Software Engineer

Software Engineer

As a Software Engineer at Defakto Security, you will play a key role in developing and advancing our next-generation SPIFFE implementation focusing on improving how enterprises approach workload identity and security. This position is ideal for those who thrive in a dynamic startup environment and are passionate about building security software from the ground up. We seek candidates ready to contribute to our codebase from day one, leveraging their expertise to drive innovation and maintain high-quality standards in software development.

Key responsibilities include:

• Leading the design and development of a state-of-the-art SPIFFE implementation that integrates a SaaS control plane with on-premise components.
• Innovating and implementing security solutions that simplify the adoption of zero trust architectures and enhance service-to-service communications.
• Writing scalable, secure, and maintainable code, primarily using Go.
• Collaborating closely with the product team to shape the technological roadmap and features.
• Working with a talented engineering team dedicated to redefining secure communications across distributed systems.

Required qualifications include:

• A robust background in systems engineering with a focus on security, distributed systems, or infrastructure development.
• Expertise in Go, with a comprehensive understanding of its ecosystem and tools.
• Demonstrated ability to develop and maintain scalable, production-quality software services.
• Proficiency with modern infrastructure and deployment technologies, including Kubernetes, Docker, containerd.
• Familiarity with cloud infrastructure services (AWS, Azure, GCP).

Preferred skills include:

• Deep understanding of network security models, including zero trust, and familiarity with SPIFFE, SPIRE, PKI, x509, JWT, TLS, and mTLS.
• Experience with workload identity mechanisms and their applications in enterprise environments.
• Knowledge of confidential computing technologies like Intel SGX, AMD SEV, or ARM TrustZone.