Backend Engineer, MSP Partner Portal

Backend Engineer, MSP Partner Portal About the client Our client is a leading global email and collaboration security company. It is building a new engineering team in Medellín to own its partner portal for Managed Service Providers (MSPs): the platform partners use for quoting, contracts, billing and provisioning.

About the role

We are hiring Backend Engineers at Senior and Mid level for this new team, which will take over the MSP partner portal from the systems integrator that runs it today, operate it in production and shape its roadmap. You will report to the Engineering Manager and work daily with colleagues in the United States and Europe.

The stack is a React microfrontend shell in an NX monorepo and a TypeScript/Node backend-for-frontend (BFF) over microservices, hosted on AWS EKS, with Keycloak for identity and integrations with Salesforce Revenue Cloud, Boomi, Net. Suite, Zone. Billing, Snowflake and Avalara.

What you'll do

• Build and maintain the TypeScript/Node BFF layer and the microservices behind the portal.
• Design and implement REST APIs with OpenAPI specifications, including new partner API families and MSP billing APIs.
• Implement secure authentication and authorization: JWT validation, Keycloak OIDC tokens and Redis-backed sessions.
• Work with Integration Engineers on the data flows behind quoting, contracts, usage-based billing and provisioning.
• Write well-tested, observable code (unit and contract tests, logging and metrics) and take part in code review.
• Share production support and on-call for backend services once the team takes over the platform. Level expectations
• Senior (typically 5+ years): leads the design of services and APIs, owns cross-team technical work, mentors others and is a primary on-call owner during the handover.
• Mid (typically 2–5 years): delivers well-scoped features and APIs with guidance, joins after go-live and grows into shared ownership of services and on-call. What success looks like in your first 6 months
• Knowledge transfer complete for the BFF and your assigned services, and you can ship changes to them independently.
• Owning production for those services, including on-call, with runbooks you have written or updated.
• Every backend service has at least two engineers who can change and support it.
• A contribution to the first partner billing API, delivered against an agreed OpenAPI contract. Tech environment TypeScript
• Node.js
• BFF
• Microservices
• REST / OpenAPI
• JWT
• OAuth2 / OIDC
• Keycloak
• Redis
• Docker
• Kubernetes
• AWS EKS
• CI/CD Requirements Required
• Professional experience building backend services with Node.js and TypeScript.
• Strong REST API design and documentation skills using OpenAPI.
• Working knowledge of JWT-based authentication and OAuth2 / OIDC concepts.
• Experience with Redis (sessions or caching) and microservice patterns.
• Good testing habits and experience with CI pipelines and containerized services (Docker, Kubernetes).
• Professional English for daily work with US and European colleagues.

Nice to have

• Experience building billing, usage-metering or partner-facing APIs.
• Familiarity with AWS EKS, Helm or Keycloak.
• Exposure to Salesforce, Net. Suite or Snowflake data.
• Experience taking over and stabilizing an inherited codebase.

Benefits

• Permanent contract (contrato a término indefinido) with all legal benefits
• Competitive salary
• Private health insurance (medicina prepagada)
• Be part of a new engineering team in Medellín from the start
• On-site role in Medellín with parking