Software Architect

Description:

Company Overview



Cellebrite's mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite's AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite's digital forensic and investigative solutions available via cloud, on-premises and hybrid deployments to close cases faster and safeguard communities.

Position Overview



As the Software Architect for Guardian Investigate (GI), you will own the application architecture of Cellebrite's next-generation digital forensic investigation product. GI is a SaaS application built on top of the Cellebrite SaaS Platform, enabling law enforcement teams to manage cases, analyze digital evidence, collaborate in real-time, and maintain chain-of-custody compliance at scale.

This is a hands-on architecture role: you will set technical direction, run architectural reviews, and build prototypes to de-risk delivery.

Key Responsibilities

• Own the GI Application Architecture: End-to-end ownership of GI's microservices, frontend, and inter-service communication. Define the technical roadmap and ensure architectural coherence.
• Platform Integration: Ensure GI follows Cellebrite SaaS Platform onboarding guidelines and standards, adopting platform-provided authentication, authorization, audit, encryption, and lifecycle hooks.
• Scalability and Performance: Design for petabyte-scale evidence, thousands of concurrent users, and strict response time SLAs while sustaining year-over-year growth.
• Security and Compliance: Ensure the application meets security and compliance requirements, following platform guidelines for encryption, audit, data sovereignty, and evidence integrity.
• AI and Engineering Productivity: Leverage AI tools and vibe coding practices to accelerate development, improve code quality, and drive engineering productivity across the team.
• Event-Driven Design: Own inter-service messaging patterns (Kafka, SQS, SNS) ensuring reliable delivery, observability, and data lineage.
• Cost Optimization: Drive efficient use of databases, search, storage, and compute. Collaborate with platform teams on shared infrastructure efficiency.
• Technical Reviews and Mentorship: Lead design reviews, maintain ADRs, drive consistency through shared libraries, and mentor engineers across teams.
• Technology Evolution: Evaluate and adopt new technologies. Drive migration from legacy Guardian Forensic, ensuring smooth tenant transitions.
• Cross-Team Collaboration: Represent GI in platform-wide architectural discussions. Translate business needs into technical solutions across product, security, and platform teams.

Requirements



Minimum Qualifications

• 8+ years in software engineering building distributed systems, including 3+ years in an architecture spanning multiple teams.
• 4+ years hands-on AWS experience (EKS, Aurora, S3, IAM, KMS).
• 3+ years designing microservices architectures at scale.
• Strong backend engineering background, able to design and review across multiple technology stacks.
• Production experience with PostgreSQL, search engines, and event-driven messaging.
• Experience building applications on a shared SaaS platform, understanding application vs. platform ownership boundaries.

Core Skills & Experience

• Application architecture for multi-tenant SaaS, tenant isolation, data separation, shared platform integration.
• Event-driven architectures in production.
• Security-aware design - authentication, authorization, encryption, and audit logging.
• API design and governance.
• Data modeling, indexing strategies, and data lifecycle management.
• Infrastructure-as-code, Kubernetes/EKS, Helm deployments.
• Frontend architecture awareness.
• Observability and operational excellence.
• Strong communication skills - able to influence engineers, platform teams, and business leaders.
• BS/MS in Computer Science or equivalent experience.

Preferred Qualifications

• Kotlin/JVM experience (Ktor or similar) - GI backend is primarily Kotlin.
• Node.js/TypeScript experience - some GI services use Node.
• React/TypeScript with micro-frontend patterns (Module Federation, Vite).
• Background in digital forensics, cyber security, or law enforcement domains.
• Petabyte-scale storage systems with lifecycle tiering.
• Real-time collaboration.
• FinOps for cloud workloads.
• Large-scale tenant migration experience.
• Hybrid/on-prem or air-gapped deployments for regulated environments.
• Hands-on experience with AI-assisted development (vibe coding, AI code generation, prompt engineering).

What Success Looks Like

• A clear application architecture adopted across GI services, enabling faster delivery and consistent patterns.
• Full compliance with SaaS Platform onboarding guidelines.
• Reliable services meeting production SLAs (99.9% availability, responsive UX).
• Clean integration contracts with platform services, clear ownership boundaries.
• Measurable cost optimization through efficient resource usage.
• High-quality technical leadership that elevates the engineering organization.

Requirements



Minimum Qualifications

• 8+ years in software engineering building distributed systems, including 3+ years in an architecture or tech lead role spanning multiple teams.
• 4+ years hands-on AWS experience, Specific experience with Kubernetes (EKS), infrastructure-as-code (e.g., Terraform), and CI/CD.
• 4+ years designing microservices architectures at scale.
• Strong backend engineering background, able to design and review across multiple technology stacks.
• Production experience with RDS, search engines (OpenSearch/Elasticsearch), and event-driven messaging (Kafka, SNS/SQS or equivalent).
• Understanding of data modeling, data quality, lineage, and building reliable retrieval pipelines and indexing strategies.
• Experience building applications on a shared SaaS platform, understanding application vs. platform ownership boundaries.
• Track record of owning architectural decisions end-to-end and driving adoption through standards and enablement.

Core Skills & Experience

• Application architecture for multi-tenant SaaS, tenant isolation, data separation, shared platform integration.
• Event-driven architectures in production (outbox pattern, pub/sub, CQRS).
• Multi-layered authorization design (platform RBAC + application access control), authentication, encryption, audit logging.
• API design and governance (REST, OpenAPI, versioning, backward compatibility).
• Data modeling, indexing strategies, and data lifecycle management.
• Infrastructure-as-code (Terraform), Kubernetes/EKS, Helm deployments.
• Frontend architecture awareness (SPAs, micro-frontends, module federation).
• Observability and operational excellence (SLOs, monitoring, incident management).
• Strong communication skills, able to influence engineers, platform teams, and business leaders.
• BS/MS in Computer Science or equivalent experience.

Preferred Qualifications

• Kotlin/JVM experience (Ktor or similar), GI backend is primarily Kotlin.
• Node.js/TypeScript experience.
• React/TypeScript with micro-frontend patterns.
• Background in digital forensics, cyber security, or law enforcement domains.
• Real-time collaboration.
• FinOps for cloud workloads.
• Large-scale tenant migration experience.
• Hybrid/on-prem or air-gapped deployments for regulated environments.

What Success Looks Like

• A clear application architecture adopted across GI services, enabling faster delivery and consistent patterns.
• Full compliance with SaaS Platform onboarding guidelines.
• Reliable services meeting production SLAs (99.9% availability, responsive UX).
• Clean integration contracts with platform services, clear ownership boundaries.
• Measurable cost optimization through efficient resource usage.
• High-quality technical leadership that elevates the engineering organization.