Senior Software Engineer - AI Agents, Backend & Platform
Simbian.AIBuilding core platform infrastructure for a multi-tenant agentic SOC product - agent harness, data service layer, observability, and enterprise auth.
Self-service analytics
- Built and owned a multi-tenant self-service analytics platform end to end, adopted across 100+ customers: Apache Doris, Postgres CDC with p95 lag under 30 seconds, query execution, and the dashboard UI. Rewrote the heaviest legacy aggregations for a 50x p95 improvement and moved that load off the Postgres primary.
- Made arbitrary customer SQL safe using RLS, curated views, column-level policies, and workload groups, resolved per query for each tenant and user. Customers can build queries, charts, dashboards, and alerts without reading outside their grant or starving another tenant's workloads.
- Built an LLM agent that authors widget SQL and runs cross-table investigations from natural language. Moved AI observability onto Doris, replacing Langfuse and ClickHouse, so traces, tool calls, token costs, and integration health are queryable and alertable in one place.
- Built the PostgreSQL-to-Doris CDC pipeline with monitoring and alerting for data freshness and pipeline failures.
Data service & integrations
- Built the vendor-agnostic, plug-and-play data layer that is the agent's hands and eyes: alert ingestion across 50+ integrations (CrowdStrike, Splunk, Palo Alto), processing ~50K alerts/day with 10–50 tools/alert, log search, enrichment, and response actions. Built these clients on one resilient integration layer for shared exception handling, retries, rate limiting, and later agent tool conversion, with customer-extensible MCP tools.
- Integrations are the critical path of every investigation, yet failures used to collapse into opaque errors. Surfaced first-class exceptions and a standardised error taxonomy shared across all integrations, so customers see exactly why something failed and oncall, notifications, and alerting run off one consistent signal.
Agent harness
- Worked on tool execution, permissioning, provider-specific prompt caching, and skills to enable customer-specific workflows. Reduced cost 10x and investigation time 3x with a ~95% prompt-cache hit rate.
Across the platform
- Enterprise auth & access control - Built multi-tenant AuthN/AuthZ for 10+ enterprise customers: SAML/Okta SSO, email OTP/password login, hierarchical RBAC with customisable roles, AuditLogs with sensitive-data redaction, database schemas and query optimisations, external API, and security-vulnerability fixes. Also shipped real-time i18n middleware (AWS Translate).
- Database reliability - Cut Postgres CPU load by 30% and improved p95/p99 latency ~20x by diagnosing a misordered composite index through production query-plan analysis.
- User comms & case management - Built case management across Teams, Jira, and Slack: auditable ticket-based cases, reminders, escalations, action triggers, and inline user context gathering.
PythonDjangoFastAPIPydanticPostgreSQLTypescriptReactApache DorisStrandsMCPLangfuseClickhouseKafkaDebeziumOpenTelemetryOpenSearchPGVector