Design an enterprise-grade Pricing & Promotions architecture with zero downtime requirements.

Understanding the Core Problem

When interviewing on Pricing & Promotions (in E-commerce & Retail), candidates frequently make the mistake of jumping into implementation details without defining failure domains, throughput SLAs, or data consistency targets.

The interviewer wants to see if you can evaluate architectural trade-offs under real operational load rather than reciting textbook definitions.

Key Architectural Principles & Trade-offs

1. Isolation & Blast Radius: Separate read paths from write paths. Enforce strict timeouts and bulkheads so failure in Pricing & Promotions cannot cascade into upstream services.
2. Backpressure & Queue Sizing: Always bound internal queues and buffer pools. An unbounded queue postpones overload until the heap exhausts and the service crashes.
3. Idempotency & Retry Safety: Ensure every mutation endpoint carries an idempotency token so client retries after network timeouts do not cause duplicate processing.

Production Code & Reference Implementation

// Production-grade pattern for Pricing & Promotions resilient handling
export async function executeWithResilience<T>(
  task: () => Promise<T>,
  retries = 3,
  backoffMs = 100
): Promise<T> {
  let attempt = 0;
  while (attempt < retries) {
    try {
      return await task();
    } catch (err) {
      attempt++;
      if (attempt >= retries) throw err;
      const jitter = Math.random() * 50;
      await new Promise((res) => setTimeout(res, backoffMs * Math.pow(2, attempt) + jitter));
    }
  }
  throw new Error("Execution failed after maximum retries");
}

Seniority Level Calibration

• Mid-Level (L4/L5): Understands basic configuration and standard syntax for Pricing & Promotions, but relies on default timeouts and lacks fail-open isolation strategy.
• Senior (L6): Identifies failure domains, designs exponential backoff with full jitter, and specifies circuit breaker thresholds.
• Staff / Principal (L7+): Addresses cross-datacenter replication lag, cost economics, zero-downtime schema evolution, and org-wide API contract stability.

Real Incident Case Study

Incident #902: Pricing & Promotions Outage under Peak Traffic
Impact: High concurrency caused thread pool exhaustion across 120 API pods, triggering a 90-minute site outage.
Root Cause: Missing connection pool caps and unhedged socket timeouts.
Takeaway: Enforce strict socket connect/read timeouts and circuit breakers on all external dependencies.