Staff Software Engineer, OTA Services

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and take ownership of NodeZero’s over-the-air update system, which includes establishing delivery protocols, managing version negotiations, orchestrating rollouts, verifying system health, and implementing automatic rollback procedures.

• Manage systems that track the version status of every NodeZero deployment.

• Create phased rollouts, canary deployments, customer pinning strategies, and emergency hold mechanisms.

• Develop reliable delivery methods for air-gapped networks, adhering to strict egress policies and ensuring minimal-footprint deployments.

• Take full responsibility for the reliability of the OTA system from end to end and be part of the on-call team for addressing delivery failures, stuck updates, and version drift incidents.

• Write production-quality code and create architectural designs.

• Set the technical direction regarding update delivery and version management.

• Mentor P4 engineers through design reviews, code reviews, and technical collaboration.

• Collaborate closely with the Image Build & Release team.

• Report to the Client Platform Engineering Manager.

⛳️ Requirements

• Over 8 years of professional software engineering experience with a strong focus on distributed systems, remote update systems, or fleet management infrastructure.

• In-depth knowledge of remote update system design, encompassing delivery protocols, version negotiation, delta delivery, health verification, and rollback semantics.

• Proven experience in designing rollout strategies for software deployed in diverse, customer-managed environments.

• High proficiency in Go, Python, or Rust programming languages.

• Experience in developing software for constrained or air-gapped environments.

• Comprehensive understanding of Kubernetes.

• Familiarity with container image distribution, including OCI artifacts, image manifests, layer caching, and registry protocols.

• Strong grasp of mTLS, certificate lifecycle management, and secure channel establishment.

• A track record of establishing engineering standards that are adopted by other engineers.

• Capability to produce architectural documentation and influence technical decisions across team boundaries.

• Experience mentoring mid-level engineers through design and code reviews.

• A minimum broadband connection of 25Mbps is required.

• Must be legally authorized to work in the United States.

• Preferred: Experience with Kubernetes operators or controller patterns.

• Preferred: Background in cybersecurity or regulated/high-security environments.

• Preferred: Familiarity with fleet or similar open-source fleet management tools.

• Preferred: Experience with signed artifact delivery and end-to-end chain-of-custody verification.

🏝️ Benefits

• An equity package in the form of stock options may be available.

• Health, vision, and dental care coverage for employees and their families.

• A flexible vacation policy.

• Generous parental leave policies.

• Fully remote work environment in a 100% remote company.

• Opportunities for career development.

• An inclusive and collaborative company culture.

• Up to 5% travel may be required.