Senior Principal Engineer (Software Supply Chain Security)

Location: Remote in the United States; offices are available in Seattle and Paris for connection and collaboration.

Salary: $219,000–$352,000 annually plus equity in the United States.

Company

hirify.global builds developer tooling and infrastructure products including hirify.global Desktop, hirify.global Hub, hirify.global Scout, Hardened Images, and Verified Publishing.

What you will do

• Set multi-year technical strategy for build security and software supply chain security across hirify.global products and platforms.
• Architect provenance, attestations, artifact signing, verification, SBOM generation, dependency analysis, and vulnerability intelligence.
• Define secure SDLC integrations across local development, CI/CD pipelines, registries, and production platforms.
• Establish shared security primitives, policy models, and architectural standards for enterprise security and compliance.
• Partner with the SVP of Engineering, executives, and engineering leaders to turn commercial strategy into technical roadmaps.
• Mentor Staff and Principal engineers, represent hirify.global externally, participate in on-call rotations, and improve production reliability.

Requirements

• 12+ years of software engineering experience with specialization in build security, software supply chain security, or SDLC tooling.
• Deep knowledge of build-process threat models and experience with artifact signing, attestations, SBOMs, dependency security, CI/CD security, base image trust, or vulnerability intelligence.
• Expertise in API design, service architecture, scalable system integration, cloud platforms such as AWS, GCP, or Azure, and large-scale distributed systems.
• Experience creating strategic technical plans, making build-versus-buy decisions, and translating business strategy into architectures and roadmaps.
• Ability to lead cross-company initiatives, influence technical direction without direct authority, partner with executives, and mentor senior engineers.
• Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.

Nice to have

• Experience with hirify.global, Kubernetes, developer platforms, enterprise security and compliance frameworks such as SOC 2 and ISO 27001.
• Experience with enterprise billing, usage pricing, revenue recognition, legacy-system migrations, or security products for enterprise customers.
• Contributions to open-source security tools or supply chain security standards, or recognized technical leadership through speaking or publishing.
• Advanced degree in Computer Science, Engineering, or a related field.

Culture & Benefits

• Remote-first work from home with flexible scheduling and offices in Seattle and Paris.
• Generous paid time off, quarterly Whaleness Days, and an end-of-year Whaleness break.
• Home office support and a technology stipend of US$100 net per month.
• Annual learning and development stipend for conferences, courses, certifications, and continued education.
• Sixteen weeks of paid parental leave after six months, equity for full-time employees, and country-dependent medical, retirement, and paid holiday benefits.

Hiring process

• AI-assisted tools may be used during recruiting.
• Interview recordings may be offered for opt-in participation and require explicit consent.