Full-Stack Azure SaaS

The role needs to combine hands-on application development with cloud architecture, SaaS provisioning, NoSQL data modelling, and production operations. Because SaaSApp requires a dedicated deployment for every customer, the candidate should have practical experience building automated single-tenant deployment stamps rather than only maintaining conventional hosted applications.
Job Title
Full-Stack Azure SaaS Engineer
Position Objective
Own the technical architecture and hands-on implementation of SaaSApp’s transition from a hosted application to a serverless SaaS platform. The platform will use a shared SaaS control plane and a dedicated application-and-data deployment stamp for each customer.
This is a hands-on engineering position. The successful candidate must be able to make architecture decisions and implement production-quality React, Node.js, Python, NoSQL, infrastructure-as-code, security, deployment, and monitoring components.
Essential Experience
Minimum 4 years of relevant application-development or cloud-engineering experience.
Previous delivery experience on a similar SaaS, cloud-native, serverless, deployment-stamp, or tenant-isolated application.
Demonstrable ownership of application architecture and implementation, not only infrastructure administration.
Experience moving a conventionally hosted or monolithic system to independently deployable services.
Core Technical Requirements
React
Node.js and TypeScript
Python
Azure Functions and Durable Functions
Azure Cosmos DB for NoSQL
Azure Blob Storage
Azure Service Bus
Azure API Management
Azure Front Door and WAF
Microsoft Entra External ID
Azure Key Vault and managed identities
Application Insights and Log Analytics
Bicep or Terraform
Azure DevOps or GitHub Actions
REST APIs, OAuth 2.0, OpenID Connect, and role-based access control
Event-driven and asynchronous application architecture
Primary Accountabilities
Define the SaaSApp target architecture and technical standards.
Build reusable customer deployment-stamp templates.
Build the central tenant registry and provisioning orchestrator.
Implement automatic customer-instance deployment and validation.
Lead NoSQL document modelling and Cosmos DB partitioning decisions.
Implement case, user, organization, forms, document, and AI-processing services.
Design deployment rings and customer-instance upgrade automation.
Establish tenant isolation at the identity, compute, database, storage, secrets, and monitoring layers.
Implement observability, security, backup, restore, and disaster-recovery controls.
Review code and infrastructure changes for reliability, performance, security, supportability, and cost.
Investigate production failures and improve the architecture based on operational findings.
Maintain architecture decisions, API contracts, deployment procedures, and support runbooks.
Evidence Expected From Applicants
Applicants should be able to describe a comparable project and clearly identify:
The SaaS tenancy model used
Which application and infrastructure components the applicant personally designed or built
How new customers were provisioned
How customer data was isolated
How databases were partitioned or separated
How asynchronous jobs and failures were handled
How customer deployments were upgraded
How monitoring, security, and recovery were implemented
What production issues occurred and how those issues were resolved
Success Indicators
New customer instances can be provisioned consistently through automation.
Customer data and runtime resources remain isolated.
Application deployments can be rolled out through controlled release rings.
APIs and background jobs are observable and safely retryable.
Cosmos DB queries follow defined partitioning and indexing patterns.
Customer documents are securely handled through Blob Storage.
Deployment, upgrade, recovery, and decommissioning processes are documented and repeatable.

Work arrangement
Hybrid