SpotOn: Corporate Software Engineer Interview Guide

The 60-second brief

A Software Engineer at SpotOn: Corporate plays a pivotal role in building and scaling the next generation of financial technology and merchant solutions. SpotOn empowers mid-market and enterprise businesses—ranging from high-volume restaurants to multi-location retail brands—by providing robust Point-of-Sale (POS) systems, secure payment processing, and comprehensive business management tools. As an engineer here, you will directly influence products that process billions of dollars in transactions, requiring your code to be highly performant, secure, and fault-tolerant. The engineering organization at SpotOn operates at a massive scale, tackling complex challenges in distributed systems, real-time data processing, and seamless user experiences.

This guide is scoped to a Software Engineer candidate at SpotOn: Corporate.

Focus areas

• Python
• TypeScript
• Go (Golang)

The SpotOn: Corporate interview process

SpotOn: Corporate candidates report 5 rounds over 4-6 weeks. The stages below are what candidates describe, not a published process.

Recruiter Screen

Initial conversation to align on experience and expectations.

What to demonstrate

• Initial conversation to align on experience and expectations
• Depth in Python

How to prepare

• Be able to walk your CV end to end in two minutes, and say why this company specifically.
• Have your salary expectations, notice period and location constraints ready, and ask for the rest of the loop in writing.

Hiring Manager Conversation

Discussion with the hiring manager to further evaluate fit and role specifics.

What to demonstrate

• Discussion with the hiring manager to further evaluate fit and role specifics
• Depth in Python

How to prepare

• Prepare two projects you led end to end, each with the decision you owned and what it cost.
• Have three questions about the team's roadmap and how success is measured in the first six months.

Technical Assessment

Includes a take-home project or a live technical interview to assess technical skills.

What to demonstrate

• Includes a take-home project or a live technical interview to assess technical skills
• Depth in Python

How to prepare

• Answer aloud and timed: Walk through the high-level and low-level architecture of a URL shortening service like Bitly. How would you handle scaling, caching, and database selection?
• Answer aloud and timed: Design a low-level system component based on a specific merchant workflow, detailing the classes, interfaces, and data models you would use.

Technical Loops

Deep-dive technical discussions with senior engineering staff.

What to demonstrate

• Deep-dive technical discussions with senior engineering staff
• Depth in Python

How to prepare

• Answer aloud and timed: How would you design a robust API layer to sync transaction data between a local POS device and our cloud infrastructure?
• Answer aloud and timed: Explain how you would approach database schema design for a multi-tenant application where data isolation and query performance are critical.

Behavioral Discussions

Conversations focusing on cultural alignment and behavioral fit.

What to demonstrate

• Conversations focusing on cultural alignment and behavioral fit
• Depth in Python

How to prepare

• Prepare three examples from your own work, each with a decision you made and an outcome you can quantify.
• Re-read the description of the behavioral discussions above and write down what you would ask to confirm before it.

Where candidates lose points

Clarify requirements early

Many of our coding and system design prompts are intentionally open-ended. Before writing any code or drawing any diagrams, ask clarifying questions to establish scope, constraints, and scale expectations.

Treat take-homes like production code

If you receive a take-home assessment, do not just make the tests pass. Structure your project clean, include a detailed README.md explaining your architectural choices, write comprehensive unit tests, and handle edge cases gracefully.

Be vocal during pair-programming

Our interviewers want to understand your thought process. Talk through your logic, explain the trade-offs of your chosen approach, and openly discuss any bugs you encounter as you resolve them.

Questions & practice

Write a function that takes an array and returns a new array with all duplicate elements removed.

Medium · Coding & Algorithm Fundamentals

Approach

1. Restate the input: its shape, its size, and what is guaranteed about it.
2. Name the brute-force solution and its complexity before improving on it.
3. Choose the data structure from the access pattern, not from familiarity.
4. State the target complexity and say which constraint rules the naive version out.

Follow-up

• How does this change if the input no longer fits in memory?
• What is the worst case, and how likely is it on real data?

Given a paragraph of text, write an algorithm to count the frequency of each word and return the top results.

Medium · Coding & Algorithm Fundamentals

Approach

1. Restate the input: its shape, its size, and what is guaranteed about it.
2. Name the brute-force solution and its complexity before improving on it.
3. Choose the data structure from the access pattern, not from familiarity.
4. State the target complexity and say which constraint rules the naive version out.

Follow-up

• How does this change if the input no longer fits in memory?
• What is the worst case, and how likely is it on real data?

Explain the concept of closures in JavaScript/TypeScript and write a practical example demonstrating their use

Medium · Coding & Algorithm Fundamentals

Explain the concept of closures in JavaScript/TypeScript and write a practical example demonstrating their use.

Approach

1. Say what the runtime actually does before reasoning about the code.
2. Name what is shared across threads and what owns each piece of state.
3. Identify the window where an invariant is briefly untrue.
4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

• What happens if two callers reach this at the same time?
• Where could this allocate more than you expect?

Implement a basic algorithmic solution to solve a standard string manipulation problem without using built-in

Medium · Coding & Algorithm Fundamentals

Implement a basic algorithmic solution to solve a standard string manipulation problem without using built-in high-level library functions.

Approach

1. Restate the input: its shape, its size, and what is guaranteed about it.
2. Name the brute-force solution and its complexity before improving on it.
3. Choose the data structure from the access pattern, not from familiarity.
4. State the target complexity and say which constraint rules the naive version out.

Follow-up

• How does this change if the input no longer fits in memory?
• What is the worst case, and how likely is it on real data?

Explain how you would approach database schema design for a multi-tenant application where data isolation and

Medium · System Design & Architecture

Explain how you would approach database schema design for a multi-tenant application where data isolation and query performance are critical.

Approach

1. Name the grain you start from and join outward from it.
2. Check whether any join is one-to-many before aggregating, or the sums inflate.
3. Say which index the query would use, and what makes it unusable.
4. Handle the rows that do not match: that is usually the actual question.

Follow-up

• How does the query change if that join becomes one-to-many?
• What happens to this when the table is ten times larger?

Keep soft-deleted accounts from blocking re-registration

Easy · soft delete · unique constraints · engine differences

app_user holds user_id, tenant_id, email CITEXT, password_hash (NULL for SSO principals), email_verified_at, auth_version, status ('invited','active','suspended','deactivated'), created_at, updated_at, deleted_at. Two live accounts for one address inside a tenant must be impossible, but an address freed by a soft delete must be reusable, and the same tenant may delete and re-register it repeatedly. Write the uniqueness DDL for PostgreSQL 16, then the equivalent for MySQL 8 where partial indexes do not exist, and say what each permits once three deleted rows already hold that address.

Approach

1. Start from what is actually unique: not (tenant_id, email), but (tenant_id, email) among live rows. PostgreSQL says that directly — CREATE UNIQUE INDEX app_user_live_email ON app_user (tenant_id, email) WHERE deleted_at IS NULL. A full constraint over the same two columns burns the address permanently the first time someone deletes an account.
2. Keep case-insensitivity in the type or the index, never in the application: CITEXT as given, or UNIQUE (tenant_id, lower(email)) as an expression index where the extension is unavailable. A case-sensitive unique column is exactly how two accounts for one human appear.
3. For MySQL 8 the predicate has to move inside the key: add a discriminator column that is a constant 0 while the row is live and is set to user_id on delete, with UNIQUE (tenant_id, email, deleted_marker). Live rows share the constant and still collide; deleted rows differ from each other and stop colliding.
4. State the NULL variant and its dependency: leaving the marker NULL for deleted rows also works, because a unique index treats NULLs as distinct — true in MySQL, and true in PostgreSQL only under the default NULLS DISTINCT, which PostgreSQL 15 lets you reverse. Check the polarity against the three existing deleted rows: constant-on-live is what preserves the collision you want, and reversing it silently admits duplicate live accounts.

Follow-up

• A deleted account re-registers with the same address the next day. Do the old resource rows follow the new user_id, and how does the API keep the two principals apart?
• How do you honour an erasure request while resource_revision.actor_user_id still references this table?

Walk through the high-level and low-level architecture of a URL shortening service like Bitly. How would you h

Medium · System Design & Architecture

Walk through the high-level and low-level architecture of a URL shortening service like Bitly. How would you handle scaling, caching, and database selection?

Approach

1. Fix the scope first: who calls this, how often, and what they do when it fails.
2. Name the read and write paths separately; they rarely have the same bottleneck.
3. Choose a partition key and say what query it makes expensive.
4. State the consistency you need, and where you are willing to be stale.

Follow-up

• What breaks first when traffic grows ten times?
• How does this behave when that dependency is down for an hour?

Design a low-level system component based on a specific merchant workflow, detailing the classes, interfaces,

Medium · System Design & Architecture

Design a low-level system component based on a specific merchant workflow, detailing the classes, interfaces, and data models you would use.

Approach

1. Fix the scope first: who calls this, how often, and what they do when it fails.
2. Name the read and write paths separately; they rarely have the same bottleneck.
3. Choose a partition key and say what query it makes expensive.
4. State the consistency you need, and where you are willing to be stale.

Follow-up

• What breaks first when traffic grows ten times?
• How does this behave when that dependency is down for an hour?

How would you design a robust API layer to sync transaction data between a local POS device and our cloud infr

Medium · System Design & Architecture

How would you design a robust API layer to sync transaction data between a local POS device and our cloud infrastructure?

Approach

1. Fix the scope first: who calls this, how often, and what they do when it fails.
2. Name the read and write paths separately; they rarely have the same bottleneck.
3. Choose a partition key and say what query it makes expensive.
4. State the consistency you need, and where you are willing to be stale.

Follow-up

• What breaks first when traffic grows ten times?
• How does this behave when that dependency is down for an hour?

p99 jumped on one listing filter while p50 stayed flat

Medium · query planning · composite index · percentiles

After a release that added an owner_user_id filter to the resource listing, p99 rose from 90 ms to 1.9 s while p50 stayed at 40 ms. Traffic and row counts are unchanged. resource carries the index (tenant_id, status, updated_at DESC, resource_id DESC). The new query filters tenant_id and owner_user_id, orders by updated_at DESC, resource_id DESC, and takes 20 rows. On PostgreSQL, explain the shape of the regression, prove it from a query plan, and give the index you would add.

Approach

1. Start from the shape. A flat p50 with a moved p99 means a subset of requests changed cost, not all of them, so the first job is naming the subset. Bucket the endpoint's latency by the tenant's row count; the natural hypothesis is that large tenants are a small share of requests and all of the tail.
2. Get the plan for the new query on a large tenant with EXPLAIN (ANALYZE, BUFFERS). Expect an index scan over the tenant's range, a filter discarding most of it, then a Sort feeding the Limit, possibly reporting Sort Method: external merge Disk. Read actual rows on the scan node, not estimated.
3. Explain why the existing index cannot serve it. A composite B-tree is seekable only as a left prefix, and with no equality predicate on status the scan cannot treat updated_at as an ordering, because rows in the tenant's range are ordered by status first. Everything matching must be read and sorted before LIMIT 20 can apply, so a tenant with 400,000 rows pays 400,000 rows to return 20.
4. Add (tenant_id, owner_user_id, updated_at DESC, resource_id DESC). Equality on the first two columns leaves the index ordered by updated_at within that pair, so the plan becomes an index scan that stops after 20 rows with no Sort node. PostgreSQL can scan a B-tree backwards, so the DESC markers matter only if the two sort columns ever disagree in direction; keeping them explicit documents the order the keyset cursor depends on.

Follow-up

• The endpoint paginates with OFFSET. What does page 500 cost with your index, and what does the keyset version cost?
• How would you have caught this before release, given that a 10,000-row seed database produces the same plan shape at an unnoticeable cost?

Suggested practice checklist

Built from the rounds and topics SpotOn: Corporate candidates report.

Day 1 — Map the SpotOn: Corporate loop

• Write out the reported sequence: Recruiter Screen, Hiring Manager Conversation, Technical Assessment, Technical Loops, Behavioral Discussions.
• For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.

Deliverable: A one-page map of the 5 reported rounds, with the weakest marked.

Day 2 — Work Python

• Spend the session on Python, which SpotOn: Corporate candidates report being tested on.
• Write one worked example in Python and time yourself on it.

Deliverable: One timed worked example in Python.

Day 3 — Work TypeScript

• Spend the session on TypeScript, which SpotOn: Corporate candidates report being tested on.
• Write one worked example in TypeScript and time yourself on it.

Deliverable: One timed worked example in TypeScript.

Day 4 — Work Go (Golang)

• Spend the session on Go (Golang), which SpotOn: Corporate candidates report being tested on.
• Write one worked example in Go (Golang) and time yourself on it.

Deliverable: One timed worked example in Go (Golang).

Day 5 — Answer out loud: Coding & Algorithm Fundamentals

• Answer aloud, timed: Write a function that takes an array and returns a new array with all duplicate elements removed.
• Answer aloud, timed: Given a paragraph of text, write an algorithm to count the frequency of each word and return the top results.

Deliverable: Spoken answers to 2 reported Coding & Algorithm Fundamentals question(s), under time.

Day 6 — Answer out loud: System Design & Architecture

• Answer aloud, timed: Walk through the high-level and low-level architecture of a URL shortening service like Bitly. How would you handle scaling, caching, and database selection?
• Answer aloud, timed: Design a low-level system component based on a specific merchant workflow, detailing the classes, interfaces, and data models you would use.

Deliverable: Spoken answers to 2 reported System Design & Architecture question(s), under time.

Day 7 — Answer out loud: Behavioral & Collaboration

• Answer aloud, timed: Describe a time when you had to work with a globally distributed team. How did you manage communication barriers and differing time zones?
• Answer aloud, timed: Walk me through a complex technical project you led or contributed to significantly. What were the trade-offs you had to make?

Deliverable: Spoken answers to 2 reported Behavioral & Collaboration question(s), under time.

Behavioural preparation

Behavioural rounds judge the decision you made and what it cost.

Describe a time when you had to work with a globally distributed team. How did you manage communication barrie

Medium · Behavioral & Collaboration

Describe a time when you had to work with a globally distributed team. How did you manage communication barriers and differing time zones?

Approach

1. Pick a story where you made the decision, not one where you watched it.
2. State the situation in two sentences and spend the rest on the reasoning.
3. Give the blast radius: what could have broken, and what you measured.
4. Name the disagreement and how you resolved it with evidence.

Follow-up

• What would you do differently if you ran that again?
• How did you know your change caused the improvement?

Walk me through a complex technical project you led or contributed to significantly. What were the trade-offs

Medium · Behavioral & Collaboration

Walk me through a complex technical project you led or contributed to significantly. What were the trade-offs you had to make?

Approach

1. Pick a story where you made the decision, not one where you watched it.
2. State the situation in two sentences and spend the rest on the reasoning.
3. Give the blast radius: what could have broken, and what you measured.
4. Name the disagreement and how you resolved it with evidence.

Follow-up

• What would you do differently if you ran that again?
• How did you know your change caused the improvement?

How do you handle a situation where a recruiter or stakeholder requests a highly compressed timeline for a del

Medium · Behavioral & Collaboration

How do you handle a situation where a recruiter or stakeholder requests a highly compressed timeline for a deliverable?

Approach

1. Pick a story where you made the decision, not one where you watched it.
2. State the situation in two sentences and spend the rest on the reasoning.
3. Give the blast radius: what could have broken, and what you measured.
4. Name the disagreement and how you resolved it with evidence.

Follow-up

• What would you do differently if you ran that again?
• How did you know your change caused the improvement?

Tell me about a time you received constructive feedback on your code or design. How did you incorporate that f

Medium · Behavioral & Collaboration

Tell me about a time you received constructive feedback on your code or design. How did you incorporate that feedback?

Approach

1. Pick a story where you made the decision, not one where you watched it.
2. State the situation in two sentences and spend the rest on the reasoning.
3. Give the blast radius: what could have broken, and what you measured.
4. Name the disagreement and how you resolved it with evidence.

Follow-up

• What would you do differently if you ran that again?
• How did you know your change caused the improvement?