Expert Engineer (CI/CD)

Location: Remote in the US; up to 5% travel may be required; minimum 25Mbps consumer-grade broadband connection required.

Base salary: $229,500–$260,000 annually; additional equity may be available.

Company

hirify.global is a remote cybersecurity product company developing NodeZero, a platform for autonomous penetration testing and security assessment operations across internal, external, cloud, and hybrid cloud environments.

What you will do

• Design and own the CI/CD pipeline that builds NodeZero container images from source into signed and scanned distribution artifacts.
• Define image hardening, vulnerability scanning, signing, verification, and security compliance strategies.
• Design OTA delivery infrastructure with the OTA Services team, including reliable rollouts, rollback, delta delivery, and version pinning.
• Set standards for reproducible builds, artifact versioning, release gating, and release engineering across the Client Platform team.
• Write code, create architecture designs, make cross-team technical decisions, and mentor P4 and mid-level engineers through design and code review.
• Own build and release infrastructure operations, including on-call support for pipeline failures, build-time regressions, and delivery incidents.

Requirements

• 8+ years of professional software engineering experience, with deep specialization in build systems, CI/CD, or release engineering for containerized applications.
• Expert-level Docker and container image construction knowledge, including multi-stage builds, base image selection, layer optimization, and image hardening.
• Experience with container image signing and verification using Cosign, Notary, or an equivalent tool, and image scanning using Trivy, Grype, Snyk, or an equivalent toolchain.
• Strong experience building and operating CI/CD pipelines at scale using GitHub Actions, GitLab CI, Tekton, or equivalent technologies.
• Deep understanding of Kubernetes, including how images are pulled, versioned, and updated in running clusters.
• Experience designing and operating OTA or remote update systems, including rollout strategies, delta delivery, version negotiation, and rollback.
• Proficiency in Go, Python, or shell scripting sufficient to build and maintain pipeline tooling.
• Experience with artifact registries such as ECR, GCR, Docker Hub, or Harbor, and artifact lifecycle management.
• Experience setting engineering standards adopted by other engineers, producing clear architecture documents, driving technical decisions across team boundaries, and mentoring mid-level engineers through design and code review.

Nice to have

• Experience with secure software supply chain practices, including SLSA, SBOM generation, and provenance attestation.
• Cybersecurity background or experience building software for sensitive customer environments, including on-premises, air-gapped, or regulated environments.
• Experience with Helm chart packaging and Kubernetes operator patterns.
• Familiarity with eBPF or kernel-level tooling relevant to containerized security software.

Culture & Benefits

• Remote-first and 100% remote work environment.
• Culture focused on respect, collaboration, ownership, results, inclusion, and continuous learning.
• Health, vision, and dental coverage for employees and families.
• Flexible vacation policy and generous parental leave.
• Career development opportunities, competitive compensation, and possible stock options.