Tech Lead / Solution Architect, MSP Partner Portal

Roca Alliances; Medellín; On-site; COP 180,000,000 - 280,000,000; Full time

Benefits offered by this job

Permanent contract (contrato a término

Private health insurance

Chance to shape architecture from day

Job summary

Roca Alliances seeks a Tech Lead / Solution Architect to own the MSP Partner Portal architecture. You will lead the React microfrontend shell, TS/Node BFF, and microservices, coordinating with teams in the US and Europe. Strong focus on ADRs, API design, and security frameworks will be essential.

You will shape identity and hosting strategies on AWS, mentor engineers, and drive knowledge transfer from the current vendor, ensuring production readiness in a fast-paced environment.

Qualifications

• Significant hands-on experience with TypeScript and Node.js on production web platforms.
• Design experience with BFF and microservice architectures and REST/OpenAPI.
• Practical knowledge of identity protocols (OIDC, SAML, JWT), ideally with Keycloak.
• Experience running workloads on AWS, including Kubernetes (EKS) and core networking services.
• Habit of writing architecture documentation and presenting trade-offs to technical and non-technical audiences.
• Professional English, comfortable presenting to US and European leadership forums.

Responsibilities

• Own end-to-end architecture of the MSP partner portal: React microfrontend shell, TypeScript/Node BFF, microservices and their integrations.
• Set up ADRs, system diagrams and runbooks; build a lightweight documentation practice.
• Lead API design for partner API families and MSP billing APIs with REST/OpenAPI standards.
• Own the identity architecture: SAML-based Universal Login to Keycloak (OIDC), JWT validation across BFF and services, plan identity migration.
• Guide AWS EKS hosting design across Dev, QA, Staging and Production; collaborate with DevOps and Platform engineers.
• Lead technical knowledge transfer, review code/infrastructure and identify risks and debt.
• Mentor engineers, lead design reviews and stay hands-on in critical areas.

Skills

TypeScript

Node.js

BFF

Microservices

REST/OpenAPI

OIDC

SAML

JWT

AWS

Kubernetes (EKS)

Architecture documentation

Professional English

Tools

Keycloak

Job description

Tech Lead / Solution Architect, MSP Partner Portal

Medellin, Colombia | Posted on 10/28/2026

At Roca Alliances Our mission is to inspire nearshore outsourcing to Latin America, as our expertise is providing customized services to help companies from the U.S., Canada, and Europe expand their operations through guided entry with our consolidated experience in the Latin American region. We are an expert recruitment firm, connecting top talent with leading global companies. We deliver tailored hiring solutions to ensure the perfect match for each role. With deep insight into industry trends, we drive targeted, efficient recruitment that builds long‑lasting partnerships and supports business growth. Our mission is to inspire and help businesses thrive by delivering the right professionals to meet their needs.

Job Description

Tech Lead / Solution Architect, MSP Partner Portal

About the client

Our client is a leading global email and collaboration security company. It is building a new engineering team in Medellín to own its partner portal for Managed Service Providers (MSPs): the platform partners use for quoting, contracts, billing and provisioning.

About the role

As one of the first hires of this new team, at Staff level, you will own the end-to-end architecture of the MSP partner portal as the team takes it over from the systems integrator that runs it today. You will report to the Engineering Manager and work daily with colleagues in the United States and Europe.

The stack is a React microfrontend shell in an NX monorepo and a TypeScript/Node backend-for-frontend (BFF) over microservices, hosted on AWS EKS, with Keycloak and the client's Universal Login for identity, and integrations with Salesforce Revenue Cloud, Boomi, NetSuite, ZoneBilling, Snowflake and Avalara.

What you'll do

• Own the end-to-end architecture of the portal: React microfrontend shell, TypeScript/Node BFF, microservices and their integrations.
• Set up and maintain Architecture Decision Records (ADRs), system diagrams and runbooks, building a documentation practice that is thin today.
• Lead API design for five planned partner API families, including MSP billing APIs: REST/OpenAPI standards, versioning, security and contract-first workflows.
• Own the identity architecture: SAML-based Universal Login to Keycloak (OIDC), JWT validation across the BFF and services, and the plan for the upcoming Keycloak-to-Universal Login migration.
• Guide the AWS EKS hosting design (Helm, ALB, ECR, ACM, Route 53, NGINX) across Dev, QA, Staging and Production with the DevOps and Platform engineers.
• Lead the technical knowledge transfer from the current vendor, reviewing code and infrastructure and identifying risks and technical debt.
• Mentor engineers, lead design reviews and stay hands‑on with code in critical areas.

What success looks like in your first 6 months

• Knowledge transfer complete for architecture, identity and hosting, with a documented current‑state architecture.
• An ADR practice in place, with key past and new decisions recorded and reviewed.
• The team owning production with you as the technical escalation point, and at least one other engineer able to cover each critical component.
• Agreed target designs for the partner API families and a sequenced plan for the identity migration.

Requirements

Required

• Significant experience as a senior or staff engineer or architect on production web platforms, with hands‑on TypeScript and Node.js.
• Design experience with BFF and microservice architectures, and with REST/OpenAPI API design.
• Practical knowledge of identity protocols (OIDC, SAML and JWT), ideally with Keycloak.
• Experience running workloads on AWS, including Kubernetes (EKS) and core networking services.
• A habit of writing clear architecture documentation and decision records, and of explaining trade‑offs to technical and non‑technical audiences.
• Professional English, comfortable presenting to US and European architecture and leadership forums.

Nice to have

• Experience with partner or B2B billing platforms and integrations (Salesforce Revenue Cloud / CPQ, NetSuite, Boomi).
• Experience planning or running an identity provider migration.
• Background in React microfrontends and NX monorepos.
• Experience taking over a codebase from a systems integrator.
• Permanent contract (contrato a término indefinido) with all legal benefits
• Private health insurance (medicina prepagada)
• The chance to shape the architecture of a new engineering team from day one