Staff Software Engineer (Provenance)

Location: Remote first; must be based in Ireland or the United Kingdom, with regular travel to Belfast and occasional travel for team meetings, events, and customers.

Company

hirify.global provides a cloud-native, multi-tenant artifact management and software supply chain security platform supporting more than 30 package formats, vulnerability scanning, and policy enforcement.

What you will do

• Design, implement, and ship a provenance ingestion service for SLSA, in-toto, SBOM attestations, Sigstore bundles, signed bundles, registries, and customer-uploaded artifacts.
• Own storage architecture for signed provenance metadata and model artifact graphs and queryable relationships.
• Build validation capabilities for cryptographic integrity, builder identities, key material, and configurable customer trust policies.
• Deliver documented, versioned, queryable, auditable, and reliable APIs for enterprise customers and internal platform users.
• Prioritize correctness, security, observability, and scalable operation while collaborating with product, customer success, and engineering.
• Mentor colleagues through code reviews, documentation, and technical discussions.

Requirements

• Location: Must be based in Ireland or the United Kingdom and have the right to work independently without sponsorship.
• 5+ years of production backend engineering experience, including end-to-end ownership of at least one complex service.
• Strong Python experience building backend services and data pipelines.
• Experience designing reliable, observable, high-volume ingestion pipelines for varied, schema-evolving payloads.
• Experience with data modelling for signed metadata envelopes, artifact graphs, and queryable relationships.
• Experience building and versioning APIs consumed by external enterprise customers or third-party integrators.
• Experience building or operating multi-tenant SaaS platforms, including data isolation, access control, and audit logging.
• Understanding of SLSA, in-toto, Sigstore, DSSE, attestation packaging and signing, cryptographic verification, ECDSA/RSA, certificate chains, OIDC-based keyless signing, transparency logs, CycloneDX, and SPDX.
• Strong communication skills, collaborative working style, willingness to learn, and comfort making pragmatic delivery trade-offs.

Nice to have

• Familiarity with AWS services including S3, RDS/Postgres, Kinesis, ECS, and Lambda.
• Familiarity with Terraform.

Culture & Benefits

• Remote-first work environment with a Belfast headquarters available for working sessions and team activities.
• Health, dental, and vision insurance, health and well-being benefits, generous annual leave, and flexible family-friendly working policies.
• Professional development support for equipment, training, books, conferences, travel, and certifications.
• Monthly-ish travel may be required for team meetings, with quarterly-ish travel for events and customers.
• Opportunity to work in a trust-centric, collaborative Series B startup building critical software supply chain infrastructure.