Senior Staff Build & Release Architect – Remote

Horizon3.ai; United States; Remote; USD 230,000 - 260,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Innovative Culture

Remote Work

Competitive Compensation

Job summary

Horizon3.ai is a fully remote cybersecurity company delivering the NodeZero platform and autonomous pentest tooling across diverse environments. We seek an Expert Engineer for Image Build & Release to own the build pipeline, image signing, and OTA delivery, mentoring engineers and delivering reliable deployments at scale.

This hands-on role reports to the Client Platform Engineering Manager and collaborates with the OTA Services team to raise automation, reliability, and delivery velocity while

Qualifications

• 8+ years of professional software engineering experience, with deep specialization in build systems, CI/CD, or release engineering for containerized applications.
• Expert-level knowledge of Docker and container image construction — multi-stage builds, base image selection, layer optimization, image hardening
• Experience with container image signing and verification (Cosign, Notary, or equivalent) and image scanning toolchains (Trivy, Grype, Snyk, or equivalent)
• Strong track record building and operating CI/CD pipelines at scale (GitHub Actions, GitLab CI, Tekton, or equivalent)
• Deep understanding of Kubernetes — how images are pulled, versioned, and updated in running clusters
• Experience designing and operating OTA or remote update systems — rollout strategies, delta delivery, version negotiation, rollback
• Proficiency in Go, Python, or shell scripting sufficient to build and maintain pipeline tooling
• Experience with artifact registries (ECR, GCR, Docker Hub, Harbor) and artifact lifecycle management

Responsibilities

• Build Pipeline Architecture: Design and own the CI/CD pipeline that produces NodeZero container images — from source to signed, scanned artifact ready for distribution
• Image Integrity & Security: Define the image hardening, CVE scanning, and signing strategy that ensures NodeZero images meet security and compliance requirements before they ship
• OTA Delivery Infrastructure: Partner with the OTA Services team to design the delivery mechanism that pushes image updates to customer-deployed NodeZero instances reliably and safely — including rollout strategy, rollback, and version pinning
• Release Engineering Standards: Set standards for build reproducibility, artifact versioning, and release gating that the full Client Platform team follows
• Mentorship: Mentor P4 engineers through code review, design review, and architectural pairing; be the person the team turns to when they hit a hard systems problem
• Operational Excellence: Own the build and release infrastructure end-to-end — on-call for pipeline failures, build time regressions, and delivery incidents

Skills

8+ years exp

Docker images

Signing & scanning

CI/CD at scale

Kubernetes

Go language

Python language

Shell scripting

Tools

Cosign/Notary

Trivy/Grype/Snyk

GitHub Actions

GitLab CI

Tekton

ECR/GCR/Harbor

Job description

Horizon3.ai is a fully remote cybersecurity company delivering the NodeZero platform and autonomous pentest tooling across diverse environments. We seek an Expert Engineer for Image Build & Release to own the build pipeline, image signing, and OTA delivery, mentoring engineers and delivering reliable deployments at scale.

This hands-on role reports to the Client Platform Engineering Manager and collaborates with the OTA Services team to raise automation, reliability, and delivery velocity while