Principal Software Engineer, Backend (Go)

Mirantis

About The Position

Mirantis, an IREN company, is the Kubernetes-native AI infrastructure company, enabling organizations to build and operate scalable, secure, and sovereign infrastructure for modern AI, machine learning, and data-intensive applications. By combining open source innovation with deep expertise in Kubernetes orchestration, Mirantis empowers platform engineering teams to deliver composable, production-ready developer platforms across any environment—on-premises, in the cloud, at the edge, or in sovereign data centers. As enterprises navigate the growing complexity of AI-driven workloads, Mirantis delivers the automation, GPU orchestration, and policy-driven control needed to manage infrastructure with confidence and agility. Committed to open standards and freedom from lock-in, Mirantis ensures that customers retain full control of their infrastructure strategy. We are looking for an experienced backend engineer to build the Go services behind the k0rdent-ai platform — the multi-tenant control plane for GPU infrastructure. You will collaborate with engineering teams across US, Europe, and India to design and develop API-first services. Your responsibilities will include owning features end to end — API contract, service, schema, orchestration, tests, and Helm packaging — and making architectural decisions that shape how enterprises consume our platform. Working within an agile framework, you will directly impact the reliability and correctness of infrastructure customers run in production.

Requirements

10+ years of professional software engineering, including 5+ years building production backend services using Go language.
Strong Go fundamentals: concurrency, context propagation, error wrapping, stdlib HTTP routing (Go 1.22+).
Deep relational database experience: schema design, migrations, transactions, and query tuning under multi-tenant load.
Track record designing versioned REST APIs consumed by external clients, and the SDKs generated from them.
Experience building durable or event-driven asynchronous systems — workflow engines, streaming platforms, or message brokers — with idempotency and retry semantics.
Solid grasp of OIDC, JWT validation, RBAC modeling, and multi-tenant isolation behind an IAM platform and API gateway.
Working Kubernetes knowledge — deploy, inspect, and debug workloads, and reason about Kubernetes RBAC.
Testing discipline: unit and integration tests are part of your definition of done.
Git-based workflow, rigorous code review, CI/CD (GitHub Actions or equivalent).
Experience mentoring engineers and leading design discussions.
Clear written English for asynchronous design docs and reviews across time zones.
Must Have Temporal in production.
Experience developing multi-tenant SaaS or PaaS platforms.
Cluster API, Kubernetes controllers, or operators.
Keycloak — realms, clients, identity providers, token flows.
API gateway operation — routing, plugins, rate limiting.
PostgreSQL at scale, with a migration toolchain.
Docker and Helm-packaged services running on Kubernetes.
Streaming or message-broker platforms.

Nice To Haves

k0s ecosystem experience.
GPU infrastructure or AI/ML workload scheduling on Kubernetes.
SCIM provisioning, or federating platform permissions with Kubernetes RBAC.
sqlc, OpenAPI codegen, or other schema-driven toolchains.
Observability: Prometheus, Grafana, OpenTelemetry, audit logging.
Python or TypeScript for E2E suites and client SDKs.
Security engineering: threat modeling, secret management, dependency and container scanning.
CNCF open-source contributions.

Responsibilities

Design and build Go microservices, model database schemas, and write migrations for the multi-tenant k0rdent AI platform.
Design and implement durable orchestration in Temporal — idempotency, retries, timeouts, determinism constraints.
Design public REST APIs with OpenAPI, along with multi-language SDKs.
Build event-driven, asynchronous communication between services on a distributed streaming or message-broker platform.
Implement authentication and authorization boundaries across an enterprise IAM platform and an API gateway — OIDC/JWT, service-to-service auth, tenant-scoped RBAC, gateway routing and rate limiting.
Extend the identity model with standards-based user and group lifecycle provisioning (SCIM), and unify authorization between the platform's API permissions and Kubernetes-native RBAC.
Write unit, integration, and end-to-end tests as part of every change.
Instrument services for production — structured logging, metrics, and audit trails.
Package and ship services with Docker, Helm, and Kubernetes.
Review peers' code and debug incidents to root cause with regression coverage.
Mentor junior engineers — onboarding, design guidance, and review feedback that raises the team's bar.