Overview
What this challenge is about.
Design the multi-tenant model: namespace-per-tenant for compute isolation, per-tenant Postgres schemas inside a shared RDS instance for data, per-tenant S3 prefixes with bucket policies, and tenant-aware authentication via Auth0 organizations. Prototype on an EKS cluster with 50 simulated tenants. Implement: tenant provisioning Helm chart, network policies enforcing per-namespace isolation, resource quotas per tenant tier (free / pro / enterprise), and a tenant-level dashboard in Grafana. Write an isolation analysis covering: noisy-neighbor scenarios, accidental cross-tenant data access vectors, key-management isolation. Deliver Helm charts, Terraform, the isolation analysis (8 pages), and a 5-page SRE runbook for tenant lifecycle operations.
The Brief
What you'll do, and what you'll demonstrate.
Design and prototype a multi-tenant Kubernetes foundation that scales to 5,000 tenants with documented isolation suitable for SOC 2 Type II.
Earning criteria — what you'll demonstrate
- Design tenant isolation across compute, data, and identity layers
- Implement Kubernetes namespace + network-policy isolation correctly
- Reason about multi-tenant operational scaling (5k tenants, not 50)
- Document isolation in a SOC-2-auditor-ready format
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
Careers
Roles this prepares you for.
Real titles. Real skill bridges. Pick the one closest to your trajectory.
Career mappings coming soon.