Enterprise Application Architect

CitiusTech; Knoxville (TN); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Great Place to Work

Comprehensive set of benefits

Be You Be Awesome EVP

Job summary

CitiusTech is seeking an experienced Enterprise/Platform Architect to own the end-to-end platform architecture for a multi-tenant SaaS on AWS. You will set reference architecture, guardrails, NFRs, ADRs, and roadmaps spanning application, data, security, DevSecOps, and cost optimization.

You will partner with business, product, design, and compliance to ensure scalability, auditability, and adherence to HIPAA rules, while driving architecture reviews and platform evolution across SAFe trains.

Qualifications

• 15–22+ years in architecture roles for SaaS on AWS.
• Production Kubernetes + Istio experience.
• Multi-tenant patterns and data isolation.
• Security/compliance for healthcare (HIPAA/PHI).
• FinOps and capacity planning.

Responsibilities

• Define north star architecture and reference implementations; maintain roadmaps.
• Define EAI and multi-tenant SaaS reference architecture with key systems.
• Lead architecture reviews and ADRs; drive architecture runway.
• Partner with security/compliance on HIPAA/HITRUST controls by design.
• Establish the microservices architecture for .NET on EKS with Istio; model state machines and SLAs.

Skills

Enterprise architecture

AWS

Kubernetes + Istio

.NET microservices

Camunda BPMN

HIPAA/PHI security

FinOps / cost modeling

Azure

Reference architecture

Tools

Aurora Postgres/MySQL

Terraform

CDK

Job description

At CitiusTech, we constantly strive to solve the industry's greatest challenges with technology, creativity, and agility. With over 8,500 healthcare technology professionals worldwide, CitiusTech powers healthcare digital innovation, business transformation, and industry-wide convergence for over 140 organizations through next-generation technologies, solutions, and products. We aim to accelerate the transition to a human-first, sustainable, and digital healthcare ecosystem with the world's leading Healthcare and life sciences organizations and our partners.

Our vision:

To inspire new possibilities for the health ecosystem with technology and human ingenuity.

Location: Knoxville, TN

Role Summary

• Owns the end-to-end platform architecture and target operating model for a multi-tenant SaaS platform on AWS.
• Sets the reference architecture, guardrails, non-functional requirements (NFRs), architecture decision records (ADRs), technology standards and evolution of roadmap spanning application, data, security, DevSecOps, and cost optimization.
• Partners with business and compliance (HIPAA rules) to ensure scalability, resilience, and auditability.

Key Responsibilities

• Define north star architecture, standards, and reference implementations; maintain roadmaps.
• Define Enterprise Application Integration (EAI) architecture with upstream and downstream enterprise systems such as (but not limited to) TeamWorks/CRM/ITSM/H2/Deputy/Scribe/Gurobi Optimizer.
• Define and maintain multi-tenant SaaS reference architecture (tenant isolation, metadata, routing, billing/chargeback, service quotas).
• Lead architecture reviews, trade-off decisions, and architecture runway for SAFe trains.
• Partner with security/compliance on HIPAA/HITRUST controls by design.
• Work closely with product management, design, and other cross-functional teams to align technical and product roadmaps.
• Provide detail & high-level oversight of overall solution & system architecture, technical direction.
• Establish the microservices architecture for .NET on EKS with Istio (service mesh, mTLS, traffic policies, resiliency patterns, rate limiting).
• Define case management & rules architecture (e.g., Camunda)—modeling state machines, SLAs, timers, and human tasks.
• Govern data architecture: RDS (Aurora Postgres/MySQL), RDS Proxy, Redis/ElastiCache, S3 for DMS, object lifecycle, encryption, partitioning, multi-tenant data isolation strategies (pooled vs silo vs hybrid).
• Drives security & compliance architecture: HIPAA, PHI, IAM boundaries, KMS, TLS, tokenization, audit trails, immutable logs (CloudTrail/Lake, OpenTelemetry).
• Drive Well-Architected (WAF) reviews across SaaS Lens, Modernization, App Migration; define NFR SLOs (availability, latency, RTO/RPO).
• Define observability strategy: tracing, logging, metrics, SLO error budgets, synthetic checks; golden signals.
• Establish DevSecOps blueprint: pipelines, IaC (Terraform/CDK), policies-as-code, SBOM/SCA, container supply chain security.
• Set platform roadmaps for capabilities: email monitoring/response, DMS, scheduling system, auditing, and reporting/analytics.
• Chair Architecture Review Board and ensure adherence to standards via architecture runways and ADRs.

Required Skills

• 15–22+ years overall, 5+ years as an enterprise/platform architect for SaaS on AWS.
• Kubernetes + Istio production experience (mTLS, gateways, sidecars, traffic policies, retry/breakers).
• Multi-tenant patterns (siloed vs pooled DB schemas, tenant-aware routing, per-tenant encryption keys, tenant throttling).
• .NET microservices, DDD, event-driven architecture, outbox/eSaga patterns.
• BPMN/workflow/rules engines (Camunda), and case management design.
• Security/compliance for healthcare (HIPAA/PHI) and US regulatory understanding for No Surprises Act IDR.
• FinOps/Cost modeling and capacity planning.
• Have know-how and experience working with Azure.

Nice-to-have Certifications

• AWS Certified Solutions Architect – Associate / Professional, CKA/CKS.
• Works with: Business, Cloud Solution Architect, Security/Compliance Lead, Product, Platform Eng, SRE, Data/Analytics.

Life at CitiusTech:

We focus on building highly motivated engineering teams and thought leaders with an entrepreneurial mindset, centered on our core values of Passion, Respect, Openness, Unity, and Depth (PROUD) of knowledge. Our success lies in creating a fun, transparent, non-hierarchical, diverse work culture that focuses on continuous learning and work-life balance. Rated by our employees as the Great Place to Work according to the Great Place to Work survey. We offer you a comprehensive set of benefits to ensure that you have a long and rewarding career with us.

Our EVP:

Be You Be Awesome is our EVP and it reflects our continuing efforts to create CitiusTech as a great place to work where our employees can thrive, both personally and professionally. It encompasses the unique benefits and opportunities we offer to support your growth, well-being, and success throughout your journey with us and beyond. Together with our clients, we are solving some of the greatest healthcare challenges and positively impacting human lives. Welcome to the world of Faster Growth, Higher Learning, and Stronger Impact.