Software Engineer, Cloud Engineer - Software, DevOps

TL;

DR:
We're seeking an engineer who is passionate about their craft, has a bias for action, a focus on delivering customer value and a collaborative, low-ego approach. If that’s you, you’ll find a supportive community of like-minded people ut Cloudsmith

Cloudsmith is transforming how organizations handle software artifacts and secure their supply chains. As a fully managed multi-tenant Software as a Service (SaaS) platform, we enable organizations to build software better, through best-in-class artifact management and software supply chain security. Our vision is to become the software supply chain itself, powering the future of software delivery.

We are the world's most potent artifact management platform, built by developers for developers. Our platform supports over 30 formats spanning languages, container formats, and operating systems, with enterprise-grade features, including vulnerability and security scanning, world-class policy management and enforcement, and web-scale to handle the Fortune 500. Organizations integrate Cloudsmith as critical infrastructure into their development, deployment, and distribution pipelines, trusting us to protect and accelerate, no matter the scale.

Backed by top-tier investors and on a trajectory toward IPO and beyond, we're building mission-critical infrastructure that powers software delivery for organizations worldwide. We operate at the cutting edge of cloud-native technology, tackling complex distributed systems challenges that directly impact millions of developers. Now is an exciting time to join us as we revolutionize how organizations deliver and secure software and help write the next chapter of our rocketship growth story.

As a Software Engineer on the Supply Chain Trust team, you’ll build the foundations of our security platform. You’ll turn industry-standard security feeds into fast, reliable data pipelines that power policy, trust, and visibility for our customers. Your work will help teams secure their software supply chains and ship with confidence—knowing exactly what software they’re running and where it came from.

We are four teams responsible for building application capabilities and the underlying platform upon which Cloudsmith is founded. We operate in a highly collaborative environment, where people with different skills come together to make things happen. We have a modern approach to CI/CD, deploying several times per day, and we support a global set of customers who are engineers like us.

• Build:
  Build and ship new features for the Enterprise Policy Manager and robust APIs that enhance the Cloudsmith platform.

• Data Ingestion:
  Integrate and maintain high-fidelity security data feeds to drive automated policy enforcement.

• Resilience:
  Help keep our systems fast, reliable, and running smoothly at global scale.

• Collaborate:
  Work closely with teammates from product, design, and customer success to solve complex security problems together.

• Quality:
  Prioritize quality and security through rigorous testing, monitoring, and sustainable engineering habits.

• Growth:
  Participate in code reviews and technical discussions, contributing to our documentation and engineering standards as you grow your expertise in the software supply chain.

We realise that not everyone will have every experience and expertise in every possible thing. Still, if you have many of the following, we might be a great place to progress your career.

• Experience:
  
  2-4 years (or equivalent) of professional experience building, testing, and maintaining complex distributed systems in production.

• Technical Proficiency:
  Strong experience with Python (Django) is preferred; experience with Golang or Rust is a plus. Knowledge of AWS and other services (e.g. Lambda, ECS, Postgres, Clickhouse, S3, Kinesis, Kafka, Terraform).

• Security Domain:
  Interest or familiarity with software supply chain security, vulnerability scanning, or policy-as-code.

• Infrastructure:
  Familiarity with cloud-based infrastructure (AWS), container runtimes, and continuous integration.

• Iterative Delivery:
  You understand the importance…