Senior Software Engineer

About the Role

We are seeking a Senior Software Engineer to join our Edge organization. This is a role for an engineer who lives at the intersection of software, networking, and platform infrastructure. You will architect and develop the core services that power the Armada Edge Platform, designing the integration fabric that unifies a hybrid fleet of Azure Local, Open Shift, and Kubernetes clusters.

You will also build the automation software that provisions and manages our physical network fabric—writing the code that bootstraps firewalls and switches alongside our compute nodes.

This role is office-based at our Bellevue, Washington office.

• Core API & Control Plane: Architect and develop robust infrastructure services that abstract platform complexity, creating a unified API for deploying to Azure Local, Open Shift, and standard Kubernetes clusters.
• Custom Logic: Build custom Controllers, Operators, and orchestration logic that enable the Armada Edge Platform to interact seamlessly with Azure Arc and Open Shift APIs.
• Provisioning Workflows: Engineer Zero‑Touch Provisioning (ZTP) workflows for bare‑metal compute nodes, automating the path from bootstrap to production‑ready status.
• Hardware Integration: Integrate hardware telemetry into the platform control plane to support health monitoring, including power and thermal metrics.

• Lifecycle Automation: Design and implement software services in Golang and Python to automate the provisioning and lifecycle management of Juniper SRX firewalls and switches.
• Intent‑Based Networking: Build automated workflows for Zero‑Touch Provisioning (ZTP) of network gear, programmatically pushing configurations via Netconf/YANG or XML APIs.
• State Auditing: Develop tooling to audit network device state against intent‑based configurations, ensuring the edge network remains secure and compliant.

• Identity Bootstrapping: Design and implement security software components, including automated certificate management (PKI) and secure identity bootstrapping (SPIFFE/SPIRE).
• Secure Attestation: Build software to enforce Zero Trust principles, ensuring compute nodes and network devices are securely attested before joining the cluster.
• Real‑time Remediation: Build automated compliance agents that run across Linux and Azure Local nodes to detect and remediate security drift in real‑time.

• US Citizen:
• Software Engineering: 8+ years of professional development experience, with a focus on backend systems, distributed architecture, platform engineering, or network automation.
• Golang Expertise: Expert‑level proficiency in Golang (5+ years preferred), with experience building system‑level daemons, control planes, or high‑performance API services.
• Network Software Engineering: Proven experience writing software to provision and manage network devices (e.g., Juniper SRX) using programmatic interfaces like Netconf, RESTconf, or gRPC.
• Hybrid & Distributed Infrastructure: Technical familiarity with Kubernetes, Azure Local (Azure Stack HCI), or Open Shift architectures.
• Linux Internals: Deep experience with Linux systems programming, the networking stack, and troubleshooting within bare‑metal environments.
• Technical
  
  Skills:
  
  Strong understanding of Docker, OCI runtimes, and L2/L3 networking protocols including BGP, OSPF, VLANs, and IPSec.
• Security‑as‑Code: Experience implementing PKI, mTLS, and Zero‑Trust principles (e.g., SPIFFE/SPIRE) to enforce network and node security policies.

• Experience writing Custom Kubernetes Operators or Controllers to manage external infrastructure.
• Hands‑on experience with Azure SDKs or interacting with Azure Resource Manager (ARM) APIs programmatically.
• Familiarity with Ansible for declarative network configuration management.
• Experience with gRPC and Protobuf for high‑performance internal service communication.

For select roles, due to the nature of our clientele and the technologies involved, there may be specific nationality or citizenship indicated in the required qualifications…