Staff Software Engineer, Image Build & Release
New
H
Horizon3Cybersecurity
US, RemoteFull-TimeStaff
SalaryBase salary range: $229,500 - $260,000 annually. Additional compensation: This role may also be eligible for an equity package (in the form of stock options).
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of professional software engineering experience
- Required Skills
- DockerPythonKubernetesGoCI/CD
Requirements
- Have 8+ years of professional software engineering experience, with deep specialization in build systems, CI/CD, or release engineering for containerized applications.
- Bring expert-level Docker and container image construction knowledge, including multi-stage builds, base image selection, layer optimization, and image hardening.
- Have experience with container image signing and verification using Cosign, Notary, or equivalent, and image scanning toolchains such as Trivy, Grype, or Snyk.
- Have a track record building and operating CI/CD pipelines at scale using GitHub Actions, GitLab CI, Tekton, or equivalent.
- Understand Kubernetes image pulling, versioning, and updates in running clusters.
- Have experience designing and operating OTA or remote update systems, including rollout strategies, delta delivery, version negotiation, and rollback.
- Be proficient in Go, Python, or shell scripting for building and maintaining pipeline tooling.
- Have experience with artifact registries such as ECR, GCR, Docker Hub, or Harbor, and artifact lifecycle management.
- Have a track record of setting engineering standards adopted by other engineers.
- Be able to produce clear architecture documents and drive technical decisions across team boundaries.
- Have experience mentoring mid-level engineers through design and code review.
- Secure software supply chain practices such as SLSA, SBOM generation, and provenance attestation are a plus; as are cybersecurity or sensitive-environment experience, Helm chart packaging, Kubernetes operator patterns, and eBPF or kernel-level tooling.
Responsibilities
- Design and own the CI/CD pipeline that produces NodeZero container images from source through signed and scanned artifacts.
- Define image hardening, CVE scanning, and signing strategies to meet security and compliance requirements.
- Partner with the OTA Services team to design reliable and safe image delivery to customer-deployed NodeZero instances, including rollout, rollback, and version pinning.
- Set build reproducibility, artifact versioning, and release-gating standards for the Client Platform team.
- Mentor P4 engineers through code reviews, design reviews, and architectural pairing.
- Own build and release infrastructure end-to-end and respond to pipeline failures, build-time regressions, and delivery incidents.
View Full Description & ApplyYou'll be redirected to the employer's site
