Solution Architect

We are looking for an experienced consultant to design a scalable Entitlement Framework for our multi-tenant SaaS platform. The framework should define and standardize how users are granted access and permissions across product features and APIs, both for internal and external stakeholders.

The design must prioritize self-service, configurability, and ease of administration, ensuring that entitlements can be managed with minimal developer intervention while remaining secure, flexible, and future-proof.

Key Responsibilities:

• Assess current entitlement models across products and identify gaps, overlaps, and inefficiencies.
• Define the entitlement framework architecture including roles, permissions, policies, attribute-based access, and governance processes.\
• Design entitlements that support multi-product, multi-tenant, hierarchical, Self service access models .
• Work with product and engineering teams to ensure entitlements integrate with authentication, authorization, and provisioning systems.
• Define standards for granularity of access (feature-level, data-level, workflow-level, UI level, API level ) to balance usability and security.
• Create a roadmap for centralized entitlement management across products. Establish governance policies for entitlement lifecycle management (creation, modification, de-provisioning).
• Define data access policies that ensure integrity, segregation of duties, and tenant isolation.
• Build APIs, middleware, and services enabling dynamic entitlement checks for UI and backend services.
• Ensure entitlements work seamlessly with document access, workflow actions, financial data, and audit logs.

Required Skills & Experience:

• 7+ years of professional experience in full-stack development.
• Strong hands-on expertise with React.js, Node.js, JavaScript/TypeScript.
• Experience building API-level authorization checks and UI feature gating.
• Knowledge of JWT, session management, API gateways, and microservices security.
• Solid understanding of multi-tenant SaaS architectures and data isolation patterns.
• Strong experience in designing Authentication and authorization models (RBAC, ABAC, PBAC).
• Proven track record of designing entitlement frameworks for SaaS products or large-scale enterprise systems with security as paramount.
• Knowledge of OAuth2, SAML2, OIDC, SCIM and related standards.
• Exposure to authorization platforms/tools/frameworks (e.g., OPA, Auth0, Okta, Key cloak Azure AD, Passport JS).
• Previous consulting experience in designing entitlement or access control systems. Understanding of compliance and security requirements (e.g., GDPR, SOC2) in entitlement management.
• Ability to balance business needs vs. technical enforcement in entitlement design. Experience in financial/legal/regulated industries.

Who We Are-

Alphastream.ai envisions a dynamic future for the financial world, where innovation is propelled by state-of-the-art AI technology and enriched by a profound understanding of credit and fixed-income research. Our mission is to empower asset managers, research firms, hedge funds, banks, and investors with smarter, faster, and curated data. We provide accurate, timely information, analytics, and tools across simple to complex financial and non-financial data, enhancing decision-making. With a focus on bonds, loans,financials and sustainability, we offer near real-time data via APIs and PaaS (Platform as a Service) solutions that act as the bridge between our offerings and seamless workflow integration.

To learn more about us: https://alphastream.ai/

What we offer

"At Alphastream.ai we offer a dynamic and inclusive workplace where your skills are valued and your career can flourish. Enjoy competitive compensation, a comprehensive benefits package, and opportunities for professional growth. Immerse yourself in an innovative work environment, maintain a healthy work-life balance, and contribute to a diverse and inclusive culture. Join us to work with cutting-edge technology, and be part of a team that recognizes and rewards your achievements, all while fostering a fun and engaging workplace culture."

How to Apply

Please send your resume and portfolio to hr@alphastream.ai

Disclaimer-

Alphastream.ai is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of all communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.