Staff Engineer

Your Role

• We are seeking a Staff-level Software Engineer with deep expertise in system security, Kubernetes internals, network security, Linux security, and distributed storage. In this high-impact role, you will be the primary technical driver for building secure-by-default features for the NKP and CN-AOS platforms.
• You will design secure-by-default architectures, develop Kubernetes Custom Resource Definitions (CRDs) and operators, and ensure our Container Storage Interface (CSI) implementations are hardened against modern attack vectors while effortlessly serving enterprise and AI workloads.
• Key Responsibilities.
• Cloud-Native Development: Design and build advanced Kubernetes Controllers, Operators, and CRDs in Golang to natively orchestrate and secure storage workloads.
• Platform Hardening, Network & Container Security:
• Implement and manage Kubernetes Network Policies for micro-segmentation and least-privilege communication.
• Configure and enforce OpenShift Security Context Constraints (SCCs) and Multi-Category Security (MCS).
• Deploy and operate Container Security Operators for continuous vulnerability scanning of running pods and images.
• Build platform functionality for image scanning, signing, and policy enforcement Advanced Cluster Security for runtime threat detection, compliance monitoring, and network policy enforcement.
• Drive platform compliance with CIS benchmarks (Kubernetes and Linux), FIPS, and zero-trust guidelines.
• Distributed Systems Engineering: Tackle complex problems in large-scale distributed systems, focusing on performance, scaling out, and resiliency.
• Technical Leadership: Drive architectural reviews, establish secure coding standards, and mentor junior and mid-level engineers to act as a technical force multiplier.
• What You Will Bring
• Experience: 12+ years of software engineering experience, with at least 3+ years focused on building scalable distributed systems, cloud platforms, or security infrastructure.
• Kubernetes Expertise: Deep expertise in Golang and extensive hands-on experience with Kubernetes internals, building Operators/Controllers, Cluster API (CAPI), NetworkPolicies, SCCs, MCS, and related security primitives.