Staff Engineer

Hungry, Humble, Honest, with Heart.

The Opportunity

We are seeking a Staff-level Software Engineer with deep expertise in system security, Kubernetes internals, network security, Linux security, and distributed storage. In this high-impact role, you will be the primary technical driver for building secure-by-default features for the NKP and CN-AOS platforms.

You will design secure-by-default architectures, develop Kubernetes Custom Resource Definitions (CRDs) and operators, and ensure our Container Storage Interface (CSI) implementations are hardened against modern attack vectors while effortlessly serving enterprise and AI workloads. 

About the Team

The NKP (Nutanix Kubertenes Platform) team is building an enterprise-grade management platform for the containerized world. We are developing a fully cloud-native architecture designed to securely deploy, run, and manage Kubernetes clusters seamlessly across any hybrid or multi-cloud environment.

Your Role

We are seeking a Staff-level Software Engineer with deep expertise in system security, Kubernetes internals, network security, Linux security, and distributed storage. In this high-impact role, you will be the primary technical driver for building secure-by-default features for the NKP and CN-AOS platforms.

You will design secure-by-default architectures, develop Kubernetes Custom Resource Definitions (CRDs) and operators, and ensure our Container Storage Interface (CSI) implementations are hardened against modern attack vectors while effortlessly serving enterprise and AI workloads. 

Key Responsibilities.

Cloud-Native Development: Design and build advanced Kubernetes Controllers, Operators, and CRDs in Golang to natively orchestrate and secure storage workloads.

Platform Hardening, Network & Container Security:

• Implement and manage Kubernetes Network Policies for micro-segmentation and least-privilege communication.
• Configure and enforce OpenShift Security Context Constraints (SCCs) and Multi-Category Security (MCS).
• Deploy and operate Container Security Operators for continuous vulnerability scanning of running pods and images.
• Build platform functionality for image scanning, signing, and policy enforcement  Advanced Cluster Security for runtime threat detection, compliance monitoring, and network policy enforcement.
• Drive platform compliance with CIS benchmarks (Kubernetes and Linux), FIPS, and zero-trust guidelines.
• Distributed Systems Engineering: Tackle complex problems in large-scale distributed systems, focusing on performance, scaling out, and resiliency.
• Technical Leadership: Drive architectural reviews, establish secure coding standards, and mentor junior and mid-level engineers to act as a technical force multiplier.

What You Will Bring

• Experience: 12+ years of software engineering experience, with at least 3+ years focused on building scalable distributed systems, cloud platforms, or security infrastructure. 
   
• Kubernetes Expertise: Deep expertise in Golang and extensive hands-on experience with Kubernetes internals, building Operators/Controllers, Cluster API (CAPI), NetworkPolicies, SCCs, MCS, and related security primitives.
• Storage Fundamentals: Solid conceptual and practical understanding of distributed storage systems (block, file, object), data replication, deduplication, and high availability.
• Systems Engineering: Strong background in Linux OS internals, networking, container runtimes (containerd, Docker), and kernel security modules. 
• Education: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field. 
• This role combines deep platform engineering with hands-on security ownership. You will shape how NKP delivers secure, compliant, and production-grade Kubernetes + storage capabilities at enterprise scale.

Work Arrangement

Hybrid: This role operates in a hybrid capacity, blending the benefits of remote work with the advantages of in-person collaboration. In locations where our workplace policy applies (i.e. San Jose, Durham, Mexico City, Bangalore, Pune, Hoofddorp, Belgrade, Barcelona, Singapore, Sydney and Tokyo), employees are expected to work onsite a minimum of 3 days per week to foster collaboration, team alignment, and access to in-office resources. Workplace type may vary based on location and team requirements. Please speak with your recruiter for details. Additional team-specific guidance and norms will be provided by your manager.

--