Staff Engineer, Imunify360

This is a fully remote position, open to applicants in Czechia, +3 more countries.

📋 Description

• Take charge of the comprehensive architecture of Imunify360, encompassing agent, server, cloud backends, data flows, and contractual agreements.

• Author and propel ADRs and RFCs for changes that span multiple squads.

• Facilitate the architecture synchronization meetings on Wednesdays and Fridays with the Technical Director.

• Keep a register of technical debt, security/compliance, and uptime risks, assigning owners and deadlines, while securing roadmap funding for high-priority items.

• Address cross-cutting challenges related to agent resource utilization, detection quality, fleet upgrade/release safety, backend scalability and cost, and the transition of critical paths from Python to Go/Rust.

• Establish benchmarks for design reviews, code reviews, testing, observability, and secure software development lifecycle (SDLC).

• Lead or co-lead SEV1/SEV2 incidents, ensuring blameless post-mortems and closure of action items.

• Promote practical AI-enhanced SDLC standards.

• Mentor senior engineers and squad leads to elevate them to staff-level responsibilities.

• Act as a technical bar-raiser during senior and lead hiring processes.

• Represent the engineering team in product and sales discussions, including assessments and feasibility studies.

• Allocate approximately 30–50% of your time to writing production code as an individual contributor.

⛳️ Requirements

• Over 10 years of experience in building and operating production software, with a minimum of 3 years in a Staff/Principal/Tech Lead capacity across multiple teams.

• Extensive production experience in Python, alongside proficiency in at least one of Go or Rust.

• In-depth knowledge of Linux internals: processes, filesystems, networking, kernel interfaces (inotify/fanotify, eBPF or similar), packaging (RPM/DEB), and systemd.

• Proven track record in designing and operating distributed systems at scale: asynchronous backends, queues, databases, caching, and understanding failure modes.

• Experience managing systems that operate on customer machines, such as agents, daemons, or on-premise software, ensuring upgrade safety, backward compatibility, and resource allocations.

• Security-oriented mindset: proficient in threat modeling, secure coding practices, and managing untrusted inputs (files, HTTP traffic, user content).

• Capability to compose clear, concise technical documents and facilitate decision-making in asynchronous, remote teams across various time zones.

• Regular use of AI coding tools such as Cursor, Claude, and MCP-based utilities, with the ability to critically assess their outputs.

• Familiarity with server security, including AV/malware detection, WAF (ModSecurity/Coraza), IDS/IPS, rootkit detection, or CVE/patch management.

• Experience with WordPress and Node.JS web application hosting at scale.

• Machine learning in production for classification/detection, including evaluation and safe model deployment.

• Observability at scale: proficiency with Prometheus, Grafana, Sentry, ClickHouse, or similar tools.

• Ownership of CI/CD processes: GitLab CI, Jenkins, and build systems for multi-distribution packaging.

• Contributions to open-source projects in security or systems tooling.

🏝️ Benefits

• Fully remote work with flexible working hours.

• 24 paid vacation days.

• 10 national holidays.

• Unlimited sick leave.

• Private medical insurance compensation.

• Co-working reimbursement.

• Gym/sports reimbursement.

• Education budget.

• Opportunity to earn rewards for innovative ideas that the company can patent.