The Domain Architect owns the technical direction of a core business domain within a digital payments platform. This role defines domain boundaries, models, contracts, and architecture standards across payment workflows for credit/debit, EBT SNAP, and EBT WIC.
You'll design durable, reliable payment workflows using Temporal, Kafka, and Azure/GCP, ensuring transactions are idempotent, recoverable, and reconciled—even when gateways time out or failures occur. You'll establish standards for workflow versioning, observability, resilience, and PCI‑compliant security.
This is a hands‑on architecture role involving prototyping, reference implementations, production code reviews, and mentoring senior engineers. You'll partner with payment processors, benefit providers, Finance, and related domains to ensure accurate payment processing from checkout through the general ledger.
Key Responsibilities
Domain Ownership & Architecture
- Own domain architecture, technical roadmap, key decisions, boundaries, models, and shared vocabulary.
- Define service/workflow ownership and establish API/event contracts with peer domains using OpenAPI, JSON Schema, or Protobuf.
- Write architecture review board (ARB) specifications and architecture decision records (ADRs).
- Establish trust boundaries and design idempotent operations using sagas, compensation, outbox/inbox, and reconciliation patterns.
Workflows & Messaging
- Build durable workflows, including Temporal Nexus cross-domain calls.
- Define long-running workflow versioning standards, including patching, build IDs, and replay testing.
- Design Kafka domain events with schema governance, retries, and dead‑letter queues.
Payments & Security
- Architect payment workflows across order creation, edits, cancellations, finalization, and refunds.
- Design multi-tender processing across credit/debit, EBT SNAP, and EBT WIC.
- Integrate processors and benefit providers for authorization, capture, voids, refunds, and reversals.
- Handle gateway timeouts and unknown outcomes without duplicate charges or unresolved transactions.
- Ensure EBT compliance with USDA FNS and state program rules.
- Lead PCI DSS scope reduction, tokenization (network tokens, DPAN), encryption, and key rotation.
- Support Apple Pay, Google Pay, split tender, and third-party marketplace payments, including multi-capture, over‑capture rules, and split settlement.
- Partner with Finance on reconciliation, TLOG reporting, and general‑ledger accuracy.
- Define payment SLOs for authorization, capture, refunds, and compensation failures.
Reliability & Leadership
- Establish resilience using Polly and Temporal retry policies.
- Keep payment authorization within checkout timeout budgets across Azure and GCP.
- Instrument HTTP, Kafka, and Temporal tracing with OpenTelemetry.
- Define unit, contract, replay, gateway simulation, and load‑testing strategies.
- Review production code, mentor senior engineers, and lead feature‑flagged migrations from legacy systems.
- Use AI coding agents and context engineering to accelerate delivery.
Must-Have Requirements
- 10+ years of engineering experience, including 5+ years building payment systems.
- Domain-driven design: bounded contexts, domain events, and context mapping.
- Expert C# / .NET 8+ skills with continued hands‑on coding.
- Production experience with Temporal or a similar durable workflow engine.
- Production Kafka experience.
- Azure PaaS experience with Azure services or equivalent GCP technologies. (App Service, Cosmos DB, APIM, Key Vault)
- Containerization and running applications in Kubernetes.
- Production experience with idempotency, saga, and reconciliation patterns.
- PCI DSS and tokenization experience.
- OpenTelemetry or APM observability design.
- Proven ability to align multiple teams around shared architecture.
Preferred Technologies & Experience
- Temporal: Nexus, Worker Versioning.
- Cloud: Azure App Service, Cosmos DB, APIM, Key Vault; GCP; multi‑cloud environments.
- Payments: EBT SNAP/WIC, Apple Pay, Google Pay, Aurus, Adyen, Client, Worldpay, Chase, network tokens, DPAN, multi‑capture, marketplace split settlement.
- Engineering: Polly, LaunchDarkly, .NET Aspire, Testcontainers, Mockoon, WireMock.
- Retail & Finance: TLOG, sales audit, general ledger, grocery/omnichannel retail.
- Modern Development: AI coding agents and context engineering.