Staff Engineer

Nutanix; Pune District; Hybrid; INR 4,000,000 - 8,000,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Nutanix is seeking a Staff-level Software Engineer with deep expertise in system security, Kubernetes internals, network and Linux security, and distributed storage. You will be the primary technical driver for secure-by-default features for the NKP and CN-AOS platforms.

You will design secure-by-default architectures, develop Kubernetes CRDs and operators, and ensure CSI implementations are hardened against modern attack vectors while serving enterprise workloads.

Qualifications

• 12+ years of software engineering experience, with at least 3+ years focused on building scalable distributed systems, cloud platforms, or security infrastructure.
• Deep expertise in Golang and Kubernetes internals, building Operators/Controllers, and security primitives.
• Solid understanding of distributed storage concepts and Linux kernel/security fundamentals.
• Experience designing secure-by-default architectures and implementing security controls across platforms.

Responsibilities

• Design secure-by-default architectures and develop Kubernetes CRDs and operators for NKP and CN-AOS platforms.
• Harden Container Storage Interface (CSI) implementations against modern attack vectors.
• Implement and manage security controls including network policies, security contexts, and vulnerability scanning.
• Provide technical leadership, review architecture designs, and mentor junior engineers.

Skills

Golang

Security engineering

Distributed systems

Linux internals

Networking

Education

Bachelor’s or Master’s in Computer Science or related field

Tools

Kubernetes

OpenShift SCCs

Containerd/Docker

Job description

Hungry, Humble, Honest, with Heart.

The Opportunity

We are seeking a Staff-level Software Engineer with deep expertise in system security, Kubernetes internals, network security, Linux security, and distributed storage. In this high-impact role, you will be the primary technical driver for building secure-by-default features for the NKP and CN-AOS platforms.

You will design secure-by-default architectures, develop Kubernetes Custom Resource Definitions (CRDs) and operators, and ensure our Container Storage Interface (CSI) implementations are hardened against modern attack vectors while effortlessly serving enterprise and AI workloads.

About the Team

The NKP (Nutanix Kubertenes Platform) team is building an enterprise-grade management platform for the containerized world. We are developing a fully cloud-native architecture designed to securely deploy, run, and manage Kubernetes clusters seamlessly across any hybrid or multi-cloud environment.

Your Role

We are seeking a Staff-level Software Engineer with deep expertise in system security, Kubernetes internals, network security, Linux security, and distributed storage. In this high-impact role, you will be the primary technical driver for building secure-by-default features for the NKP and CN-AOS platforms.

You will design secure-by-default architectures, develop Kubernetes Custom Resource Definitions (CRDs) and operators, and ensure our Container Storage Interface (CSI) implementations are hardened against modern attack vectors while effortlessly serving enterprise and AI workloads.

Key Responsibilities.

Cloud-Native Development: Design and build advanced Kubernetes Controllers, Operators, and CRDs in Golang to natively orchestrate and secure storage workloads.

Platform Hardening, Network & Container Security:

• Implement and manage Kubernetes Network Policies for micro-segmentation and least-privilege communication.
• Configure and enforce OpenShift Security Context Constraints (SCCs) and Multi-Category Security (MCS).
• Deploy and operate Container Security Operators for continuous vulnerability scanning of running pods and images.
• Build platform functionality for image scanning, signing, and policy enforcement Advanced Cluster Security for runtime threat detection, compliance monitoring, and network policy enforcement.
• Drive platform compliance with CIS benchmarks (Kubernetes and Linux), FIPS, and zero-trust guidelines.
• Distributed Systems Engineering: Tackle complex problems in large-scale distributed systems, focusing on performance, scaling out, and resiliency.
• Technical Leadership: Drive architectural reviews, establish secure coding standards, and mentor junior and mid-level engineers to act as a technical force multiplier.

What You Will Bring

• Experience: 12+ years of software engineering experience, with at least 3+ years focused on building scalable distributed systems, cloud platforms, or security infrastructure.
• Kubernetes Expertise: Deep expertise in Golang and extensive hands-on experience with Kubernetes internals, building Operators/Controllers, Cluster API (CAPI), NetworkPolicies, SCCs, MCS, and related security primitives.
• Storage Fundamentals: Solid conceptual and practical understanding of distributed storage systems (block, file, object), data replication, deduplication, and high availability.
• Systems Engineering: Strong background in Linux OS internals, networking, container runtimes (containerd, Docker), and kernel security modules.
• Education: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field.
• This role combines deep platform engineering with hands‑on security ownership. You will shape how NKP delivers secure, compliant, and production‑grade Kubernetes + storage capabilities at enterprise scale.

Work Arrangement

Hybrid: This role operates in a hybrid capacity, blending the benefits of remote work with the advantages of in‑person collaboration. In locations where our workplace policy applies (i.e. San Jose, Durham, Mexico City, Bangalore, Pune, Hoofddorp, Belgrade, Barcelona, Singapore, Sydney and Tokyo), employees are expected to work onsite a minimum of 3 days per week to foster collaboration, team alignment, and access to in‑office resources. Workplace type may vary based on location and team requirements. Please speak with your recruiter for details. Additional team‑specific guidance and norms will be provided by your manager.