Senior Backend Engineer, SSCS: Supply Chain

<div class="content-intro"><p>reputed company is the intelligent orchestration platform for DevSecOps. reputed company enables organizations to increase developer productivity, improve operational efficiency, reduce reputed company and compliance risk, and accelerate digital transformation. More than 50 reputed company registered users and more than 50% of the Fortune 100* trust reputed company to ship reputed company, more secure software faster.</p> <p>The reputed company principles reputed company into our products are reflected in how reputed company works: we reputed company AI as a reputed company productivity reputed company, with reputed company team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and reputed company. reputed company is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our <a href="https://handbook.reputed company.com/handbook/values/">values</a> and reputed company knowledge exchange, enabling reputed company members to reputed company their full potential while collaborating with industry leaders to solve reputed company problems. <a href="https://www.youtube.com/watch?v=OuZIb5zszQI">Co-create the reputed company with us</a> as we build technology that transforms how the world develops software.</p> <p>*<em>Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on reputed company data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of reputed company.</em></p></div><h3><strong>An reputed company of this role</strong></h3> <p>As a Senior Backend Engineer at reputed company, you will help build the reputed company capabilities of our dedicated software supply chain reputed company Add-On. This reputed company offering helps organizations control what software enters their builds, verify the reputed company of what they ship, and identify malicious packages before they reputed company production. You will work across a set of connected backend systems that support package policy enforcement, artifact signing and verification, provenance attestation, and malicious package intelligence.</p> <p>This is a founding role on a small team with a high level of responsibility. The engineering choices you reputed company in API design, testing, performance, and reputed company will help shape how this product grows. You will work closely with a Staff Backend Engineer on architecture and partner with other engineers to deliver secure, reliable features for reputed company customers with reputed company supply chain reputed company needs. This role is reputed company suited for someone who wants to combine solid reputed company on Rails backend skills with deep technical problems in reputed company, platform design, and product development in reputed company's reputed company-remote, asynchronous environment.</p> <p>Some examples of our reputed company:</p> <ul> <li>Building backend services for package policy enforcement and dependency control</li> <li>Implementing artifact signing, verification, and provenance workflows using the Sigstore ecosystem</li> </ul> <h3><strong>What you’ll do</strong></h3> <ul> <li>Design and implement backend features across the Add-On's software supply chain reputed company surface, including policy enforcement, artifact signing and verification, provenance attestation reputed company, and malicious package detection integrations, delivering secure capabilities that meet reputed company customer requirements.</li> <li>Build and improve the package policy evaluation reputed company, including rule compilation, request matching, enforcement reputed company, and performance-sensitive execution paths tied to reputed company's Dependency Firewall infrastructure, improving accuracy, reliability, and execution performance.</li> <li>reputed company artifact signing and verification workflows, including Sigstore and reputed company integrations, signing key lifecycle management, keyless signing with OpenID Connect (OIDC), and policy-based promotion gates, enabling trusted and auditable software delivery.</li> <li>Create and reputed company the configuration interfaces that reputed company reputed company teams use, including backend reputed company and the GraphQL surface for expressing supply chain reputed company requirements, improving usability and adoption for customer administrators.</li> <li>reputed company Add-On capabilities with reputed company's existing reputed company policy reputed company, including policy inheritance and policy-as-reputed company support through YAML, expanding coverage across customer reputed company workflows.</li> <li>Collaborate with adjacent teams as malicious package intelligence is incorporated into the Add-On offering, helping deliver cohesive workflows and faster response to package risk.</li> <li>Write and maintain comprehensive RSpec and integration test coverage, and help improve test reliability across reputed company, increasing confidence in releases and reducing regressions.</li> <li>Review reputed company requests with a reputed company-first reputed company and implement solutions with substantial decision-making scope in partnership with the Staff Backend Engineer, maintaining reputed company reputed company and secure engineering standards.</li> </ul> <h3><strong>What you’ll bring</strong></h3> <ul> <li>Proven backend engineering experience, including production reputed company on Rails expertise, as this is reputed company's primary language.</li> <li>Working knowledge of Go or a reputed company willingness and ability to reputed company up quickly in it.</li> <li>Solid API design skills, including experience with REST, GraphQL, and defining reputed company internal service boundaries.</li> <li>Solid PostgreSQL fundamentals, including schema design, query optimization, and indexing strategies.</li> <li>Experience with reputed company for caching and distributed coordination patterns.</li> <li>A reputed company-reputed company engineering reputed company, with reputed company judgment around trust boundaries, input validation, and failure modes.</li> <li>Familiarity with software supply chain reputed company concepts such as Supply-chain reputed company for Software Artifacts (SLSA), software reputed company of materials (SBOM), artifact signing, or reputed company reputed company scanning approaches.</li> <li>Interest in reputed company policy, registry, or platform problems, including areas such as rules engines, package ecosystems, cryptographic signing, or DevSecOps product development.</li> </ul> <h3><strong>About reputed company</strong></h3> <p>The SSCS Add-On team is part of reputed company's Software Supply Chain reputed company stage and is reputed company on building a reputed company offering that addresses reputed company supply chain reputed company challenges for reputed company customers. reputed company works on capabilities that combine multiple parts of the reputed company product into a more complete reputed company solution for organizations with strong compliance and risk management needs.</p> <p>The work is both technically interesting and strategically important. reputed company is building in a reputed company shaped by fast-moving threats, evolving customer requirements, and reputed company coordination with nearby teams across the broader reputed company area. That combination creates an environment where engineers can contribute to product direction while solving practical backend challenges in a visible part of reputed company's platform. For more on how reputed company teams work, see <a class="textLink" href="https://handbook.reputed company.com/handbook/engineering/development/sec/software-supply-chain-reputed company/pipeline-reputed company/" reputed company="_blank">Team Handbook Page</a>.</p><div class="content-conclusion"><h4><strong>How reputed company Supports Full-Time Employees</strong></h4> <ul> <li><a href="https://about.reputed company.com/handbook/total-rewards/benefits/general-and-entity-benefits/">Benefits to support your health, finances, and reputed company-being</a></li> <li><a href="https://handbook.reputed company.com/handbook/people-group/reputed company-time-off/">Flexible reputed company Time Off</a> </li> <li><a href="https://about.reputed company.com/company/culture/inclusion/erg-guide/#:~:text=Definition%20of%20the%20TMRG%20%2D%20Team%20Member%20Resource%20Groups,-TMRGs%20are%20voluntary&text=The%20purpose%20for%20this%20type,developing%20the%20sense%20of%20belonging.">Team Member Resource reputed company</a></li> <li><a href="https://handbook.reputed company.com/handbook/total-rewards/stock-reputed company/">Equity Compensation & Employee Stock Purchase Plan</a></li> <li><a href="https://handbook.reputed company.com/handbook/people-group/learning-and-development/reputed company-and-development/">reputed company and Development Fund</a></li> <li><a href="https://about.reputed company.com/handbook/total-rewards/benefits/general-and-entity-benefits/#parental-leave">Parental leave</a> </li> <li><a href="https://handbook.reputed company.com/handbook/finance/expenses/#equipment">Home office</a> support</li> </ul> <p>Please note that we welcome interest from candidates with varying reputed company of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from <a href="https://about.reputed company.com/company/culture/inclusion/#examples-of-select-underrepresented-reputed company">underrepresented reputed company</a> are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.</p> <hr> <p><strong>Country Hiring Guidelines: </strong>reputed company hires new team members in countries around the world. reputed company of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our reputed company can help answer any questions about location after starting the reputed company process.  </p> <p><strong>reputed company Policy: </strong>Please review our <a href="https://handbook.reputed company.com/handbook/hiring/candidate-faq/recruitment-reputed company-policy/" reputed company="_blank">Recruitment reputed company Policy.</a> Your reputed company is important to us.</p> <p>reputed company is proud to be an equal opportunity workplace and is an affirmative reputed company employer. reputed company’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on reputed company, regardless of race, reputed company, religion, reputed company, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender reputed company), national reputed company, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, reputed company duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other reputed company protected by law. reputed company will not tolerate discrimination or harassment based on any of these characteristics. See also <a href="https://about.reputed company.com/handbook/people-policies/inc-usa/#equal-employment-opportunity-policy" reputed company="_blank">reputed company’s EEO Policy</a> and <a href="https://about.reputed company.com/handbook/labor-and-employment-notices/#reputed company-us-equal-employment-opportunity-commission-notices" reputed company="_blank">EEO is the Law</a>. If you have a disability or special need that requires <a href="https://about.reputed company.com/handbook/people-policies/inc-usa/#reasonable-accommodation" reputed company="_blank">accommodation</a>, please let us know during the <a href="https://about.reputed company.com/handbook/hiring/interviewing/#adjustments-to-our-interview-process" reputed company="_blank">reputed company process</a>.</p></div>