Principal Software Engineer, Supply Chain Security — Equity

nineDots.io; Greater London; Hybrid; GBP 120,000 - 160,000; Full time

Benefits offered by this job

Equity

Flexible UK working

Health & wellbeing benefits

Generous annual leave

Professional development support

Job summary

nineDots.io is seeking a Principal Software Engineer to lead the Supply Chain Trust effort, building the next generation of provenance for software delivery. You will own greenfield capabilities, shape architecture, and drive security-focused product development for enterprise customers.

You will mentor engineers, define data models for artifact relationships, and deliver scalable ingestion and validation pipelines across CI/CD and artifact registries.

Qualifications

• Deep backend, platform, or security engineering experience in a product environment.
• Proven ability to own complex product capabilities beyond DevOps/SRE.
• Experience designing scalable ingestion pipelines for high-volume, evolving data.
• Strong data modelling for metadata and graph relationships.
• Experience building APIs for enterprise or partner integrations.
• Familiarity with multi-tenant SaaS security, access control, and auditability.

Responsibilities

• Designing and shipping provenance ingestion services for CI/CD systems, artifact registries, signed bundles, and customer-uploaded artifacts.
• Processing provenance and attestation formats including SLSA, in-toto, SBOM attestations, and Sigstore bundles.
• Designing storage models for signed metadata, artifact graphs, build relationships, and downstream usage.
• Building validation engines that verify cryptographic integrity and evaluate attestations against customer trust policies.
• Developing reliable APIs that make provenance data queryable, auditable, and useful.
• Solving high-volume ingestion, storage, performance, and schema-evolution challenges.
• Working with product, customer success, and engineering to turn enterprise security requirements into valuable product capabilities.
• Setting a high standard for security, correctness, observability, and technical decision-making.
• Mentoring engineers through design discussions, documentation, code reviews, and open collaboration.

Skills

Artifact management

Supply chain provenance

Backend engineering

Product ownership

High-volume data pipelines

Data modelling (metadata, graphs)

APIs for enterprise/partners

Security & cryptography

Multi-tenant SaaS security

Communication & collaboration

Education

Tools

Python

AWS

Terraform

Job description

nineDots.io is seeking a Principal Software Engineer to lead the Supply Chain Trust effort, building the next generation of provenance for software delivery. You will own greenfield capabilities, shape architecture, and drive security-focused product development for enterprise customers.

You will mentor engineers, define data models for artifact relationships, and deliver scalable ingestion and validation pipelines across CI/CD and artifact registries.