Senior Backend Engineer (Growth & Managed Security Service Provider (MSSP)

Horizon3; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Growth opportunities

Innovation-driven culture

Diversity & inclusion

Remote work flexibility

Job summary

Horizon3 is seeking a senior backend engineer to own substantial pieces of our platform infrastructure. You will design services enforcing licensing, entitlements, and feature access across NodeZero’s product, APIs, and partner workflows, and you’ll own provisioning, admin experiences, and auditability in a multi-tenant SaaS environment.

You will work across AWS/GCP/Azure and bring strong expertise in RBAC, authentication, and scalable data models, including PostgreSQL.

Qualifications

• 7+ years of professional software engineering experience.
• Experience building multi-tenant SaaS platforms with strong tenant isolation, access controls and data scoping.
• Hands-on experience with RBAC, authentication, and SSO patterns at scale.
• Production reliability focus: observability, runbooks, incident response, and customer trust.
• Bachelor’s degree in Computer Science, Computer Engineering, or a related field.

Responsibilities

• Design and implement backend services enforcing licensing, entitlements, feature access, usage limits, and packaging rules across product, APIs, and partner workflows.
• Build and evolve provisioning and onboarding workflows—account setup, entitlement propagation, and auto-provisioning.
• Develop admin experience infrastructure including RBAC and multi-tenant account management.
• Implement audit logging and event history for compliance, support, and trust.
• Collaborate with adjacent teams to ensure entitlement and access rules are consistently applied across data exposures.
• Contribute production code that emphasizes design quality, test coverage, and observability.

Skills

Go

Python

TypeScript

Docker

Kubernetes

PostgreSQL

RBAC

AWS

GCP

Multi-tenant SaaS

Education

Bachelor's degree in CS/CE or related

Tools

Docker

Kubernetes

AWS

Azure

GCP

PostgreSQL

Job description

• You’ll be joining Growth & MSSP - the team that owns the foundational control plane governing what customers can access, what they’ve purchased, and how they’re administered across NodeZero
• If the Pentest Platform is the engine, Enterprise Platform is the operating model that determines who gets to use it and how
• The team’s work spans licensing and entitlements, admin experience, provisioning, notifications, MSP/MSSP capabilities, and auditability
• These aren’t just internal systems - they’re the services that directly shape how customers, administrators, and service providers experience NodeZero every day
• Getting them right means building for correctness, consistency, and trust across a complex multi-tenant commercial model
• This is a senior individual contributor role
• You’ll lead through technical judgment, careful system design, and reliable execution - owning significant pieces of platform infrastructure while contributing to a team that balances feature delivery with long-term platform investment and production health
• Design and implement backend services that enforce licensing, entitlements, feature access, usage limits, and packaging rules consistently across NodeZero’s product, APIs, and partner workflows
• Build and evolve provisioning and onboarding workflows - account setup, entitlement propagation, and auto-provisioning that reliably activates customers without manual intervention
• Develop admin experience infrastructure: user access controls, account settings, parent-child account relationships, and the RBAC/authorization patterns that make multi-tenant administration safe and auditable
• Build MSP/MSSP capabilities - asset allocation, sub-client management, usage visibility, and reporting workflows that let service providers manage multiple customer environments at scale
• Implement audit logging and event history systems that capture administrative, entitlement, usage, and account-level actions for support, compliance, and customer trust
• Develop the notifications platform: usage warnings, consumption alerts, overage notices, product announcements, and other transactional and non-transactional communications
• Operate these services in production - contributing to monitoring, runbooks, incident response, and support workflows for systems customers depend on daily
• Contribute production code that sets the standard for design quality, test coverage, observability, and operational rigor
• Collaborate with adjacent teams - Pentest Data Platform and the Platform Integration Team - to ensure entitlement, access, and account-hierarchy rules are applied consistently wherever NodeZero data is exposed

Benefits

• Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
• Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
• Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive
• Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work

Interest in mentoring junior and mid-level engineersAbility to own and manage concurrent initiatives, with strong judgment in prioritization and time managementExcellent analytical and problem-solving skills, with high attention to detail and a high bar for quality - particularly for systems where correctness has commercial and compliance implicationsA strong desire to continuously learn new technologies in a fast-paced Agile environmentEffective communication and collaboration across engineering, product, and designSelf-directed and driven - capable of conceiving and implementing solutions independently and as part of a teamStrong technical documentation ability, including design docs, runbooks, and support documentationExperience building production applications on cloud platforms (AWS, Azure, GCP) using Docker and KubernetesBachelor’s Degree in Computer Science, Computer Engineering, or a related field7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Go, TypeScript, Java, Scala, C++, etc.)Experience building multi-tenant SaaS platforms with strong tenant isolation - particularly around access controls, data scoping, and account hierarchyHands-on experience with RBAC, authorization, authentication, or SSO systems, and the patterns that make them consistent and auditable at scaleExperience with licensing, subscription, entitlement, usage metering, or billing-adjacent systems - especially where correctness and consistency across services matterExperience designing and building audit log or event history systems with compliance or support requirements in mindFamiliarity with provisioning and feature-access patterns - auto-provisioning, feature flags, and staged rollout for commercial SaaS productsExperience building admin consoles or customer self-service workflows, including parent-child or multi-org account managementExperience with notifications infrastructure - transactional and non-transactional communications, delivery reliability, and preference managementExperience with MSP, MSSP, or multi-tenant partner models - asset allocation, sub-account management, and usage/reporting visibilityProduction reliability experience: observability tooling, on-call ownership, runbook authorship, and incident response for foundational platform servicesExpert proficiency in SQL and experience with relational database architectures (PostgreSQL); comfort with complex data models involving account hierarchies, usage records, and entitlement state