Note: The job is a remote job and is open to candidates in USA. NetRise is revolutionizing software supply chain security through deep visibility and risk analysis of software and firmware. The Backend Software Engineer will build and operate core Go services, gRPC APIs, and data pipelines that transform firmware and binaries into supply-chain intelligence, while owning service design, data modeling, observability, and production infrastructure.
Responsibilities
- Architect and develop backend services throughout their lifecycle — from requirement analysis and scoping to design, execution, and deployment
- Design gRPC/protobuf contracts and evolve them safely, building resource-oriented APIs with consistent filtering, pagination, ordering, and versioning
- Build event-driven, asynchronous systems — Pub/Sub messaging, background workers, and job queues with dead-letter handling that stays correct under load
- Model and operate data in PostgreSQL — schema design, query patterns, and migrations that scale with the platform
- Own production quality across OpenTelemetry instrumentation, CI/CD pipelines, and Terraform-managed infrastructure spanning dev, demo, and prod
- Collaborate with product management on the technical roadmap and with the engineering team on shared practices, testing discipline, and technical excellence
Skills
- • 3+ years building and operating production backend services, primarily in Go, with a strong foundation in data structures, algorithms, and software design
- • Go (e.g., idiomatic concurrency, context, generics, modules) — primary language across every service
- • gRPC + Protocol Buffers (e.g., service design, streaming RPCs, schema evolution)
- • API design, versioning strategy, and schema evolution (e.g., resource-oriented / AIP-style filtering, pagination, ordering)
- • PostgreSQL (e.g., data modeling, query patterns, migrations)
- • Event-driven / asynchronous architectures (e.g., Pub/Sub messaging, background job/worker queues, dead-letter handling)
- • OpenTelemetry / observability (e.g., traces, metrics, structured logging)
- • CI/CD (e.g., pipelines, containerized builds, automated test + deploy)
- • Terraform (modular IaC, GCP provider, remote state, multi-environment dev/demo/prod)
- • Testing discipline in Go (e.g., table-driven tests, mocks/fakes, integration tests with testcontainers / emulators)
- • GCP Experience (e.g., Cloud Run, GCS, Pub/Sub, IAM, Artifact Registry, AlloyDB, Cloud SQL, Spanner, Memorystore)
- • Container build & deploy tooling — Docker, ko, Kaniko/buildx, image promotion workflows
- • buf / protoc tooling and codegen pipelines (managing shared proto modules across services)
- • Auth0 / OAuth 2.0 / JWT / OIDC and service-to-service auth (GCP identity tokens, service-account impersonation)
- • Postgres-backed job queues (e.g., River) or comparable async worker frameworks
- • GCP networking & platform security — VPC, Cloud Load Balancing, IAP, Cloud Armor (WAF)
- • Feature flag systems (OpenFeature / GO Feature Flag)
- • Data/graph processing pipelines and DAG-style batch services
- • LLM/GenAI integration for data-enrichment tasks
- • Cybersecurity/software supply-chain domain knowledge — SBOM (CycloneDX, SPDX), CVE / CPE / PURL, vulnerability data (NVD, KEV, CVSS)
Company Overview