Software Engineer

Defakto Security; Palo Alto (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Defakto Security is seeking a Software Engineer to advance our next-generation SPIFFE implementation, focusing on workload identity and secure communications across distributed systems. You will write scalable Go services, design security solutions, and collaborate with product and engineering teams to ship secure, production-grade software in a dynamic startup environment.

Ideal candidates have strong systems engineering background, deep Go expertise, and experience with Kubernetes, Docker, and

Qualifications

• Robust background in security-focused systems engineering.
• Expertise in Go and its ecosystem.
• Experience building scalable, production-grade services.
• Hands-on with Kubernetes, Docker, containerd.
• Familiarity with AWS/Azure/GCP.

Responsibilities

• Lead the design and development of a state-of-the-art SPIFFE implementation that integrates a SaaS control plane with on-premise components.
• Innovate and implement security solutions that simplify the adoption of zero trust architectures and enhance service-to-service communications.
• Write scalable, secure, and maintainable code, primarily using Go.
• Collaborate closely with the product team to shape the technological roadmap and features.

Skills

Go

Distributed systems

Security engineering

Kubernetes

Docker

Cloud platforms (AWS/Azure/GCP)

Tools

containerd

CI/CD tooling

Job description

The role

As a Software Engineer at Defakto Security, you will play a key role in developing and advancing our next-generation SPIFFE implementation focusing on improving how enterprises approach workload identity and security. This position is ideal for those who thrive in a dynamic startup environment and are passionate about building security software from the ground up. We seek candidates ready to contribute to our codebase from day one, leveraging their expertise to drive innovation and maintain high-quality standards in software development.

Key responsibilities

• Lead the design and development of a state-of-the-art SPIFFE implementation that integrates a SaaS control plane with on-premise components.
• Innovate and implement security solutions that simplify the adoption of zero trust architectures and enhance service-to-service communications.
• Write scalable, secure, and maintainable code, primarily using Go.
• Collaborate closely with the product team to shape the technological roadmap and features.
• Work with a talented engineering team dedicated to redefining secure communications across distributed systems.

Required qualifications

• Robust background in systems engineering with a focus on security, distributed systems, or infrastructure development.
• Expertise in Go, with a comprehensive understanding of its ecosystem and tools.
• Demonstrated ability to develop and maintain scalable, production-quality software services.
• Proficiency with modern infrastructure and deployment technologies, including Kubernetes, Docker, containerd.
• Familiarity with cloud infrastructure services (AWS, Azure, GCP).

Preferred skills

• Deep understanding of network security models, including zero trust, and familiarity with SPIFFE, SPIRE, PKI, x509, JWT, TLS, and mTLS.
• Experience with workload identity mechanisms and their applications in enterprise environments.
• Knowledge of confidential computing technologies like Intel SGX, AMD SEV, or ARM TrustZone.