Staff Full Stack Software Engineer

At Sonatype, we empower developers with best-in-class tools to build secure, high-quality software at scale. Our mission is to create a world where software is always secure and developers can innovate without fear. Trusted by thousands of organizations, including Fortune 500 companies, we are pioneers in software supply chain management, open-source security, and DevSecOps.

We're looking for a Full Stack Staff Software Engineer to help us shape the future of secure software development. If you love solving complex problems, working with cutting-edge technologies, and mentoring engineering teams, we’d love to hear from you.

What you will do

• Architect and build scalable, secure, and resilient backend systems using Java
• Lead design and implementation efforts for core components across cloud-native services (e.g., Kubernetes, Docker, AWS/GCP/Azure).
• Contribute to the development and enhancement of Sonatype’s software supply chain security products (e.g., Nexus Repository, Nexus IQ).
• Collaborate with product management and cross-functional teams to translate complex business requirements into robust technical solutions.
• Champion modern DevSecOps practices, integrating security into CI/CD pipelines and ensuring automation across build and deployment processes.
• Guide and mentor engineering teams through technical challenges, providing architectural guidance and code reviews.
• Advocate for and implement best practices in testing, observability, reliability, and performance optimization.
• Evaluate and integrate open-source tools and libraries, contributing back to the community when appropriate.
• Drive improvements in platform scalability, data processing pipelines, and distributed system architecture.
• Participate in and lead incident response, root cause analysis, and long-term reliability engineering efforts.

What we are looking for

• 8+ years of professional software engineering experience, including 2+ years in a Staff Engineer or equivalent technical leadership role.
• Proven experience designing and building scalable, production-grade full stack applications.
• Strong proficiency in Java and/or Kotlin on the backend, with experience building RESTful APIs and microservices.
• Proficiency with modern frontend framework - React
• Solid understanding of cloud-native architecture and experience deploying applications to cloud platform - AWS.
• Experience with containerization and orchestration tools (Docker, Kubernetes). Familiarity with secure software development practices and integrating security into full stack applications.
• Skilled in automated testing, CI/CD pipelines, and modern DevOps workflows.
• Strong communication and collaboration skills, with experience working across engineering, product, and design teams. Bachelor’s degree in Computer Science, Engineering, or a related field—or equivalent practical experience.
• Experience working in an agile environment and collaborating with cross-functional teams.
• Passion for mentoring and coaching engineers.
• Experience with security-focused development (e.g., OWASP, SAST, DAST).
• Knowledge of infrastructure as code (Terraform, CloudFormation).
• Familiarity with serverless architectures (AWS Lambda, API Gateway).
• Open-source contributions or community involvement.