Tech Lead, Tetra Apps Platform

TetraScience, Inc.; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

TetraScience, Inc. is hiring a Tech Lead for the Tetra Apps platform. You will own technical architecture, drive sprint planning, and collaborate with product teams to deliver scalable, secure cloud-native apps.

This is an individual contributor role focused on design, implementation, and production reliability, partnering with DevOps and security to maintain a robust platform in production.

Qualifications

• 10+ years of professional software engineering experience.
• Experience as technical lead or architect of a multi-tenant platform.
• Hands-on container experience: Docker, ECS, networking, scaling.
• Security engineering focus: IAM, least privilege, tenant isolation.
• Ability to ship, plan, and own architecture reviews.

Responsibilities

• Own the technical architecture of the Tetra Apps platform.
• Design and evolve app proxy, routing, provisioning, authentication, and identity.
• Ensure production readiness with metrics, SLIs/SLOs, and incident runbooks.
• Lead design reviews and write architecture RFCs/decision records.
• Collaborate with DevOps, security, and product teams across AWS/CI/CD.

Skills

Senior engineer

Technical lead

Platform

Docker

ECS

Security

Cloud AWS

Tools

Docker

ECS

AWS

TypeScript

Python

React

IAC/CI/CD

Job description

Who We Are

Who We Are TetraScience is the Scientific Data and AI company building Tetra OS, the operating system for scientific intelligence. We help the world's leading life sciences firms turn fragmented scientific data into AI-native assets and scientific workflows that accelerate discovery, development, and manufacturing. TetraScience's growing ecosystem of strategic partners includes NVIDIA, Databricks, Thermo Fisher Scientific, Snowflake, Google, and Microsoft. In connection with your candidacy, you will be asked to carefully review the Tetra Way letter, authored directly by Patrick Grady, our co-founder and CEO. This letter is designed to assist you in better understanding whether TetraScience is the right fit for you from a values and ethos perspective. It is impossible to overstate the importance of this document and you are encouraged to take it literally and reflect on whether you are aligned with our unique approach to company and team building. If you join us, you will be expected to embody its contents each day.

The Role

The Tetra Apps platform is how scientists, partners, and TetraScience teams build and run containerized applications on Tetra OS. The platform owns except the app itself - packaging and templates, provisioning, routing, identity and authorization boundaries, observability, upgrades, and the developer experience that ties it all together. We are hiring the Tech Lead for this platform. This is a technical lead-level individual contributor seat, not a people-management role. You will be the technical design authority for the Tetra Apps runtime, own sprint and quarterly planning for the team alongside your product partner, and be accountable for what the team commits to, ships, and and operates in production. You will work with the team who own apps infrastructure today, supporting teams in adjacent areas like DevOps and security, and with the product and field teams whose work runs through the platform. You will inherit a production platform with business value, tech debt, and future needs. You will keep that system running, make incremental improvements, and steer it toward an architecture that holds for years.

What You Will Do

Own the technical architecture of the Tetra Apps platform: how applications are developed, packaged, provisioned, routed, authenticated, isolated, observed, upgraded, and retired. App runtime. Design and evolve the app proxy and routing layer, container provisioning and lifecycle on ECS, per-app identities (service accounts, IAM roles, database credentials), and the install, upgrade, and rollback paths that must work in both multitenant cloud and customer-hosted environments. App security. Design security into the platform: tenant and per-user data boundaries; delegated authorization; secrets handling; browser security, and server-side enforcement of approval and install gates. Threat-model a platform that runs external code, including agents. App ops. Own production readiness: metrics and tracing for apps, SLIs and SLOs, alerting, incident runbooks, capacity and cost planning. Partner with DevOps and other platform teams on infrastructure-as-code and multi-tenant deployment. App developer experience. Own the templates, SDKs (TypeScript and Python), CLI, local development loop, and documentation that builders use. Make the correct, secure path the fast path and vice versa. Plan and deliver. Run sprint and quarterly planning with the product manager: scope, estimate, sequence, and hold the line on commitments. Make maintenance and tech-debt paydown visible in the plan and lead ROI discussions. Be the design authority. Lead design reviews, write architecture RFCs and decision records, represent the platform in the weekly architecture review, and raise the bar for the engineers around you through review and pairing. Stay full stack. Ship code and components across TypeScript/Node.js services, React web apps, AWS architecture, client SDKs, and IAC / CI/CD and automation. Support the field directly. Help field engineers and customers build and debug apps in their environments, and turn what you learn into platform improvements.

Requirements

10+ years of professional software engineering, including time as the technical lead or architect of a platform that external teams build on. Shipped and operated a multi-tenant application platform, app hosting/runtime, PaaS, plugin or extension system, or internal developer platform in production with external users. Deep, hands-on container experience: Docker image pipelines, ECS or similar task and service definitions, networking, service discovery, scaling, and cost. Security engineering as a first-class skill: IAM and least privilege, identity propagation, tenant isolation, browser security, secret management. You have secured multi-tenant systems for running untrusted code. Adapted to the AI step change in software development - you ship faster with fewer bugs and avoid both the "no AI" and "waterfall of slop" pitfalls, and you help your te