Principal Software Architect – Emerging Technologies

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the generator-verifier architecture, where generator agents create changes and verifier agents, automated tests, evaluation suites, SAST/DAST, and policy checks validate those changes.

• Develop agent orchestration patterns for task decomposition, dispatch, sandboxing, and reassembly across the agent array.

• Ensure the security of agent state and credentials using WASM-isolated runtimes and encrypted credential vaults.

• Construct and maintain CI/CD pipelines for a high volume of autonomous agent pull requests.

• Triage, test, and direct agent-generated pull requests while ensuring that human review remains efficient and high-signal.

• Establish eval-driven development practices with measurable acceptance criteria and validation through evaluation suites.

• Manage the security boundary, including in-VPC inference through AWS Bedrock and GovCloud, enforcing least-privilege agent permissions, and implementing NIST 800-53 Rev 5 control mappings.

• Function as the final accountability gate, mandating senior human review before agent-generated code is deployed to production.

• Set engineering standards regarding branching, review protocols, evaluation conventions, and staged deployment practices.

• Maintain the reference implementation utilized by delivery teams.

• Govern graduated autonomy based on the assessed reliability of agents.

• Establish standards that are adopted by all delivery teams within Granicus's AI-native software development lifecycle.

⛳️ Requirements

• Proven experience in architecting systems at scale with a focus on accountability for results.

• Background in distributed systems, CI/CD, and developer-platform with significant operational implications.

• Profound expertise in CI/CD and developer-platform, including testing, staged deployment, rollback, and observability.

• Practical experience in operating LLM agents in production paths, covering orchestration, tool usage, sandboxing, evaluation, and handling volume-related failure modes.

• Expertise in security architecture, particularly in least-privilege design, secrets management, network boundary enforcement, and threat modeling.

• Demonstrated history of establishing standards that have been embraced by other engineers.

• Capability to serve as an accountability gate without becoming a hindrance.

• Preferred experience in high-assurance security architecture, particularly in designing and defending a security boundary within FedRAMP, FedRAMP High, defense, financial services, or healthcare, along with direct formal-audit experience.

• Fluency in NIST 800-53 Rev 5.

• Experience with AWS Bedrock or GovCloud, maintaining inference and data within a compliance boundary.

• Familiarity with eval-driven development or generator-verifier architectures at leading frontier-model organizations.

• Responsible for preserving the confidentiality, integrity, and availability of Granicus's information assets.

• Accountable for ensuring employee and customer data privacy and completing necessary privacy training.

🏝️ Benefits

• Flexible Time Off

• Company-Wide Wellbeing Days

• Work From Home Reimbursement

• Multiple Health Plan Options, including a 100% employer-paid plan

• Employer HSA Contributions when enrolled in a High-Deductible Health Plan

• Fitness Reimbursement Program

• On-Demand Mental Health Support, including Headspace and other wellness tools

• Paid Parental Leave for birthing and non-birthing parents

• Traditional & Roth 401(k) with a generous company match

• Life & AD&D Insurance with 100% employer-paid coverage

• Online Learning Platforms

• Competitive Salary & Bonuses

• Employee Resource Groups

• Coffee with Mark sessions

• Microsoft Teams communities focused on wellness, art, furbabies, family, parenting, and more

• Special guest discussions on issues affecting employees