Staff Software Engineer, On-prem

Role overview

Staff-level engineering role owning the architecture of a self-hosted, on-prem endpoint protection platform deployed inside customer-controlled enterprise, government, and regulated environments. The position spans multiple backend teams and shapes how a distributed, mission-critical security system achieves high availability, scalability, and reliability on infrastructure the provider does not directly operate.

Responsibilities

- Own and evolve architecture for the self-hosted platform across backend services, data pipelines, control logic, and customer-shipped deployment topology (containerized microservices on bare metal, delivered as an appliance or OVA) - Set standards for high availability and resilience in customer-controlled deployments, including clustering, replication, failover, consensus or leader election, and graceful degradation - Define scalability and capacity-planning strategies that hold across a wide range of customer hardware and scale, and drive infrastructure cost analysis and optimization - Establish frameworks for performance, observability, and operational excellence in constrained and air-gapped environments - Translate SaaS and cloud-native capabilities into on-prem architecture and refine vaguely specified requirements into robust end-to-end designs - Define coding patterns and standards that span multiple teams - Influence the engineering roadmap, lead medium-to-large cross-team initiatives, mentor staff and senior engineers, and review the work of peers as a cross-team technical authority

Requirements

- Degree in Computer Science or Software Engineering, or equivalent experience, with roughly 8+ years of related experience - Deep hands-on expertise in Go and/or Python across technologies such as PostgreSQL, MongoDB, Redis, Kafka, Docker, and Linux - Extensive experience designing and delivering on-prem, self-hosted, or customer-deployed software, including packaging and lifecycle for appliance, OVA, bare-metal, or containerized deployments - Track record with clustering, sharding, partitioning, load balancing, and capacity planning in customer-controlled environments - Ability to take vaguely specified, complex requirements and create efficient, future-proof end-to-end designs across teams - Experience influencing a roadmap and leading multi-team designs, plus strong communication and mentoring skills

Nice to have

- Security-product experience - Experience evaluating technology trade-offs and infrastructure costs across customer-controlled hardware and restricted or air-gapped environments

Benefits and work setup

- Base salary range of $156,000–$215,000 USD, depending on candidate location - Equity in the form of restricted stock units and an employee stock purchase plan - Flexible time off, paid company holidays and sick time, gender-neutral parental leave, and grandparent leave - Medical, dental, and vision coverage, 401(k) with company match, life and disability insurance, FSAs, EAP, and pre-paid legal support - Wellness coach, wellness or gym reimbursement, fertility coverage, adoption and surrogacy reimbursement, home office allowance, mobile phone reimbursement, and pet insurance