Senior Full-Stack Engineer / Architect for AI-Native Multi-Tenant SaaS Platform

We are looking for a senior full-stack engineer / software architect to help build the foundation of a modern, modular multi-tenant SaaS platform for educational institutions. The platform, Taleem AI CMS, is designed as a collection of independently deployable applications such as Admissions, Alumni, Academics, etc., connected through a shared Base Platform. We have already completed the requirements and system-level architecture/documentation and are now looking for an experienced engineer who can translate this into a production-ready, scalable implementation. Core Architecture The platform will follow an architecture broadly based on: Web / Mobile → API Gateway → Taleem AI CMS Base Platform → Independent Applications The Base Platform will provide: • Multi-tenancy • Centralized Identity • Authentication • SSO • User Management • Application Registry • Subscription & Entitlement Management • Application Discovery & Launch • Tenant Configuration • Notifications / SMTP • Audit & Governance • AI / Automation identity and authorization context Individual applications will remain independent applications with their own backend, frontend and database. For example: • Alumni Application → Alumni DB • Admissions Application → Admissions DB • Academics Application → Academics DB We specifically want to avoid a monolithic CMS where every module shares the same database and exposes functionality unnecessarily. Important Authorization Principle Authentication will be centralized through the Base Platform. However, authorization will be layered: Platform level • Is the tenant entitled to the application? • Does the user have access to the application? Application level • What can the user actually do inside the application? • What roles and permissions does the user have? The application remains the owner of its business authorization and data. AI-Native Development This is a key requirement. We are not looking for traditional development where AI is simply used as a coding assistant. We want the system to be developed using an AI-native engineering approach, where AI is incorporated throughout the development lifecycle: • AI-assisted architecture and implementation • AI-assisted code generation and refactoring • Automated test generation • AI-assisted unit/integration testing • Automated documentation • Code review and quality checks • CI/CD automation • Structured requirements-to-code traceability • AI-friendly APIs and contracts • Automation-ready workflows • Strong observability and auditability • Agent-friendly development practices You should be comfortable working with modern AI coding/development tools such as Cursor, Claude Code, GitHub Copilot, Codex or equivalent AI-native development environments. We care more about how effectively you use AI to improve engineering velocity and quality than about any particular AI tool. What You'll Work On Initially, the focus will be the Taleem AI CMS Base Platform, establishing the foundation that future applications will consume. Key areas include: 1. Multi-tenant architecture 2. Centralized IAM 3. Authentication & SSO 4. User lifecycle management 5. Tenant management 6. Application registry 7. Subscription/entitlement model 8. Application access evaluation 9. Secure application launch/context handoff 10. Tenant configuration 11. Notification infrastructure 12. Audit and governance 13. AI/automation authorization 14. SaaS deployment architecture 15. On-premises deployment considerations 16. Integration contracts for independent applications After establishing the Base Platform, the same architecture will be used to build additional applications, starting with Admissions. We Already Have We are not starting from zero. We already have: • BRD • RSD • Defined BWFs and business workflows • Architecture direction • Completed Alumni Portal • Existing backend/API implementation • Authentication & authorization implementation in the Alumni application • Admin Portal • Alumnus Portal The selected engineer will therefore need to understand and build upon existing work, rather than proposing an entirely different architecture. Ideal Candidate You should be a senior engineer/architect with strong experience in: • Multi-tenant SaaS architecture • IAM / Identity platforms • OAuth 2.0 / OpenID Connect • SSO • RBAC / authorization • API architecture • Microservices/modular architecture • Secure distributed applications • Database isolation strategies • SaaS architecture • On-premises deployment • REST APIs • Modern frontend/backend development • Automated testing • CI/CD Strongly Preferred Experience with: • Education / ERP / CMS platforms • Modular SaaS products • Keycloak, Auth0, Cognito or equivalent IAM platforms • Kubernetes / Docker • Cloud-native architecture • AI-native software development • AI coding agents • Agentic workflows • MCP or similar AI integration patterns • Automated QA/testing What We Expect From You We are looking for someone who can think architecturally as well as code. You should be able to: • Challenge assumptions constructively • Identify architectural risks early • Translate requirements into clean technical designs • Maintain clear separation between platform and applications • Design for security and tenant isolation from the beginning • Build reusable platform capabilities • Avoid unnecessary coupling • Write production-quality code • Build automated tests alongside functionality • Use AI meaningfully throughout development • Document important architectural decisions We are particularly interested in engineers who can explain why they recommend an approach, rather than simply implementing instructions. Deliverables The initial engagement will include: • Technical architecture/design for the Base Platform • IAM/authentication/SSO implementation • Multi-tenant foundation • Tenant and user management • Application registry • Subscription/entitlement management • Application access mechanism • Secure application context/token flow • Common configuration services • Notification foundation • Audit foundation • Automated tests • CI/CD integration • Developer documentation • Integration documentation for future applications Important Please do not apply with a generic proposal. In your proposal, briefly explain: 1. How you would architect centralized IAM + SSO for independently deployable applications. 2. How you would separate authentication, tenant entitlement, application access and application authorization. 3. How you would prevent unnecessary database coupling between applications. 4. How you would approach multi-tenancy for both SaaS and on-premises deployments. 5. Which AI-native development tools/agents you currently use and how you use them in real projects. 6. Provide 1–2 examples of similar SaaS/platform architecture work you have personally implemented. We are looking for a long-term engineering partner, not simply someone to complete isolated tickets.