Principal AWS Multi-Tenant SaaS Architect

# Principal AWS Multi-Tenant SaaS Architect **Part-Time | Contract | Remote (United States)** **Company:** Kodaowl, Inc. **Industry:** Cybersecurity | Artificial Intelligence | SaaS **Experience Level:** Senior / Principal **Work Arrangement:** Remote **Employment Type:** Independent Contractor **Commitment:** Approximately 10–15 hours per week, with flexibility based on project milestones ## About Kodaowl Kodaowl is an early-stage cybersecurity technology company developing an AI-native platform that helps organizations transform security data into actionable risk intelligence. Our mission is to help organizations identify, prioritize, and manage cybersecurity risks through intelligent automation, contextual analysis, and continuous security assurance. We are building a scalable, secure, multi-tenant SaaS platform designed to support organizations of different sizes while maintaining strong customer data isolation, reliability, and operational efficiency. ## About the Role We are seeking an experienced, hands-on **Principal AWS Multi-Tenant SaaS Architect** to lead the architecture, deployment, and infrastructure engineering of our cloud-native cybersecurity platform. This is a part-time contract opportunity for an accomplished AWS professional who enjoys building production-ready systems and working directly with an early-stage technology company. The ideal candidate combines deep AWS architecture expertise with practical experience deploying multi-tenant SaaS applications, implementing cloud security controls, automating infrastructure, and optimizing operational costs. This is not a documentation-only architecture role. The selected candidate will actively design, configure, implement, and validate the AWS environment. ## Key Responsibilities ### AWS Architecture and Infrastructure * Design and implement a secure, scalable, cost-efficient AWS architecture. * Establish appropriate AWS account structures, networking, identity management, and security boundaries. * Configure compute, databases, storage, networking, and application delivery services. * Implement infrastructure as code and repeatable deployment processes. * Establish monitoring, logging, backup, and disaster recovery foundations. ### Multi-Tenant SaaS Architecture * Design and implement secure tenant isolation across application, database, and infrastructure layers. * Establish tenant provisioning, configuration, and lifecycle management. * Implement scalable authentication, authorization, and role-based access controls. * Support tenant-specific subscriptions, resource limits, and service entitlements. * Design for future customer growth without unnecessary architectural complexity. ### Application Deployment and Integration * Migrate existing application components from local development into AWS. * Deploy and integrate Python-based backend services, PostgreSQL databases, and web application components. * Implement containerization and automated deployment pipelines. * Establish secure API connectivity, secrets management, and configuration management. * Support reliable application updates with minimal service disruption. ### Scalability and Security * Design infrastructure capable of supporting an initial customer base of approximately 20–100 organizations. * Implement secure, scalable execution of asynchronous workloads and security assessment jobs. * Establish workload isolation, resource controls, and appropriate security boundaries. * Implement AWS security best practices, including least-privilege access, encryption, logging, and network segmentation. * Develop a practical roadmap for high availability, resilience, and enterprise-scale growth. ### Cost Optimization and Operations * Design infrastructure suitable for an early-stage, self-funded company. * Optimize AWS resource utilization and operating expenses. * Establish cost monitoring, budgets, alerts, and resource tagging. * Recommend practical infrastructure improvements as customer adoption increases. * Document the environment and transfer operational knowledge to the internal engineering team. ## Required Qualifications * Extensive hands-on experience designing and deploying production applications on AWS. * Demonstrated experience architecting secure, multi-tenant SaaS platforms. * Strong understanding of AWS networking, IAM, security, compute, storage, and database services. * Experience with Python-based applications and PostgreSQL. * Experience with Docker and containerized application deployment. * Proficiency with infrastructure-as-code technologies such as Terraform, OpenTofu, Pulumi, or AWS CloudFormation. * Experience implementing CI/CD pipelines and automated deployments. * Strong understanding of cloud security, tenant isolation, scalability, and operational resilience. * Ability to independently execute technical work while collaborating with a small engineering team. * Excellent communication, documentation, and problem-solving skills. ## Preferred Qualifications * Experience with AWS ECS, Fargate, EC2, RDS, S3, SQS, CloudWatch, and related services. * Experience deploying FastAPI applications. * Familiarity with cybersecurity platforms, vulnerability management, or security assessment technologies. * Experience implementin