Enterprise Application Architect

Who we are:

At CitiusTech, we constantly strive to solve the industry's greatest challenges with technology, creativity, and agility. With over 8,500 healthcare technology professionals worldwide, CitiusTech powers healthcare digital innovation, business transformation, and industry-wide convergence for over 140 organizations through next-generation technologies, solutions, and products. We aim to accelerate the transition to a human-first, sustainable, and digital healthcare ecosystem with the world's leading Healthcare and life sciences organizations and our partners.

Our vision:

To inspire new possibilities for the health ecosystem with technology and human ingenuity.

Role: Enterprise Application Architect

Location: Knoxville, TN

Role Summary

• Owns the end-to-end platform architecture and target operating model for a multi-tenant SaaS platform on AWS.
• Sets the reference architecture, guardrails, non-functional requirements (NFRs), architecture decision records (ADRs), technology standards and evolution of roadmap spanning application, data, security, DevSecOps, and cost optimization.
• Partners with business and compliance (HIPAA rules) to ensure scalability, resilience, and auditability.

Key Responsibilities

• Define north star architecture, standards, and reference implementations; maintain roadmaps.
• Define Enterprise Application Integration (EAI) architecture with upstream and downstream enterprise systems such as (but not limited to) TeamWorks/CRM/ITSM/H2/Deputy/Scribe/Gurobi Optimizer.
• Define and maintain multi-tenant SaaS reference architecture (tenant isolation, metadata, routing, billing/chargeback, service quotas).
• Lead architecture reviews, trade-off decisions, and architecture runway for SAFe trains.
• Partner with security/compliance on HIPAA/HITRUST controls by design.
• Work closely with product management, design, and other cross-functional teams to align technical and product roadmaps.
• Provide detail & high-level oversight of overall solution & system architecture, technical direction.
• Establish the microservices architecture for .NET on EKS with Istio (service mesh, mTLS, traffic policies, resiliency patterns, rate limiting).
• Define case management & rules architecture (e.g., Camunda)—modeling state machines, SLAs, timers, and human tasks.
• Govern data architecture: RDS (Aurora Postgres/MySQL), RDS Proxy, Redis/ElastiCache, S3 for DMS, object lifecycle, encryption, partitioning, multi-tenant data isolation strategies (pooled vs silo vs hybrid).
• Drives security & compliance architecture: HIPAA, PHI, IAM boundaries, KMS, TLS, tokenization, audit trails, immutable logs (CloudTrail/Lake, OpenTelemetry).
• Drive Well-Architected (WAF) reviews across SaaS Lens, Modernization, App Migration; define NFR SLOs (availability, latency, RTO/RPO).
• Define observability strategy: tracing, logging, metrics, SLO error budgets, synthetic checks; golden signals.
• Establish DevSecOps blueprint: pipelines, IaC (Terraform/CDK), policies-as-code, SBOM/SCA, container supply chain security.
• Set platform roadmaps for capabilities: email monitoring/response, DMS, scheduling system, auditing, and reporting/analytics.
• Chair Architecture Review Board and ensure adherence to standards via architecture runways and ADRs.
• Govern APIs/microservices, event driven architectures, data mesh, zero-trust, and multi-cloud landing zones.

Required Skills

• 15–22+ years overall, 5+ years as an enterprise/platform architect for SaaS on AWS.
• Deep AWS: EKS, IAM, VPC design, PrivateLink, RDS/Aurora, S3, KMS, CloudTrail, GuardDuty, WAF (service), SNS/SQS/EventBridge, OpenSearch, MSK/Kinesis.
• Kubernetes + Istio production experience (mTLS, gateways, sidecars, traffic policies, retry/breakers).
• Multi-tenant patterns (siloed vs pooled DB schemas, tenant-aware routing, per-tenant encryption keys, tenant throttling).
• .NET microservices, DDD, event-driven architecture, outbox/eSaga patterns.
• BPMN/workflow/rules engines (Camunda), and case management design.
• Security/compliance for healthcare (HIPAA/PHI) and US regulatory understanding for No Surprises Act IDR.
• FinOps/Cost modeling and capacity planning.
• Have know-how and experience working with Azure.

Nice-to-have Certifications

• AWS Certified Solutions Architect – Associate / Professional, CKA/CKS.

Collaboration & Reporting

• Works with: Business, Cloud Solution Architect, Security/Compliance Lead, Product, Platform Eng, SRE, Data/Analytics.

Life at CitiusTech:

We focus on building highly motivated engineering teams and thought leaders with an entrepreneurial mindset, centered on our core values of Passion, Respect, Openness, Unity, and Depth (PROUD) of knowledge. Our success lies in creating a fun, transparent, non-hierarchical, diverse work culture that focuses on continuous learning and work-life balance. Rated by our employees as the Great Place to Work according to the Great Place to Work survey. We offer you a comprehensive set of benefits to ensure that you have a long and rewarding career with us.

Our EVP:

Be You Be Awesome is our EVP and it reflects our continuing efforts to create CitiusTech as a great place to work where our employees can thrive, both personally and professionally. It encompasses the unique benefits and opportunities we offer to support your growth, well-being, and success throughout your journey with us and beyond. Together with our clients, we are solving some of the greatest healthcare challenges and positively impacting human lives. Welcome to the world of Faster Growth, Higher Learning, and Stronger Impact.