Assoc Dir Staff Engineer - Software

The Enterprise Architect for Document Shared Services (DSS) provides end-to-end architectural leadership across eight engineering teams delivering OMFʼs next-generation document platform. The portfolio spans Document Management (Box), Intelligent Document Processing (IDP), Closing Document Generation (PDF/Form), E-Signature, Imaging/Upload, External Sharing/Litigation, GraphQL Subgraph/API, and Observability/Security & Compliance. This senior individual contributor owns the target architecture, platform contracts, guardrails, and rollout patterns that enable low coupling / high cohesion, direct-to-Box ingestion, schema-first GraphQL, and event-driven integration—while meeting OMFʼs security, compliance, resilience, and cost objectives.

Key Responsibilities Set & Evolve Target Architecture for the DSS platform; maintain a living architecture roadmap and migration (strangler) paths from legacy (Mobius, ELF, WebSphere/OpenShift utilities) to cloud-first solutions. Steward Architectural Principles: Direct-to-Box ingestion (no “bucket brigade”): single system of record, immediate visibility, complete audit. Low coupling / high cohesion between pillars (exchange file references & events, not storage details). Contracts-first: Apollo GraphQL subgraph + Kafka/SQS events; additive/backwardcompatible evolution. Managed SaaS first (Box, DocuSign, etc.) to reduce Ops toil and increase reliability; build custom where OMF differentiates. Security by design: Okta RBAC, per-access attribution, watermarking, legal hold, retention, encryption, least privilege. Operability: OpenTelemetry, SLOs, runbooks, blue/green/canary, automated rollback, and cost visibility.

Own Platform Contracts: define and govern GraphQL schemas, event envelopes, error models, versioning strategy; chair contract/design reviews and enforce consumer-driven contracts. Guide Rollouts & Risk Controls: design and enforce Shadow Mode (Box+Mobius) for DMS and Parallel Mode with PDF diffs for DocGen; define readiness gates, rollback/playbooks. Security, Risk & Compliance: partner with Security/Legal/Risk on per-access audit, watermark policy, retention/legal hold, external-sharing governance (outside counsel, HR, vendors). Vendor Strategy & POCs: partner with Product to evaluate managed vendors (DMS, PDF/Form engines, IDP, e-sign); define POC success criteria; integrate winners via platform contracts. Orchestration Boundaries: define BPMN/Camunda seams (stateless services, compensations, idempotency) without coupling pillars to storage. Reference Implementations: produce reusable “golden path” samples (GraphQL resolvers, event consumers, Box upload pattern, watermarking/audit hooks). Mentor & Influence: level up senior engineers and tech leads across eight teams; drive alignment and decisions without direct line authority.

Success Measures (What Good Looks Like) Architecture adoption: target architecture and guardrails are embraced across all eight teams. Stable, evolvable contracts: schemas/events evolve additively; consumers move independently. Safe rollouts: shadow/parallel cutovers with metrics-gated readiness and fast rollback. Operational & business outcomes: improving DORA metrics; reduced upload-to-decision time; fewer resubmissions; faster e-sign turnaround.

Minimum Qualifications 8+ years architecting cloud-native, distributed systems (preferably in financial services or other regulated domains). Deep hands-on experience with one or more: Apollo GraphQL/Federation, event-driven architectures (Kafka/SQS), enterprise DMS/Box (metadata, governance, shared links, legal holds). Strong background in security & compliance: Okta/OIDC, per-access audit & attribution, PII controls, data retention/legal hold, encryption, segregation of duties. Demonstrated expertise authoring ADRs/RFCs, C4/sequence diagrams, schema/event versioning, backward-compatible API design. Proven record leading POCs and integrating managed SaaS platforms at scale. CI/CD & operability: blue/green & canary, OpenTelemetry, SLOs, synthetic monitoring, incident management. Excellent written and verbal communication; able to translate complex designs for executives, product partners, security, and engineering.

Preferred Qualifications Box Platform (folders, metadata, governance, Shield, legal hold) and DocuSign (responsive signing, Connect webhooks). PDF/Form generation (single-template approach, rule engines such as Drools), and IDP/Document AI (neural decomposition/extraction, tamper/fraud signals). BPMN/Camunda orchestration; Okta policy modeling & SCIM; audit/analytics feeds to Snowflake (or similar). Migration experience from legacy Mobius/ELF and on-prem stacks to cloud using strangler patterns. AWS (IAM, ECS/EKS/Lambda, Secrets Manager/Parameter Store, CloudWatch) and costaware architectures.

Day-to-Day Run weekly ar