资深软件工程师
Staff Software Engineer
Sonatype 是软件供应链安全公司。我们提供全球最优秀的端到端软件供应链安全解决方案，结合针对恶意开源代码的唯一主动防护、唯一的企业级 SBOM 管理以及领先的开源依赖管理平台。这使企业能够大规模地创建和维护安全、高质量且创新的软件。
作为 Nexus Repository 的创始人和 Maven Central 的管理者，世界上最大的 Java 开源软件仓库，我们是软件先驱，我们的开源技术专长无可匹敌。我们以无与伦比的承诺，致力于构建更快、更安全的软件，并利用人工智能和数据智能来降低风险、提高效率并推动强大的软件开发。
超过 2000 家组织，包括 70% 的财富 100 强企业和 1500 万软件开发者，依赖 Sonatype 来优化他们的软件供应链。
关于该职位
在 Sonatype，我们为开发者提供一流的工具，以大规模构建安全、高质量的软件。我们的使命是创造一个软件始终安全、开发者可以无惧创新的世界。被数千家组织（包括财富 500 强公司）所信赖，我们是软件供应链管理、开源安全和 DevSecOps 领域的先驱。
我们正在寻找一名资深 DevOps 工程师加入我们的开发者体验团队，帮助塑造 Sonatype 如何大规模构建、部署和运营安全、可靠的的服务。
在这个职位中，你将结合深厚的技术专长和资深级别的领导力，改进我们的云基础设施、开发者平台、自动化和服务交付实践。你将与工程团队紧密合作，使服务从开发到生产的过程更加便捷和安全，同时提升可靠性、可观测性和运营卓越性。
你将负责：
设计、开发、测试和维护支撑 Sonatype 平台产品配置、许可和购买功能的软件。
使用现代工程实践构建可扩展、可靠且易于维护的后端服务。
参与技术设计讨论，帮助推动高质量的架构决策。
与工程师、产品经理和跨职能团队紧密合作，交付有影响力的功能。
编写干净、经过充分测试且易于维护的代码，同时参与代码审查。
解决生产环境中的问题。
查看英文原文
Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.
As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.
More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.
About the role
At Sonatype, we empower developers with best-in-class tools to build secure, high-quality software at scale. Our mission is to create a world where software is always secure and developers can innovate without fear. Trusted by thousands of organizations, including Fortune 500 companies, we are pioneers in software supply chain management, open-source security, and DevSecOps.
We’re looking for a Staff DevOps Engineer to join our Developer Experience team and help shape how Sonatype builds, deploys, and operates secure, reliable services at scale.
In this role, you’ll combine deep technical expertise with Staff-level leadership to improve our cloud infrastructure, developer platform, automation, and service delivery practices. You’ll partner closely with engineering teams to make it easier and safer to take services from development to production while improving reliability, observability, and operational excellence.
What you'll do:
Design, develop, test, and maintain software that powers product provisioning, licensing, and purchasing capabilities across Sonatype's platform.
Build scalable, reliable, and maintainable backend services using modern engineering practices.
Contribute to technical design discussions and help drive high-quality architectural decisions.
Collaborate closely with engineers, product managers, and cross-functional teams to deliver impactful features.
Write clean, well-tested, and maintainable code while participating in code reviews.
Troubleshoot production issues and continuously improve system performance, reliability, and scalability.
Mentor and coach other engineers through technical guidance, design reviews, and knowledge sharing while remaining deeply involved in day-to-day development.
Contribute to automation, infrastructure improvements, and cloud-native engineering practices.
What success looks like:
You deliver high-quality, maintainable software that reliably supports Sonatype's provisioning, licensing, and purchasing capabilities.
You become a trusted technical contributor who proactively solves complex engineering problems.
You collaborate effectively across engineering teams, helping drive technical excellence and delivering value to customers.
You mentor and support fellow engineers through thoughtful feedback, technical guidance, and code reviews while remaining a highly productive individual contributor.
You continuously improve the reliability, scalability, and maintainability of the systems your team owns.
You embrace ownership, take initiative, and consistently deliver meaningful impact through hands-on software development.
What you'll bring:
6+ years of professional software engineering experience developing production-grade applications.
Direct experience using agent-driven development and code review.
Strong experience building backend applications with Java.
Experience with additional programming languages like Golang and Python.
Experience working with cloud platforms, particularly AWS.
Hands-on experience with containerization and infrastructure technologies such as Docker, Terraform, and Ansible.
Experience with build and dependency management tools such as Maven.
Experience working with relational databases such as PostgreSQL or MySQL.
Experience with event-driven architectures and microservices.
Strong understanding of software design principles, testing, debugging, and distributed systems.
A collaborative mindset with excellent communication skills and a passion for mentoring fellow engineers.
A desire to remain highly technical and hands-on while contributing technical leadership within the team.
It’d be great if you also had:
Exposure to Microsoft Azure and/or Google Cloud Platform (GCP).
Experience building or supporting commercial platforms involving licensing, provisioning, subscription management, or purchasing systems.
Experience working in Agile development environments.
Familiarity with DevOps and CI/CD best practices.
Things we are proud of:
2026 Gartner® Magic Quadrant™ Leader for Software Supply Chain Security
2026 Celebrating 15 Years of Sonatype Research Labs – Industry-leading software supply chain and open source security research
2026 Founding Member of the Linux Foundation Initiative for Open Source Sustainability
2026 State of the Software Supply Chain® Report – Continuing industry leadership in software supply chain security and AI security research
2025 Visionary in Gartner® Magic Quadrant™ for Application Security Testing!
2025 AI Compliance Solution of the Year - AI Breakthrough Awards
2025 DEVIES Award to our SBOM Manager for a new product for its innovation and impact in developer technology
2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
Constellation AST Shortlist: Sonatype has been listed on the Constellation ShortList™ for Application Security Testing for 2024
Data Breakthrough Awards: Sonatype was announced as a 2024 winner in the "Open Source Data Solution of the Year."
SD Times: Best in Show Security
Fast Company Best Workplaces for Innovators 2024
The Herd Top 100 Private Software Companies 2024
Diversity & Inclusion Working Groups
Parental Leave Policy
Paid Volunteer Time Off (VTO)
At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.