Principal Software Engineer, Libraries Platform

This is a fully remote position, open to applicants in Canada.

📋 Description

• Take charge of the technical strategy for scaling across various language ecosystems.

• Create an ecosystem-agnostic and extensible architecture for package indexing, build orchestration, and metadata services.

• Oversee the complete CVE remediation automation process, from detection to verified release.

• Guide the generation of agentic/AI-driven security patches and establish safety protocols.

• Set the technical direction for the platform across package indexes, build and packaging pipelines, registry mirrors, and orchestration tools.

• Make decisions regarding build-versus-buy and sequencing for .NET, Go, and Rust support.

• Collaborate with Ecosystem, Platform, Delivery, Sustaining, and Security teams on the platform roadmap.

• Provide mentorship to Staff and Senior Engineers while leading architectural design reviews.

• Produce documentation and RFCs for platform users.

• Establish SLOs and lead incident response and postmortem analyses.

• Diagnose and resolve issues related to toolchains, compilers, and dependency resolution across ecosystems.

⛳️ Requirements

• Over 12 years of experience in designing, building, and managing infrastructure for language ecosystems or developer platforms.

• Principal-level expertise in setting technical direction across multiple teams.

• Proven experience in establishing or significantly enhancing support for a language ecosystem.

• Ideally, familiarity with .NET/NuGet, Go/modules, or Rust/Cargo.

• Strong expertise in Go programming.

• A successful history of automating manual remediation workflows.

• Extensive experience with CI/CD, agentic pipelines, cloud-native infrastructure, and infrastructure as code.

• Proficient in using Docker/OCI, Kubernetes, Terraform, and tools like GitHub Actions, Argo, Tekton, or similar.

• Experience managing infrastructure at scale across diverse ecosystems.

• Capability to diagnose and address toolchain, compiler, and packaging failures across various ecosystems.

• Exceptional written communication skills in a remote and distributed setting.

• A principal ownership mindset with the ability to make ecosystem-generalization decisions amidst incomplete information.

• Nice to have: a background in software supply chain security, including SLSA, SBOMs, sigstore, provenance, attestations, and secure-by-default packaging.

• Nice to have: knowledge of Linux distributions, packaging, and reproducible build systems such as Alpine, Wolfi, Debian, Bazel, CMake, and Ninja.

• Nice to have: experience with AI/ML packaging and infrastructure, including PyTorch and TensorFlow in cloud/Kubernetes settings.

• Nice to have: experience leading a platform through significant advancements in automation maturity.

🏝️ Benefits

• Flexible & Remote-First Culture: Enjoy remote work with opportunities for team meetups.

• Attend bi-annual destination summits.

• Receive a monthly stipend for coworking spaces, phone, and internet expenses.

• Obtain stock options upon hiring and during promotions.

• Participate in secondary offerings.

• Have 10 years to exercise stock options.

• Benefit from 100% coverage of health, vision, and dental insurance premiums for yourself and your dependents.

• Enjoy flexible time off.

• Access 18 weeks of paid parental leave for birthing parents.

• Access 12 weeks of paid parental leave for non-birthing parents.

• Choose to take parental leave all at once or spread it throughout the child's first year.