Scalable Multi-Tenant Web App Development

I'm in search of a full-stack developer to join me in building a scalable, multi-tenant web application. The project requires expertise in Golang and React for back-end and front-end development, respectively. Ideal Candidate: - Proficient in Golang, JavaScript (React) - Skilled in Cassandra, OKTA - Experience with Docker, Kubernetes - Familiarity with Google Cloud Platform -Apply with Github and sample projects The project entails creating a robust, multi-tenant web application that can handle multiple users with varying requirements. It is imperative that the selected developer is competent in ensuring the application's scalability and reliability. If you have previous experience building similar applications, please don't hesitate to apply. 1. Specific Requirements and Functionalities of the Web Application Authentication & User Management: Users will sign up and log in securely using OKTA for authentication. Each user will be part of a tenant representing their company. Data Collection: Users will input minimal company information, including location, industry, public or private status, and the number of employees. Regulatory Information: Based on the provided data, the application will display a list of applicable regulations. Risk Management: The application will generate potential risks based on user data. The system will suggest appropriate controls from different cybersecurity frameworks (e.g., CIS18, NIST) to mitigate these risks. Users can document and store test results and procedures to verify the effectiveness of the controls. Application-Specific Risks and Controls: Provide risks, controls, and tests tailored to specific applications and regulations. Backend Portal: Admins will use a backend portal to update risks, controls, test instructions, procedures, and associated applications and regulations. The portal will include features for mapping across different regulations. Scalability: The application should be designed to handle multiple tenants, ensuring data isolation and security for each tenant. Responsive Design: The front-end should be user-friendly and responsive, working seamlessly across different devices and screen sizes. Performance and Security: Integration with Cloudflare for enhanced security, performance optimization, and reliable scalability. 2. Preferences Regarding Architecture or Design of the Application Frontend: Use React.js for developing a dynamic and responsive user interface. Backend: Use Golang for building robust and efficient backend services. Database: Utilize DataStax Astra (Cassandra) for scalable and high-performance data storage. Containerization: Employ Docker for containerizing the application components. Orchestration: Use Kubernetes for managing containerized applications and ensuring scalability. CI/CD: Implement CI/CD pipelines using GitHub Actions to automate testing and deployment. Cloudflare: Use Cloudflare for security (DDoS protection, WAF, SSL/TLS encryption), performance optimization (CDN, image optimization), and DNS management. 3. Specific Integrations or Third-Party Services OKTA: For secure tenant-based authentication and user management. GitHub: For version control and collaboration. DataStax Astra: Managed Cassandra database service for data storage. Netlify or Vercel: For hosting and deploying the frontend application. Monitoring and Logging: Prometheus and Grafana for monitoring. The ELK Stack for logging and analysis. Cloudflare: For DDoS protection, CDN, SSL/TLS encryption, load balancing, and traffic analytics. 4. Expected User Base and Their Needs User Base: The primary users will be companies seeking to comply with cybersecurity regulations. This includes companies of varying sizes across different industries. User Needs: Secure Access: Users need to securely access the application using a simple and reliable authentication system. Regulatory Guidance: Users require accurate information on applicable regulations based on their company’s profile. Risk Management: Users need insights into potential cybersecurity risks and corresponding controls to mitigate those risks. Scalability: The application must handle a growing number of tenants and users as the startup scales. User Experience: The application should be intuitive and easy to use, with clear navigation and a responsive design. Performance and Security: Users expect fast load times and secure transactions, which Cloudflare will help provide through its CDN, SSL/TLS encryption, and DDoS protection. Controls Associated with Risks: Users need to understand what controls can mitigate identified risks and how to implement them. Test Results and Procedures: Users may want to verify the effectiveness of controls through testing. The application should allow documenting and storing test results and providing step-by-step procedures for testing controls. Application-Specific Risks and Controls: Users need tailored risks, controls, and test procedures for specific applications and regulations. Backend Portal: Admins need a backend portal to update risks, controls, test instructions, procedures, and mapping across different regulations.