Role Overview

Software Engineer at PostQode owning production agentic systems: multi-tenant isolation, a tool-calling shopping agent, and supply-chain-hardened Azure delivery.

Key Deliverables

Two-layer tenancy (Prisma + SQL Server RLS) on 35 of 100 models; CI blocks unscoped queries across 61 routes.
Eva: SSE tool-calling agent, 21 RBAC-gated tool groups, PII scrubbing, citations, 2,000+ line golden evals in CI.
Zero-trust Azure: Front Door, APIM, VNet isolation, private SQL; ARM deploy into buyer subscriptions with rollback; LRU + Redis license checks.
Supply-chain CI: Trivy, SBOM, Notation signing; tenant-scoping, circular-import, and OpenAPI/DB drift invariants across ~232 services.

Technical Approach

Isolation is enforced in the application, the database, and CI. Agents do not ship without evals. The pipeline — scanning, signing, rollback — is part of the product.

Role Overview

Software Engineer at PostQode owning production agentic systems: multi-tenant isolation, a tool-calling shopping agent, and supply-chain-hardened Azure delivery.

Key Deliverables

Two-layer tenancy (Prisma + SQL Server RLS) on 35 of 100 models; CI blocks unscoped queries across 61 routes.
Eva: SSE tool-calling agent, 21 RBAC-gated tool groups, PII scrubbing, citations, 2,000+ line golden evals in CI.
Zero-trust Azure: Front Door, APIM, VNet isolation, private SQL; ARM deploy into buyer subscriptions with rollback; LRU + Redis license checks.
Supply-chain CI: Trivy, SBOM, Notation signing; tenant-scoping, circular-import, and OpenAPI/DB drift invariants across ~232 services.

Technical Approach

Isolation is enforced in the application, the database, and CI. Agents do not ship without evals. The pipeline — scanning, signing, rollback — is part of the product.