Staff Software Engineer: Provenance & Supply Chain Platform

Cloudsmith; United Kingdom; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Equity

Comprehensive health insurance

Professional development budget

Flexible working policies

Generous annual leave

Job summary

Cloudsmith is seeking a Staff Software Engineer to join our Supply Chain Trust team in the UK. This role involves building capabilities for end-to-end traceability in software artifacts, focusing on provenance and attestation. Key responsibilities include designing the ingestion service, owning storage architecture, and validating data. The ideal candidate has over 5 years of experience in backend engineering, especially with Python and AWS. Cloudsmith offers a competitive compensation package, health benefits, and a supportive work environment that values personal growth.

Qualifications

• Experience with SLSA, in-toto, and Sigstore.
• Familiarity with CycloneDX and SPDX.
• Strong experience with Python for backend services.
• Experience designing data ingestion pipelines.

Responsibilities

• Design, implement, and ship the provenance ingestion service.
• Own the storage architecture for signed provenance metadata.
• Build the validation engine for attestation data.
• Deliver well-documented APIs for provenance data.
• Collaborate with product and engineering teams.
• Prioritize correctness, security, and observability.
• Mentor team members through code reviews and knowledge sharing.

Skills

Provenance & Attestation

Cryptographic Foundations

SBOM Formats

Backend Engineering

API Design

Communication

Iterative Delivery

Education

5+ years of production backend engineering

Tools

Python

AWS services

Terraform

Job description

Cloudsmith is seeking a Staff Software Engineer to join our Supply Chain Trust team in the UK. This role involves building capabilities for end-to-end traceability in software artifacts, focusing on provenance and attestation. Key responsibilities include designing the ingestion service, owning storage architecture, and validating data. The ideal candidate has over 5 years of experience in backend engineering, especially with Python and AWS. Cloudsmith offers a competitive compensation package, health benefits, and a supportive work environment that values personal growth.