Red Hat is the world’s leading provider of enterprise open source software solutions, and they are seeking a skilled and motivated Principal Software Engineer to join their Trusted Artifact Signer team. This role involves product engineering responsibilities, contributions to open-source projects, and mentoring team members while ensuring the security and compliance of their product.
Responsibilities:
- Actively engage with and drive contributions within the upstream open-source communities relevant to the Red Hat Trusted Artifact Signer (RHTAS) project and Post Quantum Computing. This involves undertaking new development work, conceptualizing and implementing innovative features, and addressing and resolving bug fixes reported by users or identified internally
- Proactively participate in community discussions, code reviews, and contribute to documentation to ensure a collaborative and thriving ecosystem
- Take shared ownership of the complete lifecycle of the Red Hat Trusted Artifact Signer product. This includes developing new functionalities and enhancements, maintaining the existing codebase for stability and performance, and orchestrating the smooth and timely release of new versions
- Ensure adherence to best practices for software engineering, including thorough testing, version control, and documentation
- Spearhead downstream product efforts, along with the design and implementation of robust CI/CD pipelines for these products
- Ensure the reliable and efficient delivery of production-ready software to customers and internal stakeholders
- Drive the development of new features based on customer requirements and market trends, integrating them seamlessly into the product
- Facilitate and drive cross-product integration efforts between RHTAS and other products within the Red Hat ecosystem
- Collaborate with other engineering teams to understand their product functionalities and requirements, and design interfaces and integration points that ensure interoperability and a cohesive user experience
- Prioritize and ensure the security compliance of the Red Hat Trusted Artifact Signer product
- Conduct regular security assessments, identify potential vulnerabilities, and implement appropriate security measures to protect against threats
- Stay up-to-date on the latest security best practices and compliance requirements and ensure the product adheres to them
- Act as a key advocate for both the community and the product
- Engage in community evangelism through various channels, including writing blog posts, creating demonstrations, and delivering presentations at conferences and events
- Share knowledge, best practices, and the value proposition of RHTAS with the broader community and potential customers
Requirements:
- Familiarity with Post Quantum Cryptography algorithms and methods
- Understanding of cryptographic principles including digital signatures, key lifecycle, certificate management, and robust key management practices
- Proven experience delivering enterprise-grade software solutions
- An understanding of Kubernetes architecture and its ecosystem
- Proficiency in the Go programming language
- Strong production troubleshooting skills and the ability to diagnose and resolve complex issues
- Familiarity with agile development methodologies and practices
- A strong drive for continuous learning and staying up-to-date with the latest technologies
- Effective professional-level English communication skills, both written and verbal
- Expertise in designing and implementing robust CI/CD pipelines
- Experience with the Sigstore upstream project and its architecture
- Proficiency in the Ansible project and its tooling, such as writing playbooks and managing configurations
- Professional experience with Python and/or Node.js