problems: device auth at scale, MQTT broker design, time-series ingestion performance, multi-tenant data isolation, and real-time delivery to web clients. You are comfortable making architectural decisions autonomously, documenting them clearly, and standing by them. You work remotely with discipline - you flag risks before they become problems.\nKey Responsibilities\nPlatform Architecture\nDesign the full end-to-end IoT platform architecture: device connectivity layer → MQTT/protocol ingestion → stream processing → time-series storage → REST/GraphQL API layer → real-time WebSocket delivery\nDefine the multi-tenant data model: strict data isolation between customers, tenant-scoped API tokens, row-level security\nDesign the device lifecycle system: provisioning, X.509/JWT authentication, device registry, status tracking, decommissioning\nArchitect the protocol abstraction layer so MQTT, Modbus, OPC-UA, CoAP, and HTTP devices all normalise to the same internal data model\nDesign a configurable rule engine: event-condition-action rules for alerts, automations, and integrations - no code required from customers\nPlan OTA firmware update management: secure delivery, versioning, rollback, fleet orchestration\nWrite Architecture Decision Records (ADRs) for every major technical choice - nothing undocumented\nDesign the scaling path from 100 devices (pilot) to 500,000+ (production) without structural rework\nBackend Development\nBuild core platform services from scratch: device management, telemetry ingestion, rule engine, notification/alerting, OTA update, multi-tenant API gateway\nDevelop REST and GraphQL APIs with full OpenAPI specification - version-controlled from Day 1\nImplement WebSocket and SSE endpoints for real-time telemetry delivery to web and mobile clients\nBuild device command-and-control with acknowledgement, retry logic, and timeout handling\nImplement device shadow service: last-known state of every device accessible even when offline\nWrite unit, integration, and load tests - no service reaches staging without test coverage\nOwn service reliability: SLO definitions, alerting runbooks, on-call incident response\nCloud Infrastructure (Interim)\nProvision and manage all AWS environments (dev, staging, production) using Terraform - no click-ops\nConfigure AWS IoT Core: MQTT endpoint, topic namespace, rules engine, certificate management\nSet up CI/CD pipelines via GitHub Actions for all backend services\nConfigure CloudWatch monitoring, log aggregation, and automated health alerts\nManage IAM for all team members - least-privilege access, no shared credentials\nHand off infrastructure fully documented when a DevOps engineer joins in Phase 2\nRequirements\n7-12 years software or systems engineering; minimum 4 years specifically building IoT platform backends or connected product infrastructure\nExpert-level, hands-on experience with AWS IoT Core or Azure IoT Hub - production deployments, not tutorials NON-NEGOTIABLE\nExpert MQTT knowledge: v3.1 and v5.0, topic hierarchy design, QoS levels, retained messages, Last Will & Testament, broker sizing and clustering NON-NEGOTIABLE\nProficiency in Python and Node.js/TypeScript for production backend services - Go is a strong advantage\nHands-on experience with a time-series database: InfluxDB, TimescaleDB, or AWS Timestream\nTerraform or AWS CloudFormation - you provision cloud infrastructure programmatically, not through the console\nMulti-tenant SaaS backend architecture: data isolation patterns, tenant-scoped access control, shared infrastructure design\nSecurity fundamentals applied in practice: TLS/mTLS, X.509 certificates, OAuth 2.0, JWT, secrets management (Vault or AWS Secrets Manager)\nMessage broker or streaming experience: Kafka, RabbitMQ, AWS Kinesis, or AWS IoT Rules Engine\nProven ability to work autonomously at a senior level - makes decisions, documents rationale, flags risks without needing to be prompted REMOTE DISCIPLINE\nNice to Have\nIndustrial protocol knowledge: Modbus TCP/RTU, OPC-UA, BACnet - even as a consumer or integrator\nEMQX, HiveMQ, or VerneMQ broker deployment and production operation\nEdge computing runtimes: AWS Greengrass v2, Azure IoT Edge, or Balena\nDigital twin frameworks: AWS IoT TwinMaker, Azure Digital Twins\nContainer orchestration: Kubernetes, ECS, or equivalent for future Phase 2 migration\nOpen-source IoT contributions or published technical writing on platform architecture\nSkills at a Glance\nArchitecture: IoT platform end-to-end design · Multi-tenant SaaS patterns · Device lifecycle management · Protocol abstraction · Rule engine design · Horizontal scaling strategy\nBackend: Python / Node.js / TypeScript / Go · REST + GraphQL API design · WebSocket / SSE real-time delivery · MQTT broker configuration · Time-series DB (InfluxDB / Timestream) · PostgreSQL or equivalent RDBMS\nCloud & DevOps: AWS IoT Core / Azure IoT Hub · Terraform / CloudFormation · GitHub Actions CI/CD · Docker containers · CloudWatch monitoring · IAM and security policy management\nSecurity: TLS / mTLS configuration · X.509 certificate management · OAuth 2.0 / JWT implementation · Secrets management · Device authentication at scale","description_format":"text","description_chars":5697,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"},{"name":"Egypt","iso":"EG","kind":"country"},{"name":"Pakistan","iso":"PK","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-13T12:53:50Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:3","agency","win:early"],"computed_at":"2026-10-14T03:26:15Z"},"pay":null,"html_url":"https://alion.io/job/flatgigs-platform-architect-backend-lead","json_url":"https://alion.io/job/flatgigs-platform-architect-backend-lead.json","meta":{"generated_at":"2026-10-14T03:26:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5380,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":672990},"rest":"https://alion.io/mcp/rest/get_company?id=672990"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fflatgigs-platform-architect-backend-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fflatgigs-platform-architect-backend-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fflatgigs-platform-architect-backend-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/flatgigs-platform-architect-backend-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fflatgigs-platform-architect-backend-lead"}]}