Technical Lead (Tetra Apps Platform)

TetraScience, Inc.; United States; On-site; USD 190,000 - 230,000; Full time

Benefits offered by this job

Unlimited PTO

Health, Dental & Vision

Life Insurance

401k Savings

Disability Insurance

Equity Program

Job summary

TetraScience, Inc. is seeking a Tech Lead for the Tetra Apps platform to own architecture, tooling, and production operations. You will drive sprint planning with the product partner and act as the design authority for platform components.

You will work with teams across DevOps, security, and field engineering, delivering a secure, scalable multi-tenant runtime and rich developer experience.

Qualifications

• 10+ years of professional software engineering.
• Experience as technical lead or architect of a platform.
• Full-stack proficiency with TS/Node.js, React, and Python.

Responsibilities

• Own the technical architecture of the Tetra Apps platform end-to-end.
• Plan sprint and quarterly work with product partner and ROI focus.
• Lead design reviews, RFCs, and architecture decisions for the platform.
• Ship and operate multi-tenant app hosting and tooling in production.

Skills

TypeScript/Node.js

React

Python

AWS

ECS

Docker

OpenTelemetry

REST/OpenAPI

CI/CD

Multi-tenant architecture

Observability

Tools

CloudFormation

Terraform

KMS

CI/CD tooling

Job description

• The Tetra Apps platform is how scientists, partners, and TetraScience teams build and run containerized applications on Tetra OS
• The platform owns except the app itself - packaging and templates, provisioning, routing, identity and authorization boundaries, observability, upgrades, and the developer experience that ties it all together
• We are hiring the Tech Lead for this platform
• This is a technical lead-level individual contributor seat, not a people-management role
• You will be the technical design authority for the Tetra Apps runtime, own sprint and quarterly planning for the team alongside your product partner, and be accountable for what the team commits to, ships, and and operates in production
• You will work with the team who own apps infrastructure today, supporting teams in adjacent areas like DevOps and security, and with the product and field teams whose work runs through the platform
• You will inherit a production platform with business value, tech debt, and future needs
• You will keep that system running, make incremental improvements, and steer it toward an architecture that holds for years
• Own the technical architecture of the Tetra Apps platform: how applications are developed, packaged, provisioned, routed, authenticated, isolated, observed, upgraded, and retired
• App runtime. Design and evolve the app proxy and routing layer, container provisioning and lifecycle on ECS, per-app identities (service accounts, IAM roles, database credentials), and the install, upgrade, and rollback paths that must work in both multitenant cloud and customer-hosted environments
• App security. Design security into the platform: tenant and per-user data boundaries; delegated authorization; secrets handling; browser security, and server-side enforcement of approval and install gates. Threat-model a platform that runs external code, including agents
• App ops. Own production readiness: metrics and tracing for apps, SLIs and SLOs, alerting, incident runbooks, capacity and cost planning. Partner with DevOps and other platform teams on infrastructure-as-code and multi-tenant deployment
• App developer experience. Own the templates, SDKs (TypeScript and Python), CLI, local development loop, and documentation that builders use. Make the correct, secure path the fast path and vice versa
• Plan and deliver. Run sprint and quarterly planning with the product manager: scope, estimate, sequence, and hold the line on commitments. Make maintenance and tech-debt paydown visible in the plan and lead ROI discussions
• Be the design authority. Lead design reviews, write architecture RFCs and decision records, represent the platform in the weekly architecture review, and raise the bar for the engineers around you through review and pairing
• Stay full stack. Ship code and components across TypeScript/Node.js services, React web apps, AWS architecture, client SDKs, and IAC / CI/CD and automation
• Support the field directly. Help field engineers and customers build and debug apps in their environments, and turn what you learn into platform improvements

Benefits

• Unlimited PTO
• 100% Company Paid Health, Dental & Vision
• Company Paid Life Insurance
• 401k Savings
• Company Paid Disability Insurance
• Equity Program

Security engineering as a first-class skill: IAM and least privilege, identity propagation, tenant isolation, browser security, secret management. You have secured multi-tenant systems for running untrusted codeStrong production experience with AWS: ECS, ALB/NLB, VPC, IAM, KMS, CloudWatch, S3, Lambda. Infrastructure-as-code with CloudFormation or an equivalentDemonstrated API-first design: REST and OpenAPI, versioning, backward compatibility, and clear error contractsRun sprint and quarterly planning for a team, written design docs and migration plans that got followed, and held engineers to commitments through both influence and authorityAdapted to the AI step change in software development - you ship faster with fewer bugs and avoid both the “no AI” and “waterfall of slop” pitfalls, and you help your team and builders on your platform do the sameFull-stack fluency: expert TypeScript/Node.js for backend services and APIs; solid React, ideally with module federation or micro-frontend experience; working Python for SDKs and toolingDeep, hands-on container experience: Docker image pipelines, ECS or similar task and service definitions, networking, service discovery, scaling, and cost10+ years of professional software engineering, including time as the technical lead or architect of a platform that external teams build onObservability skills: OpenTelemetry, SLI/SLO definition, distributed tracingThe judgment to successfully apply AI to production software generation while maintaining correctness, security, and architectural fitShipped and operated a multi-tenant application platform, app hosting/runtime, PaaS, plugin or extension system, or internal developer platform in production with external usersOperated, extended and improved messy, live production systems without breaking existing customersModule federation or micro-frontend architectures and app shellsArtifact registries and package management: publishing, versioning, promotionRegulated or validated environments (GxP, 21 CFR Part 11, SOC 2) and audit readinessOperating software in both vendor-hosted (multi-tenant) and customer-hosted (single-tenant) deployments