Interview guides · FloQast
FloQast Software Engineer Interview Guide
FloQast Software Engineer interview guide: reported rounds, questions and how candidates describe the process.
The 60-second brief
As a Software Engineer at FloQast, you are joining a mission-driven team that is fundamentally changing how the accounting industry operates. Whether you are working on the Core Platform, Applications, or Core AI, your work directly empowers over 3,500 world-class accounting teams to automate complex workflows and transition from manual data entry to strategic financial analysis. You are not just writing code; you are building the operating system for the modern accounting department. In this role, you will navigate the intersection of high-growth B2B SaaS demands and the rigorous reliability requirements of the financial sector. You will be expected to act as a "systems thinker," capable of designing scalable, distributed architectures while maintaining the high standards of security and performance that our enterprise customers require.
This guide is scoped to a Software Engineer candidate at FloQast.
Focus areas
- DSA (Data Structures & Algorithms)
- System Design (HLD/LLD)
- Coding Interviews (Live Coding)
The FloQast interview process
FloQast candidates report 4 rounds over 3-5 weeks. The stages below are what candidates describe, not a published process.
Recruiter Screen
Initial discussion to align on your experience and career goals.
What to demonstrate
- Initial discussion to align on your experience and career goals
- Depth in DSA (Data Structures & Algorithms)
How to prepare
- Be able to walk your CV end to end in two minutes, and say why this company specifically.
- Have your salary expectations, notice period and location constraints ready, and ask for the rest of the loop in writing.
Technical Deep-Dives
A series of assessments including live coding and system design discussions.
What to demonstrate
- A series of assessments including live coding and system design discussions
- Depth in DSA (Data Structures & Algorithms)
How to prepare
- Answer aloud and timed: How do you approach designing a multi-tenant authentication and authorization framework for an enterprise application?
- Answer aloud and timed: What are the trade-offs between using event-driven architectures (e.g., Kafka) versus traditional request-response patterns in your previous work?
Behavioral Interviews
Interviews with engineering and cross-functional stakeholders to assess fit.
What to demonstrate
- Interviews with engineering and cross-functional stakeholders to assess fit
- Depth in DSA (Data Structures & Algorithms)
How to prepare
- Prepare three examples from your own work, each with a decision you made and an outcome you can quantify.
- Re-read the description of the behavioral interviews above and write down what you would ask to confirm before it.
Final Leadership Conversations
Final discussions with leadership to evaluate overall fit and alignment.
What to demonstrate
- Final discussions with leadership to evaluate overall fit and alignment
- Depth in DSA (Data Structures & Algorithms)
How to prepare
- Answer aloud and timed: How do you ensure high availability and data consistency in a system that relies on asynchronous workflow orchestration like Temporal?
- Answer aloud and timed: Describe a situation where you had to influence a cross-functional partner (e.g., Product or Security) to change a technical direction.
Where candidates lose points
Show Your Work
When solving a system design problem, communicate your thought process aloud. We care more about how you arrive at a decision than the final answer itself.
Quantify Impact
When discussing past projects, use data. Instead of saying you "improved performance," say "I reduced latency by 30% by implementing X strategy."
Know Our Product
Familiarize yourself with how FloQast helps accountants. Understanding the "accounting transformation" mission will help you answer behavioral questions with more authenticity.
Questions & practice
Track a rolling failure rate per destination for circuit decisions
Easy · sliding window · ring buffer · circuit breaker
The egress service delivers about 1,500 webhooks per second across roughly 40,000 destinations, each call bounded by a 10 second timeout. Maintain, per destination, the failure rate over the trailing 60 seconds so a caller can ask before dispatch whether the circuit should open. Attempts arrive as (destination_id, finished_at_ms, outcome). Requirement: amortised O(1) per attempt, with total memory bounded by the destination count rather than by traffic. Give the structure, its exact memory, and the rule that stops a destination with three attempts from opening a circuit.
Approach
- Name the exact-deque version and then reject it as the default. Holding timestamps and advancing a tail pointer past anything older than now minus 60 seconds is a correct two-pointer window at amortised O(1) per attempt, but its memory tracks in-window traffic, so one destination in a retry storm holds hundreds of thousands of entries while thousands of quiet destinations hold none.
- Use a ring of 60 one-second buckets per destination, each bucket a pair of counters for attempts and failures. On an attempt, advance the ring by the elapsed whole seconds, zeroing at most min(elapsed, 60) buckets, then increment the head. That is amortised O(1) with a fixed footprint per destination.
- State the footprint: 60 buckets times two 4-byte counters is 480 bytes of payload per destination, so 40,000 destinations is roughly 20 to 25 MB with per-entry overhead, bounded by the catalogue rather than by the rate. The cost is granularity, since the oldest bucket ages out in whole seconds, which is far tighter than the decision needs.
- Require a minimum sample before the circuit may open. A destination with three attempts and three failures reads as 100 percent and is not evidence; a floor of roughly 20 attempts in the window makes the ratio meaningful, and below that floor use a run of consecutive failures as the trigger instead.
Follow-up
- The fleet is 30 instances and each sees roughly a thirtieth of a destination's traffic. Where does the rate actually live, and what does a per-instance answer get wrong?
- A destination answers in 9.5 seconds and succeeds. It is not failing but it is consuming your per-destination concurrency. What signal should open the circuit here?
Archive a resource graph without breaking live references or recursing
Medium · graph traversal · topological order · tenant isolation
Resources reference other resources within a tenant; for the largest tenant the reference table holds up to 2,000,000 nodes and 8,000,000 edges. Archiving a resource must archive everything reachable from it that nothing outside the set still references, refuse when a live external referrer exists, and terminate when references form cycles, which they legitimately do. Produce the archive order and the refusal list, targeting O(V+E). Say what stops the traversal crossing a tenant boundary, and why recursion is the wrong control structure at this size.
Approach
- Load the subgraph with the tenant predicate on both endpoints of the edge, not only on the side you started from. Scoping the left table alone is the classic cross-tenant leak: one mis-entered edge then pulls another tenant's resources into the traversal and, worse, into the archive.
- Traverse iteratively with an explicit stack. A 2,000,000-node graph can hold a chain deep enough to exhaust a native stack in the low tens of thousands of frames, and that failure is a process crash rather than an error you can return.
- Treat cycles as data rather than corruption: compute strongly connected components with Tarjan in O(V+E) using its own explicit stack, then condense. The condensation is a DAG, so a topological order over it gives the archive order, and every member of a component archives in one transaction because no order within a cycle is valid.
- Decide refusals with reverse edges. A candidate is archivable only if every in-edge originates inside the candidate set, so build the transpose or count in-degrees restricted to the visited set, and emit each blocked resource with the id of the external referrer, which is the only part of the answer an operator can act on.
Follow-up
- The graph is read in one query and the archive writes a minute later. What can change in between, and how do you make the write safe?
- The candidate set is 400,000 resources. Is that one transaction, and if not, what does a half-finished archive look like to a reader?
Diff a projection against the primary without per-row point reads
Hard · reconciliation · range hashing · throttling
The listing projection has drifted and some rows show a stale version. The primary holds 40,000,000 resource rows across 12,000 tenants while serving 1,200 writes and 14,000 reads per second. The obvious repair, reading each resource row and comparing its version against the projection, is correct and would eventually finish. Explain precisely why it is unacceptable here, then give a diff that finds the differing rows, state its complexity, and make it safe to run against a live primary. Replication lag is usually under 100 ms and is not bounded.
Approach
- Quantify the naive cost rather than calling it slow: 40,000,000 point reads at even 0.5 ms each is over five hours serialised, and the only lever is concurrency, which is exactly what you cannot spend. The primary's pool is sized for the write path, and 40,000,000 random reads evict the buffer cache that sustains the 85 percent cache hit rate, so the audit degrades the system it is auditing.
- Replace random access with one ordered pass per side. Both sides can be read in (tenant_id, resource_id) order, which is a sequential scan on each and a merge join in O(n) time and O(1) memory. For a dense diff that is the whole answer, and it reads the primary once instead of 40,000,000 times.
- For the expected sparse case, compare range hashes instead of rows: partition the key space, compute per range an order-independent aggregate over hash(resource_id, version), compare aggregates, and descend only into ranges that differ. With d differing rows and branching factor B, at most d ranges mismatch per level, so the drill-down examines O(d log_B(n/d)) ranges and reads full rows only in mismatching leaves.
- Aggregate with a sum modulo 2^64 or a multiset hash, never XOR. XOR is order-independent but self-cancelling, so two rows wrong in the same way, or a row duplicated on one side, leave the range aggregate matching and the range is declared clean.
Follow-up
- The diff reports 900 stale rows. How do you decide between patching those rows and rebuilding the projection from resource_revision?
- Same job, but the projection lives in a search index that cannot be scanned in key order. What changes?
Explain your process for choosing between different storage engines or database schemas for a new product feat
Medium · System Design & Strategy
Explain your process for choosing between different storage engines or database schemas for a new product feature.
Approach
- Name the grain you start from and join outward from it.
- Check whether any join is one-to-many before aggregating, or the sums inflate.
- Say which index the query would use, and what makes it unusable.
- Handle the rows that do not match: that is usually the actual question.
Follow-up
- How does the query change if that join becomes one-to-many?
- What happens to this when the table is ten times larger?
Stop tag and share joins from fanning out a page
Medium · join fan-out · semi-joins · many-to-many
resource_tag is (resource_id, tag_id) with PK (resource_id, tag_id); resource_share is (resource_id, shared_with_user_id, permission). The tagged-and-shared listing inner-joins resource to both, filters tenant_id, tag_id = ANY($2) and shared_with_user_id = $3, orders by updated_at DESC and takes 50. Pages come back with fewer than 50 distinct resources and the total in the header is far too high. Explain the row multiplication, rewrite both the page query and the count query so each is correct, and name the index each one needs. PostgreSQL 16.
Approach
- Do the arithmetic against the predicates that are actually there. An inner join emits one row per matching child row, and both joins are filtered: tag_id = ANY($2) admits only the requested tags, shared_with_user_id = $3 admits one user's share rows. So a resource holding three of the requested tags and shared with $3 once yields three rows, not one — the multiplier is its count of matching tags times its share rows for that single user, and that second factor is 1 unless the table admits duplicate (resource_id, shared_with_user_id) pairs. LIMIT 50 then limits rows rather than resources, and COUNT(*) counts pairs — the header is the product, not the population.
- Reject DISTINCT as the fix. It deduplicates after the product has been built, so the planner must materialise and sort the fanned-out set before the LIMIT can apply, and it leaves any SUM or AVG in the same select list wrong.
- Rewrite both filters as semi-joins, keeping resource as the only row source: AND EXISTS (SELECT 1 FROM resource_tag rt WHERE rt.resource_id = r.resource_id AND rt.tag_id = ANY($2)) and the same shape against resource_share. A semi-join stops at the first match per resource and preserves the driving index order, so ORDER BY updated_at DESC, resource_id DESC LIMIT 50 still stops after 50 rows.
- Count with the same predicates and no join at all: SELECT count(*) FROM resource r WHERE r.tenant_id = $1 AND r.status = 'active' AND EXISTS (...) AND EXISTS (...). Nothing multiplies a resource, so the number is the population.
Follow-up
- The filter changes from 'any of these tags' to 'all of these tags'. Rewrite it and state what it costs relative to the ANY form.
- A resource can be shared with the same user twice under different permissions. Does your count change, and should it?
How would you design a highly scalable, distributed data pipeline to handle high-throughput financial transact
Medium · Technical & Architectural Depth
How would you design a highly scalable, distributed data pipeline to handle high-throughput financial transactions?
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
How do you approach designing a multi-tenant authentication and authorization framework for an enterprise appl
Medium · Technical & Architectural Depth
How do you approach designing a multi-tenant authentication and authorization framework for an enterprise application?
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
What are the trade-offs between using event-driven architectures (e.g., Kafka) versus traditional request-resp
Medium · Technical & Architectural Depth
What are the trade-offs between using event-driven architectures (e.g., Kafka) versus traditional request-response patterns in your previous work?
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
How do you balance the need for rapid feature delivery with the long-term goal of reducing technical debt?
Medium · System Design & Strategy
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
How do you ensure high availability and data consistency in a system that relies on asynchronous workflow orch
Medium · System Design & Strategy
How do you ensure high availability and data consistency in a system that relies on asynchronous workflow orchestration like Temporal?
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
Tell us about a time you identified a critical flaw in a system design and how you handled it.
Medium · Behavioral & Leadership
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
Edge instances grow 400 MB per hour until the nightly restart
Hard · memory leak · heap analysis · metric cardinality
Edge API instances start at 700 MB resident and grow about 400 MB/hour; a nightly rolling restart has hidden it for weeks. Growth continues unchanged when request rate halves overnight, p99 degrades in the last hours before an instance is recycled, and heap used immediately after a forced full GC rises monotonically. The service holds no product state. Name the discriminating measurement that separates the plausible causes, give the most likely cause, and give the fix and how you would verify it.
Approach
- Separate resident memory from live heap first, because they fail differently. Resident size can grow from fragmentation, native buffers or thread stacks while the heap is flat; heap used after a full GC rising monotonically is the measurement that says objects are reachable and not being released. You already have it, so this is retention, not fragmentation, and that closes off half the candidate list.
- Use the rate's independence from traffic as the discriminator. Growth that continues at half the request rate rules out per-request objects that are merely slow to collect and points at a structure that grows with distinct values observed rather than with call volume. Write the candidates that have that property: a metrics registry keyed on a high-cardinality label, an unevicted cache, an interner, a per-key lock map.
- Take two heap snapshots an hour apart and diff by retained size, reading the dominator tree, not by allocation count or instance count. Expect one root holding a map with millions of entries, then follow the reference chain to the code that inserts and never removes. Allocation profilers point at churn, which is the wrong signal here.
- The candidate that fits this service is an observability label carrying an identifier, such as a request path recorded before templating so that /v1/resources/48213 becomes its own metric series. That grows with distinct ids seen, is independent of rate, and explains the late p99 degradation, since GC cost rises with the size of the live set.
Follow-up
- Post-GC heap is now flat but resident size still creeps. What are you looking at, and does it matter?
- How would you have detected this before an OOM, given the nightly restart masked the trend?
Suggested practice checklist
Built from the rounds and topics FloQast candidates report.
Day 1 — Map the FloQast loop
- Write out the reported sequence: Recruiter Screen, Technical Deep-Dives, Behavioral Interviews, Final Leadership Conversations.
- For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.
Deliverable: A one-page map of the 4 reported rounds, with the weakest marked.
Day 2 — Work DSA (Data Structures & Algorithms)
- Spend the session on DSA (Data Structures & Algorithms), which FloQast candidates report being tested on.
- Write one worked example in DSA (Data Structures & Algorithms) and time yourself on it.
Deliverable: One timed worked example in DSA (Data Structures & Algorithms).
Day 3 — Work System Design (HLD/LLD)
- Spend the session on System Design (HLD/LLD), which FloQast candidates report being tested on.
- Write one worked example in System Design (HLD/LLD) and time yourself on it.
Deliverable: One timed worked example in System Design (HLD/LLD).
Day 4 — Work Coding Interviews (Live Coding)
- Spend the session on Coding Interviews (Live Coding), which FloQast candidates report being tested on.
- Write one worked example in Coding Interviews (Live Coding) and time yourself on it.
Deliverable: One timed worked example in Coding Interviews (Live Coding).
Day 5 — Answer out loud: Technical & Architectural Depth
- Answer aloud, timed: How would you design a highly scalable, distributed data pipeline to handle high-throughput financial transactions?
- Answer aloud, timed: Describe a time you had to troubleshoot a performance bottleneck in a production MongoDB or AWS environment.
Deliverable: Spoken answers to 2 reported Technical & Architectural Depth question(s), under time.
Day 6 — Answer out loud: System Design & Strategy
- Answer aloud, timed: How do you balance the need for rapid feature delivery with the long-term goal of reducing technical debt?
- Answer aloud, timed: Explain your process for choosing between different storage engines or database schemas for a new product feature.
Deliverable: Spoken answers to 2 reported System Design & Strategy question(s), under time.
Day 7 — Answer out loud: Behavioral & Leadership
- Answer aloud, timed: Describe a situation where you had to influence a cross-functional partner (e.g., Product or Security) to change a technical direction.
- Answer aloud, timed: How do you approach mentoring junior engineers while still maintaining your own high-impact output?
Deliverable: Spoken answers to 2 reported Behavioral & Leadership question(s), under time.
Behavioural preparation
Behavioural rounds judge the decision you made and what it cost.
Describe a time you had to troubleshoot a performance bottleneck in a production MongoDB or AWS environment.
Medium · Technical & Architectural Depth
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
Describe a situation where you had to influence a cross-functional partner (e.g., Product or Security) to chan
Medium · Behavioral & Leadership
Describe a situation where you had to influence a cross-functional partner (e.g., Product or Security) to change a technical direction.
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
How do you approach mentoring junior engineers while still maintaining your own high-impact output?
Medium · Behavioral & Leadership
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?