The Red Hat Trusted Artifact Signer (RHTAS) team is actively seeking a highly skilled and motivated Senior Software Engineer to join our ranks. This is a pivotal role that encompasses both product engineering responsibilities and significant contributions to the vibrant open-source community. As a key member of our team, you will play an integral part in furthering Red Hat’s initiatives within the Sigstore upstream projects (
https://sigstore.dev
). Your work will directly impact the enhancement and stability of the RHTAS product through the implementation of new features and the meticulous resolution of existing bugs.
Beyond technical execution, you will serve as a mentor and guide for other Red Hat team members, fostering a culture of product development excellence and active engagement within the broader community. This involves sharing your expertise, providing guidance on best practices, and empowering colleagues to become more proficient contributors. A significant aspect of this position involves architectural design. You will be instrumental in defining the architectural framework for new projects and features, ensuring scalability, security, and maintainability. This requires a deep understanding of the technology stack and the ability to translate high-level requirements into concrete implementation plans.
From the initial conceptualization phase to the successful integration of your work upstream, you will have the opportunity to shape the future direction of the RHTAS product. As a Senior Software Engineer, you will be embedded within a geographically dispersed team. This necessitates a high degree of autonomy and self-direction, coupled with a strong commitment to collaborative teamwork. You will be expected to manage your tasks effectively and independently, while also maintaining regular and open communication with fellow team members and upstream developers. This communication will involve both technical discussions and broader project coordination, ensuring alignment and progress. Your ability to articulate complex technical concepts clearly and concisely, both in written and verbal form, will be crucial to your success.

What you will do

• Upstream Community Contributions: Actively engage with and drive contributions within the upstream open-source communities relevant to the Red Hat Trusted Artifact Signer (RHTAS) project. This involves undertaking new development work, conceptualizing and implementing innovative features, and addressing and resolving bug fixes reported by users or identified internally. Proactively participate in community discussions, code reviews, and contribute to documentation to ensure a collaborative and thriving ecosystem.
• Product Development, Maintenance, and Release: Take shared ownership of the complete lifecycle of the Red Hat Trusted Artifact Signer product. This includes developing new functionalities and enhancements, maintaining the existing codebase for stability and performance, and orchestrating the smooth and timely release of new versions. Ensure adherence to best practices for software engineering, including thorough testing, version control, and documentation.
• Downstream Product Efforts & Delivery: Spearhead downstream product efforts, encompassing the design and implementation of robust CI/CD pipelines. Ensure the reliable and efficient delivery of production-ready software to customers and internal stakeholders. Drive the development of new features based on customer requirements and market trends, integrating them seamlessly into the product.
• Cross-Product Integration: Facilitate and drive cross-product integration efforts between RHTAS and other products within the Red Hat ecosystem. Collaborate with other engineering teams to understand their product functionalities and requirements, and design interfaces and integration points that ensure interoperability and a cohesive customer experience.
• Product Security Compliance: Prioritize and ensure the security compliance of the Red Hat Trusted Artifact Signer product. Conduct regular security assessments, identify potential vulnerabilities, and implement appropriate security measures to protect against threats. Stay up-to-date on the latest security best practices and compliance requirements and ensure the product adheres to them.
• Community & Product Evangelism: Act as a key advocate for both the community and the product. Engage in community evangelism through various channels, including writing blog posts, creating demonstrations, and delivering presentations at conferences and events. Share knowledge, best practices, and the value proposition of RHTAS with the broader community and potential customers.

What you will bring

• Proven experience delivering enterprise-grade software solutions.
• Deep understanding of Kubernetes architecture and its ecosystem.
• Proficiency in the Go programming language, with experience in other relevant languages.
• Expertise in designing and implementing robust CI/CD pipelines.
• Strong production troubleshooting skills and the ability to diagnose and resolve complex issues.
• Familiarity with agile development methodologies and practices.
• A strong drive for continuous learning and staying up-to-date with the latest technologies.
• Effective professional-level English communication skills, both written and verbal.
• Experience with Python or Node.js is desirable but not required.

The following are considered a plus

• Understanding of cryptographic principles including digital signatures, key lifecycle, certificate management, and robust key management practices.
• Experience with the Sigstore upstream project and its architecture.
• Proficiency in the Ansible project and its tooling, such as writing playbooks and managing configurations.

LI-SH4

About Red Hat
Red Hat
is the world’s leading provider of enterprise
open source
software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We’re a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact.
Inclusion at Red Hat
Red Hat’s culture is built on the open source principles of transparency, collaboration, and inclusion, where the best ideas can come from anywhere and anyone. When this is realized, it empowers people from different backgrounds, perspectives, and experiences to come together to share ideas, challenge the status quo, and drive innovation. Our aspiration is that everyone experiences this culture with equal opportunity and access, and that all voices are not only heard but also celebrated. We hope you will join our celebration, and we welcome and encourage applicants from all the beautiful dimensions that compose our global village.
Equal Opportunity Policy (EEO)
Red Hat is proud to be an equal opportunity workplace and an affirmative action employer. We review applications for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, age, veteran status, genetic information, physical or mental disability, medical condition, marital status, or any other basis prohibited by law.
Red Hat does not seek or accept unsolicited resumes or CVs from recruitment agencies. We are not responsible for, and will not pay, any fees, commissions, or any other payment related to unsolicited resumes or CVs except as required in a written contract between Red Hat and the recruitment agency or party requesting payment of a fee.
Red Hat supports individuals with disabilities and provides reasonable accommodations to job applicants. If you need assistance completing our online job application, email
application-assistance@redhat.com
. General inquiries, such as those regarding the status of a job application, will not receive a reply

• Upstream Community Contributions: Actively engage with and drive contributions within the upstream open-source communities relevant to the Red Hat Trusted Artifact Signer (RHTAS) project. This involves undertaking new development work, conceptualizing and implementing innovative features, and addressing and resolving bug fixes reported by users or identified internally. Proactively participate in community discussions, code reviews, and contribute to documentation to ensure a collaborative and thriving ecosystem.
• Product Development, Maintenance, and Release: Take shared ownership of the complete lifecycle of the Red Hat Trusted Artifact Signer product. This includes developing new functionalities and enhancements, maintaining the existing codebase for stability and performance, and orchestrating the smooth and timely release of new versions. Ensure adherence to best practices for software engineering, including thorough testing, version control, and documentation.
• Downstream Product Efforts & Delivery: Spearhead downstream product efforts, encompassing the design and implementation of robust CI/CD pipelines. Ensure the reliable and efficient delivery of production-ready software to customers and internal stakeholders. Drive the development of new features based on customer requirements and market trends, integrating them seamlessly into the product.
• Cross-Product Integration: Facilitate and drive cross-product integration efforts between RHTAS and other products within the Red Hat ecosystem. Collaborate with other engineering teams to understand their product functionalities and requirements, and design interfaces and integration points that ensure interoperability and a cohesive customer experience.
• Product Security Compliance: Prioritize and ensure the security compliance of the Red Hat Trusted Artifact Signer product. Conduct regular security assessments, identify potential vulnerabilities, and implement appropriate security measures to protect against threats. Stay up-to-date on the latest security best practices and compliance requirements and ensure the product adheres to them.
• Community & Product Evangelism: Act as a key advocate for both the community and the product. Engage in community evangelism through various channels, including writing blog posts, creating demonstrations, and delivering presentations at conferences and events. Share knowledge, best practices, and the value proposition of RHTAS with the broader community and potential customers