软件工程师 II
Software Engineer II
Veeam 是数据和 AI 信任公司,专注于帮助组织确保其数据和 AI 得到充分理解、安全保护,并具备弹性,以推动可扩展的可信 AI 发展。作为数据弹性和数据安全态势管理领域的市场领导者,Veeam 专为身份、数据、安全和 AI 风险的融合而打造。总部位于西雅图,在超过 30 个国家设有办公室,Veeam 全球保护着超过 55 万客户,他们信任 Veeam 来保障业务的持续运行。与我们一同勇敢前行,共同成长、学习,并为一些全球最大的品牌带来真正的影响力。
**软件工程师,Veeam 数据云(FedRAMP)**
我们正在寻找一位经验丰富的软件工程师加入 [Veeam 数据云(VDC)](https://www.veeam.com/products/veeam-data-cloud.html) 工程团队,负责我们 SaaS 产品的 FedRAMP 合规版本。该团队的使命是构建一个安全、可靠且易于使用的数据保护服务,满足联邦客户的高标准要求——并通过代码和测试证明其有效性。作为团队成员,你将设计并构建使合规性成为现实的微服务和安全控制。
这是一次绝佳的机会,让有云服务和安全软件开发经验的人士参与构建全球最成功、最先进的数据保护平台。理想的候选人曾在快速发展的 SaaS 公司担任过类似职位。
这不是一份仅处理合规文件的工作——这是一个专注于密码学、认证、可审计性和生产环境服务可靠性的软件工程岗位。
**你将负责**
- 使用 Go 和 C#/.NET 设计和开发可靠、可扩展的微服务,并与基于云的托管服务集成。
- 将合规工程师提供的合规要求转化为可工作的应用代码——以及验证行为正确的测试。
- 从 FIPS 验证的密码学需求到运行二进制文件:构建配置、启动断言、TLS 模式强制执行,以及非合规构建无法通过的 CI 检查。
- 为特权操作添加结构化审计事件——操作者、目标、前后状态、结果、关联 ID——并将其连接到审计流水线。
- 强化认证路径:使用密钥对而非共享密钥进行 OAuth 客户端认证,通过 JWKS 进行无状态 JWT 验证,以及 SAML 联邦认证
查看英文原文
Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.
**Software Engineer, Veeam Data Cloud (FedRAMP)**
We are looking for an experienced Software Engineer to join the [Veeam Data Cloud (VDC)](https://www.veeam.com/products/veeam-data-cloud.html) engineering team, working on the FedRAMP-compliant version of our SaaS product. The mission of the team is to build a secure, reliable, and easy-to-use data protection service that meets the bar federal customers hold us to — and to prove, in code and in tests, that it does. As a member of the team, you will design and build the microservices and security controls that make that compliance real.
This is an excellent opportunity for someone with cloud services and secure software development experience to help build the world's most successful, modern data protection platform. The ideal candidate will have held similar roles in a rapidly growing SaaS company.
This is not a compliance paperwork position — it's a software engineering role focused on cryptography, authentication, auditability, and the reliability of services running in production.
**What you'll do**
- Design and develop reliable, scalable microservices in Go and C#/.NET, integrated with cloud-based managed services.
- Turn compliance requirements handed over by our compliance engineers into working application code — and the tests that prove the behavior holds.
- Take FIPS-validated cryptography from requirement to running binary: build configuration, startup assertions, TLS mode enforcement, and CI checks a non-compliant build can't pass.
- Instrument privileged operations with structured audit events — actor, target, before and after state, outcome, correlation ID — and wire them into the audit pipeline.
- Harden authentication paths: OAuth client authentication with key pairs rather than shared secrets, stateless JWT validation via JWKS, and SAML federation through our identity provider.
- Work across service API contracts and generated clients as services move onto private network paths.
- Ensure your code is high-quality, thoroughly tested, and FedRAMP-compliant.
- Participate in the on-call rotation for product operations.
- Take ownership of the reliability and efficiency of your services running in the cloud.
- Participate in technical design discussions, review code, and provide feedback to other engineers.
- Collaborate with a distributed team — including compliance engineers who will bring you requirements and expect a clear answer on what the code actually does.
**What you'll bring**
- 5+ years of experience in the software development industry.
- Strong Go, or strong C#/.NET with real interest in working across both — most of the control plane is Go, and the Microsoft 365 services are .NET.
- Demonstrated expertise designing, building, and running SaaS or large-scale cloud services on Azure, AWS, or GCP.
- Working developer-level knowledge of applied cryptography and authentication: TLS, JWTs, OAuth/OIDC flows, key management. You don't need to be a cryptographer, but you should know what a JWKS endpoint is for and why a client secret is weaker than a signed assertion.
- Experience with structured logging and observability — you've instrumented a service that someone else had to debug at 3am.
- Expertise developing, testing, and debugging production-quality, scalable, concurrent systems.
- Solid testing discipline, including tests that assert a security behavior rather than a feature.
- Comfort reading a written requirement you didn't author, and asking the right clarifying questions before building.
- A strong knowledge of computer science fundamentals (data structures and algorithms).
**What you'll get**
- Unlimited paid time off, 12 paid holidays including 4 global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
- Paid parental leave: 8 weeks for all parents, 16 weeks for birthing parents
- Medical, dental, and vision coverage starting on your first day
- Mental health support, therapy sessions, and digital wellness tools via our Employee Assistance Program
- 401(k) retirement plan with company matching contributions
- Fertility, adoption, and surrogacy support through Maven, plus paid volunteer time
- AirVet: 24/7 virtual veterinary care at no cost
- Legal services, identity protection, and supplemental health insurance options
- Tax-advantaged spending accounts for healthcare, dependent care, and commuting
- Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and learning events like our annual Global Day of Learning
**Compensation Transparency**
Veeam is committed to pay transparency and equitable compensation. For this role, the compensation range below reflects the expected total target compensation (TTC), inclusive of base pay and a competitive performance-based bonus. For roles with a commission plan, the compensation range represents On Target Earnings (OTE), which includes base salary plus variable commission. When determining compensation, Veeam takes into consideration factors such as experience, education, skills, and geographic zone. Offers are typically made below the midpoint of the range.
In addition to compensation, Veeam provides a comprehensive benefits package, including health coverage, retirement plans, and unlimited time off.
**U.S. Geographic Zones & Compensation Ranges (TTC / OTE)**
Zone 1: San Francisco Bay Area, New York City Boroughs
$208,500—$347,500 USD
Zone 2: Washington, California (excluding San Francisco Bay Area)
$191,100—$318,500 USD
Zone 3: Texas, Illinois, North Carolina, Colorado, Massachusetts, Pennsylvania, Virginia, Oregon, Nevada, Hawaii, New York (excluding NYC boroughs); Sales roles located in Georgia, Ohio, and Arizona
$173,800—$289,700 USD
Zone 4: All other US locations
$151,200—$251,900 USD
**Veeam Software is an equal opportunity employer** and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.
Personal data collected during the recruitment process will be processed in accordance with our [Recruiting Privacy Notice](https://www.veeam.com/legal/recruiting-privacy-notice.html), which explains how your information is collected, used, and handled in connection with hiring activities. By applying for this position, you consent to this processing.
By submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.