Qureos Mentor

Tachyon Technologies

We are seeking a senior software engineer to lead the design and implementation of a production-grade Role-Based Access Control (RBAC) system for an open-source ML infrastructure stack using MLRun and Nuclio. This greenfield project will replace a commercial RBAC system with a custom authorization layer that is functionally equivalent, operationally simple, and aligned with enterprise security expectations. The successful candidate will architect and deliver a complete authorization system integrated with our identity provider, MLRun API, and Nuclio API, supporting 75+ active users across multi-cluster, multi-AWS-account deployments.Project Scope &amp; DeliverablesThis is a six-month engagement. The contractor will deliver a production-ready, fully functional RBAC stack, including the following components:1. Authorization Service &mdash; Python/FastAPI Backend<ul><li>Multi-tenant permission management and policy evaluation</li><li>Integration with external identity provider, such as Azure Entra</li><li>OPA/Rego-compatible API endpoints for MLRun and Nuclio</li><li>Session verification and identity resolution through access keys and cookies</li></ul>2. User, Group, and Access Key Management API<ul><li>Full CRUD operations for users, groups, and role assignments</li><li>Audit logging and compliance-ready change tracking</li><li>Cascading delete logic and data integrity safeguards</li></ul>3. Admin UI &mdash; React/TypeScript<ul><li>Clean dashboard for user, group, and permission management</li><li>Bulk import and export support using YAML</li><li>Real-time permission visibility</li></ul>4. Data Persistence and High Availability<ul><li>Multi-AZ and multi-region deployment design for high availability</li><li>Persistent storage layer for audit logs, user state, and configuration</li><li>Performance optimization to minimize authorization-check latency</li></ul>5. MLRun and Nuclio Integration<ul><li>Native integration with the MLRun API for authorization decisions on projects, runs, and artifacts</li><li>Seamless login flow and UI authentication for MLRun and Nuclio</li><li>Token and session management compatible with MLRun request flows</li></ul>6. Documentation and Handoff<ul><li>Operator runbooks and support documentation</li><li>Knowledge transfer sessions with the internal development team</li></ul>Required Skills and Experience<ul><li>5+ years of backend software engineering experience, preferably with Python</li><li>Demonstrable experience designing and implementing authentication, authorization, or other security-critical infrastructure</li><li>Demonstrable experience with Kubernetes production deployments, including multi-cluster architecture, configuration management, and high-availability patterns</li><li>Proficiency with at least one external identity provider, such as Azure Entra, AWS Cognito, Okta, or OIDC</li><li>Proficiency in policy-as-code concepts, with OPA/Rego strongly preferred</li><li>Proficiency with AI-assisted coding tools</li><li>Operational mindfulness, including the ability to design for simplicity, monitoring, and debuggability</li><li>Clear communication, including the ability to explain architecture decisions to both technical and non-technical stakeholders</li></ul>Preferred Qualifications<ul><li>Experience with MLRun or Nuclio</li><li>Experience with multi-cluster deployment patterns across AWS accounts</li></ul>Pay: $70.76 - $80.72 per hourWork Location: Remote

RBAC Python Engineer

Join Tachyon Technologies and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Tachyon Technologies

About Company

RBAC Python Engineer