Software Engineer, Build and Release

This is a fully remote position, open to applicants in California.

📋 Description

• Take ownership and enhance OpenShell’s CI/CD infrastructure utilizing GitHub Actions, self-hosted Linux amd64/arm64 runners, GPU runners, macOS runners, reusable workflows, gated end-to-end jobs, release canaries, and branch checks designed for developers.

• Construct and fortify multi-architecture release pipelines for GHCR images, Helm OCI charts, Linux and macOS CLI binaries, gateway and sandbox binaries, Python wheels, Debian packages, RPM packages, Homebrew formula generation, and installation scripts.

• Augment release reliability for both rolling development builds and tagged public releases, encompassing version derivation, automatic tagging, checksums, artifact pruning, provenance, artifact attestations, and downstream package publishing.

• Promote reproducible and efficient builds using mise, uv, Cargo, maturin, BuildKit, Docker/Podman, sccache, native amd64/arm64 runners, Zig, osxcross, protobuf code generation, and pinned toolchains.

• Manage the quality gates that determine whether code is safe to merge or release, including Rust/Python checks, license headers, markdown/docs validation, end-to-end label gates, Docker/Podman end-to-end, Kubernetes/Helm end-to-end, GPU end-to-end, and release canary coverage.

• Troubleshoot complex build and release failures across containers, registries, runners, package managers, cross-compilation toolchains, kernel/VM runtime artifacts, and CI cache behaviors.

• Collaborate with platform engineers to simplify the installation and operation of OpenShell across Linux, macOS, Kubernetes, Docker, Podman, GPU environments, and experimental VM/libkrun-based runtimes.

• Consistently enhance CI observability, failure diagnostics, workflow runtime, cache hit rates, artifact traceability, and the developer experience for contributors and maintainers.

⛳️ Requirements

• A minimum of a Bachelor’s degree in Computer Science, Electrical Engineering, or a related technical field, or equivalent experience.

• Over 8 years of substantial engineering experience, demonstrating strong ownership of build, release, CI/CD, developer infrastructure, or systems tooling.

• In-depth experience with GitHub Actions or similar CI systems, including reusable workflows, self-hosted runners, permissions, secrets, workflow gates, matrix builds, artifact handling, and failure diagnosis.

• Proficient Linux systems and shell scripting skills, with the capability to debug build failures at the intersection of OS packages, containers, compilers, linkers, filesystems, and runtime environments.

• Experience in delivering multi-platform artifacts, including container images, Linux packages, macOS artifacts, checksums, installer scripts, and public release assets.

• Familiarity with Rust and Python build ecosystems, including Cargo, cross-compilation, Python wheels, uv, maturin, protobuf generation, and native dependency management.

• Experience with Docker, BuildKit/buildx, container registries, OCI images, Helm charts, Kubernetes deployment/testing processes, and Docker/Podman compatibility issues.

• Strong comprehension of supply-chain security measures: pinned actions, dependency lockfiles, release provenance, artifact checksums, SBOMs, attestations, least-privilege CI permissions, and secret management.

• Ability to assess release risk, maintain pipeline reliability during active development, and communicate effectively regarding whether a release should proceed, pause, or be reverted.

🏝️ Benefits

• Equity

• Benefits