Expert Engineer (OTA Services)

Location: US, Remote; fully remote with up to 5% travel required and a minimum 25 Mbps consumer-grade broadband connection.

Base salary: $229,500–$260,000 annually; additional equity may be available.

Company

hirify.global is a remote cybersecurity company developing NodeZero, a platform for autonomous penetration testing and security assessment across internal, external, cloud, and hybrid cloud environments.

What you will do

• Design and own the NodeZero over-the-air update system, including delivery protocols, version negotiation, rollout orchestration, health verification, and automatic rollback.
• Manage deployment fleet state across thousands of customer environments, including running, pending, and stalled versions.
• Design phased rollouts, canary deployments, customer pinning, and emergency hold mechanisms.
• Build reliable delivery mechanisms for air-gapped networks, strict egress policies, and minimal-footprint deployments.
• Own reliability and incident response for delivery failures, stuck updates, and version drift.
• Mentor P4 engineers through architecture and code reviews, technical pairing, and complex delivery decisions while collaborating with the Image Build & Release team.

Requirements

• 8+ years of professional software engineering experience with deep specialization in distributed systems, remote update systems, or fleet management infrastructure.
• Deep understanding of remote update system design, including delivery protocols, version negotiation, delta delivery, health verification, and rollback semantics.
• Experience designing rollout strategies for software deployed across heterogeneous, customer-managed production environments.
• Strong proficiency in Go, Python, or Rust for systems-level infrastructure work.
• Experience building software for constrained or air-gapped environments.
• Deep understanding of Kubernetes deployment management, updates, and monitoring in running clusters.
• Experience with container image distribution, including OCI artifacts, image manifests, layer caching, and registry protocols.
• Strong understanding of mTLS, certificate lifecycle management, and secure channel establishment for update delivery.
• Track record of setting engineering standards for protocol design, reliability requirements, and distributed-systems testing.
• Ability to produce architecture documents and drive technical decisions across team boundaries.
• Experience mentoring mid-level engineers through design and code review.

Nice to have

• Experience with Kubernetes operators or controller patterns.
• Background in cybersecurity or experience building software for regulated or high-security environments.
• Familiarity with Fleet or similar open-source fleet management tools and understanding when custom infrastructure is preferable.
• Experience with signed artifact delivery and end-to-end chain-of-custody verification.

Culture & Benefits

• Remote-first, 100% remote work environment with an inclusive and collaborative culture.
• Culture focused on respect, ownership, learning, creativity, and results.
• Health, vision, and dental coverage for employees and families.
• Flexible vacation policy and generous parental leave.
• Career development opportunities and potential stock option eligibility.