Call for Pre Qualified Contractors

Job description

• Objectives of the call

The objective of this call is to:
B.

Data Integrity, Security & Compliance
C.

Event-Driven Payroll Processing with Apache Kafka
D.

Cloud Infrastructure & Deployment (Digital Ocean)
E.

CI/CD for Financial-Grade Software (GitHub Actions)
F.

API Design & Third-Party Integration

• Establish a database of pre-qualified senior technical contractors for rapid mobilization on new and existing projects.
  
  
• Ensure contractors possess deep expertise in modern backend technologies, architecture, and DevOps practices.
  
  
• Engage professionals who can deliver high-quality, scalable, and maintainable code and solutions.
  
  
• Enhance Mediacent Interactive's capacity to tackle complex, large-scale software development initiatives.
  
  
• Foster innovation in software architecture and system design.
  
  
• Strengthen partnerships with contractors who prioritize best practices, security, and efficiency.
  
  
• Provide a transparent and competitive framework for engaging technical talent.
  
  
• Scope of WorkThe Contractor will provide senior-level expertise in Backend Development and Solution Architecture to document the existing payroll master microservice architecture, establish development best practices, and guide the current development team through mentorship and periodic code evaluations.
  
  The scope encompasses the entire software development lifecycle for complex, scalable systems.
  
  The successful contractor will be expected to deliver on the following key areas:
• Payroll Core Engine & Micro services Architecture
• Develop a decoupled micro services architecture for the payroll engine.
  
  
• Build a configurable rules engine for gross-to-net calculations.
  
  
• Implement country-specific logic for taxes, deductions (e.g., Social Security, SHIF), and benefits.
  
  
• Design a flexible data schema to handle varying employee data requirements per country.
  
  
• Ensure fault tolerance and idempotency to prevent processing errors like double-payments.
  
  
• Implement stringent Data Encryption both at rest (using AES-256 in databases) and in transit (using TLS 1.3).
  
  
• Design and implement a robust Role-Based Access Control (RBAC) system with fine-grained permissions to ensure data segregation and compliance (e.g., restricting HR managers to their respective company's data).
  
  
• Structure database schemas and application logic to support comprehensive audit trails, logging every change to sensitive financial data for compliance reporting.
  
  
• Ensure the system architecture adheres to relevant data protection regulations.
  
  
• Utilize Apache Kafka to create an event-driven workflow for the entire payroll run.
  
  
• Develop Kafka Streams applications for real-time validation and aggregation of timekeeping data before calculation.
  
  
• Use Kafka Connect for reliable, scalable integration with external systems (e.g., benefits providers, general ledger software, banking APIs).
  
  
• Architect the infrastructure on Digital Ocean using Infrastructure as Code (Terraform/CloudFormation)
• Containerize all services using Docker and orchestrate with Kubernetes for auto-scaling to handle peak loads during bi-weekly or monthly payroll runs.
  
  
• Design and manage highly available PostgreSQL databases, implementing read-replicas to offload reporting queries and connection pooling (e.g., PgBouncer) for efficient database handling.
  
  
• Configure secure VPC/Network layouts with private subnets for backend services and strict security group rules.
  
  
• Build secure, automated CI/CD pipelines with GitHub Actions that include mandatory security scans (SAST), dependency vulnerability checks, and automated unit/integration tests.
  
  
• Implement a blue-green or canary deployment strategy within the Kubernetes cluster to achieve zero-downtime releases for the payroll platform, which is critical for a 24/7 service.
  
  
• Automate the generation and signing of software bills of materials (SBOMs) for enhanced security transparency.
  
  
• Develop a secure, well-documented RESTful API for front-end clients and potential third-party integrations, following OpenAPI specifications.
  
  
• Implement robust authentication and authorization for all API endpoints using OAuth 2.0.

Requirements
Applicants must provide evidence of the following:
1.

Individual Profile/CV:
Highlighting a minimum of 5+ years of relevant experience in backend software development and solution architecture.

• Key Skills & Competencies:Demonstrable expertise in:
• Apache Kafka
• Backend Development (e.g., , Python, Java, Go)
• Solution Architecture & System Design
• CI/CD (GitHub Actions required)
• Cloud Platforms (AWS and Digital Ocean)
• Evidence of Similar Assignments: A minimum of 3 project references or case studies from the last 5 years.
  
  
• Technical Approach: A brief overview of your development and architectural philosophy.
  
  Submission Instructions Applications, including all required documents, must be submitted in PDF.
  
  Evaluation Criteria Submissions will be evaluated using the following weighted criteria:

Evaluation Criteria
Weight(%)
Profile & Relevant Experience (5+ years)

25%

Technical Skills & Competencies

25%

Past Performance (Case Studies & References)

20%

Technical Approach & Methodology

15%

Cost Competitiveness (Daily/Hourly Rate)

15%

Total
*100%
Minimum Score for Pre-Qualification *
: 70%

Important Notes

• Submission of an application does not guarantee the award of work.
  
  
• Only shortlisted contractors will be contacted.
  
  
• Mediacent Interactive reserves the right to reject or accept any application at its discretion.
  
  
• Contractors will be engaged on a project-by-project basis.
  
  

Required Skill Profession

Other General