Principal Software Engineer – Libraries Platform

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Take charge of the technical strategy for scaling across diverse language ecosystems.

• Establish a versatile and extensible architecture for package indexing, build orchestration, and metadata services.

• Lead the automation of end-to-end CVE remediation, from detection to verified release.

• Oversee agentic/AI-driven security patch generation while defining validation, testing, provenance, and human-checkpoint guardrails.

• Set the technical direction for the platform regarding package indexes, build and packaging pipelines, registry mirrors, and orchestration tools.

• Make decisions on build versus buy and sequencing for supporting .NET, Go, and Rust ecosystems.

• Collaborate with Ecosystem, Platform, Delivery, Sustaining, and Security teams on the platform roadmap.

• Mentor Staff and Senior Engineers, lead design reviews, and create documentation and RFCs.

• Define SLOs and manage incident response and postmortems for significant platform failures.

• Investigate issues related to toolchain, compiler, and dependency resolution that impact pipeline reliability.

⛳️ Requirements

• Over 12 years of experience in designing, building, and operating infrastructure for language ecosystems or developer platforms.

• Principal-level expertise in setting technical direction across multiple teams.

• Direct experience in establishing or significantly enhancing support for a language ecosystem.

• Preferably experienced with .NET/NuGet, Go/modules, or Rust/Cargo.

• Strong proficiency in Go programming language.

• Proven track record of automating manual remediation workflows while incorporating appropriate human checkpoints.

• Extensive experience with CI/CD, agentic pipelines, cloud-native infrastructure, and infrastructure as code.

• Familiarity with Docker/OCI, Kubernetes, Terraform, and GitHub Actions, Argo, Tekton, or similar tools.

• Experience managing infrastructure at scale across diverse ecosystems.

• Ability to diagnose and resolve issues related to toolchain, compiler, and packaging across multiple ecosystems.

• Excellent written communication skills in a remote, distributed environment.

• A principal ownership mindset with the capability to make ecosystem-generalization decisions with limited information.

• Nice-to-have: Knowledge of software supply chain security concepts such as SLSA, SBOMs, sigstore, provenance, attestations, and secure-by-default packaging.

• Nice-to-have: Experience with Linux distributions, packaging, and reproducible build systems like Alpine, Wolfi, Debian, Bazel, CMake, and Ninja.

• Nice-to-have: Familiarity with AI/ML packaging and infrastructure, including PyTorch and TensorFlow in cloud/Kubernetes environments.

• Nice-to-have: Experience leading a platform through a significant increase in automation maturity.

🏝️ Benefits

• Work remotely with opportunities for team meetups.

• Participate in bi-annual destination summits.

• Receive a monthly stipend for coworking spaces, phone, and internet expenses.

• Stock options granted upon hire and promotion.

• Opportunity to participate in secondary offerings.

• 10 years to exercise stock options.

• 100% coverage of health, vision, and dental insurance premiums for employees and their dependents.

• Unlimited flexible time off.

• 18 weeks of paid parental leave for birthing parents.

• 12 weeks of paid parental leave for non-birthing parents.

• Flexible use of parental leave throughout the child's first year.