Staff Software Engineer, Image Build & Release

This is a fully remote position, open to applicants in United States.

📋 Description

• Create and manage the CI/CD pipeline that generates NodeZero container images from source code to finalized, signed, and scanned distribution-ready artifacts.

• Establish strategies for image hardening, CVE scanning, and signing that comply with security and regulatory standards.

• Collaborate with the OTA Services team to devise dependable and secure image-update delivery for customer-deployed NodeZero instances.

• Develop rollout strategies, rollback procedures, and version pinning protocols.

• Set benchmarks for build reproducibility, artifact versioning, and release gating within the Client Platform team.

• Provide mentorship to P4 engineers through code reviews, design evaluations, and architectural collaborations.

• Write code and create architectural designs.

• Take ownership of the build and release infrastructure from start to finish, including on-call duties for pipeline failures, build-time regressions, and delivery issues.

• Report to the Client Platform Engineering Manager and collaborate closely with the OTA Services team.

⛳️ Requirements

• Over 8 years of experience in professional software engineering with a focus on build systems, CI/CD, or release engineering for containerized applications.

• In-depth expertise in Docker and the construction of container images, covering multi-stage builds, base image selection, layer optimization, and image hardening.

• Familiarity with container image signing and verification processes using tools such as Cosign, Notary, or similar alternatives.

• Experience with image scanning tools like Trivy, Grype, Snyk, or equivalent solutions.

• Extensive experience in developing and managing CI/CD pipelines at scale, utilizing GitHub Actions, GitLab CI, Tekton, or other comparable systems.

• Profound knowledge of Kubernetes, particularly with image pulling, version control, and updates within active clusters.

• Experience in designing and managing OTA or remote update systems, including rollout strategies, delta delivery, version negotiation, and rollback processes.

• Proficient in Go, Python, or shell scripting languages.

• Familiarity with artifact registries like ECR, GCR, Docker Hub, or Harbor, alongside artifact lifecycle management.

• Proven ability to establish engineering standards that are embraced by other engineers.

• Capability to create architectural documents and influence technical decisions across different teams.

• Experience in mentoring mid-level engineers through design and code reviews.

• A minimum broadband connection of 25Mbps for consumer-grade internet.

• Legally authorized to work in the United States.

🏝️ Benefits

• Equity package in the form of stock options may be available.

• Comprehensive health, vision, and dental coverage for employees and their families.

• Flexible vacation policy.

• Generous parental leave.

• Options for remote work flexibility.

• Opportunities for career development.

• An inclusive and collaborative work environment.