AWS Multitenant Systems Architect

BCI~IT; Jersey City (NJ); Hybrid; USD 150,000 - 210,000; Full time

Job summary

BCI-IT is seeking a hands-on IC Architect to lead a full-stack multi-tenant SaaS effort. You will own architecture, AWS infrastructure, and code across services, ensuring tenant isolation and scalable provisioning.

You’ll build and maintain CI/CD pipelines, write production-grade C# and Python, and mentor engineers while coordinating with stakeholders. Hybrid work 1–2 days on-site in NY/NJ area.

Qualifications

• 8+ years of software development with hands-on architecture experience.
• 5+ years building multi-tenant SaaS from scratch.
• Expertise in tenant isolation models and data partitioning.
• Strong AWS infra design across VPC, ECS/EKS, Lambda, RDS/Aurora.
• Experience with IaC: CloudFormation, CDK, or Terraform.
• Proficient in C# (.NET Core) and Python.

Responsibilities

• Architect multi-tenant environment from ground up including isolation model.
• Design and build AWS infrastructure to support it end-to-end.
• Own infra-as-code for repeatable provisioning and audits.
• Develop CI/CD pipelines and DevOps practices for deployment and observability.
• Write production code in C# and Python and mentor team.
• Define tenant context propagation and security boundaries.

Skills

Hands-on architect

AWS cloud design

C#/.NET Core

Python

DevOps & CI/CD

Infrastructure as code

Tenant isolation

Multi-tenant SaaS

Communication with stakeholders

Mentoring engineers

Tools

CloudFormation

CDK

Terraform

ECS/EKS

Lambda

RDS/Aurora

S3

API Gateway

CI/CD tooling

Job description

BCI-IT is building out a multi-tenant environment and needs a hands-on (IC) Individual Contributor / Architect to lead the effort end to end for our client— infrastructure, DevOps, and software development. This is not a pure software engineering lead role: the person needs to own the full stack of decisions that make multi-tenancy work, from AWS infrastructure design and CI/CD pipelines down to the application code that enforces tenant isolation. You’ll be the single technical owner who can design the architecture, stand up the infrastructure, and write the code — not hand off pieces to separate infra and dev teams. We can work on a W2/1099 basis only. No C2C or subcontractors. Open for US Citizen, Perm Resident, Green Card, OPT EAD/STEM. No H1 or sponsorship available. Role is hybrid with the need to be in the office 1-2 days a week. Candidates local to the NY/NJ area preferred.

What You’ll Do

• Architect the multi-tenant environment at Verisk from the ground up: tenant isolation model, data partitioning strategy, provisioning, and scaling
• Design and build the AWS infrastructure to support it (VPC design, ECS/EKS, Lambda, RDS/Aurora, S3, API Gateway, IAM boundaries between tenants)
• Own infrastructure-as-code (CloudFormation, CDK, or Terraform) for repeatable, auditable environment provisioning
• Build and maintain CI/CD pipelines and DevOps practices (deployment automation, environment promotion, rollback strategy, observability)
• Develop core platform and tenant-management services in C# and Python
• Design tenant context propagation across services, APIs, databases, and background/batch jobs
• Define and enforce security and data-isolation standards across tenants (encryption, IAM scoping, network segmentation, audit logging)
• Set up monitoring and alerting that surfaces per-tenant health, not just aggregate system health (critical for catching “noisy neighbor” issues early)
• Make build-vs-buy and architecture tradeoff calls, and clearly communicate the reasoning to technical and non-technical stakeholders
• Mentor engineers on multi-tenant patterns as the team scales around this effort

Required Qualifications

• 8+ years of software development experience, with significant time spent as a hands-on architect, not purely in a management or pure-dev role
• 5+ years of hands-on experience designing and building multi-tenant SaaS environments from the ground up — this is a core, non-negotiable requirement
• Demonstrated expertise across multiple tenant isolation models (shared database/shared schema, shared database/separate schema, database-per-tenant) and the judgment to choose and implement the right one
• Strong, production-grade AWS infrastructure experience — not just “used AWS,” but designed and built it: VPCs, ECS/EKS or Lambda, RDS/Aurora, S3, API Gateway, IAM, CloudWatch/X‑Ray
• DevOps ownership experience: CI/CD pipeline design and implementation, infrastructure-as-code (CloudFormation, CDK, or Terraform), deployment automation
• Strong software development skills in both C# (.NET Core) and Python — able to write production code in both, not just read it
• Proven experience solving multi‑tenant-specific challenges: tenant onboarding/provisioning automation, noisy‑neighbor performance isolation, per‑tenant scaling, cross‑tenant data leakage prevention
• Solid understanding of relational databases (SQL Server, PostgreSQL, or Aurora) and data partitioning/isolation strategies at scale
• Strong understanding of security best practices in multi‑tenant environments (authentication, authorization, encryption, compliance considerations relevant to insurance/data‑analytics industries)
• Excellent communication skills — this role will need to represent architectural decisions directly to stakeholders

Nice to Have

• Experience in insurance, risk analytics, or data‑heavy enterprise environments
• AWS certifications (Solutions Architect Professional, DevOps Engineer Professional)
• Experience with containerization and orchestration (Docker, Kubernetes)
• Experience with event‑driven architectures (SQS, SNS, EventBridge, Kafka)
• Experience building platforms that support both pooled (self‑serve) and dedicated/siloed (enterprise) tenant tiers in parallel
• Background holding both architecture and hands‑on build responsibility simultaneously (not purely advisory/architect‑on‑paper roles)