Principal Software Engineer - Cloud Engineering

Couchbase, Inc.

291d • $200,000 - $235,000

About The Position

This position will be part of the Capella engineering team that builds and operates our cutting-edge DBaaS service on AWS, GCP, and Azure. In this highly visible, hands-on role, you will be responsible for the architecture and leading implementation of features such as authentication, role and attribute-based access control, data encryption, and network security across all three major cloud service providers. You will also role model secure development best practices. At Capella, we are the custodians of our customers' data, and systems and operational security are paramount in everything we do. You will have a critical role in building a cutting-edge DBaaS platform that securely powers some of our customers' most demanding applications. You will collaborate closely with stakeholders across the organization, including engineering, product management, and Infosec.

Requirements

• Minimum of 10 years of experience in software development with at least 5 years of experience in building distributed systems on the cloud.
• At least 3 years of hands-on development experience in Golang.
• Demonstrable hands-on work experience in one or more of the following: Single Sign-On, Role-based and attribute-based access control, data encryption schemes with secure key handling on the cloud, cloud network security such as peered VPC links, Private Endpoints, firewall configuration, and ACLs.
• Expert in one or more AWS, GCP, and Azure offerings and security reference architectures.
• Experience designing and managing large-scale distributed systems in the cloud with clear security boundaries.
• Ability to communicate clearly and drive consensus with stakeholders across the organization.

Nice To Haves

• Relevant certifications in cloud security are helpful but not mandatory.

Responsibilities

• Responsible for designing and implementing interfaces and systems within Capella that pertain to user authentication and authorization, secure data management, network security, and implementing security best practices on all three major cloud platforms.
• Spearhead the development of components that interface with platform-specific IAM, key management, and other services to implement account and data isolation in a multi-tenant architecture.
• Responsible for the security architecture, design, and code reviews of new features and initiatives.
• Drive the implementation of secure architecture best practices and information safeguards applicable in the target cloud environment.
• Conduct threat modeling and risk assessment during the design phases of new components and features.
• Drive and lead secure development lifecycle practices across the engineering team.
• Contribute to security incident detection and response plans and disaster recovery plans and procedures.

Benefits

• Generous Time Off Program - Flexibility to care for you and your family
• Wellness Benefits - A variety of world class medical plans to choose from, along with dental, vision, life insurance, and employee assistance programs
• Financial Planning - RSU equity program, ESPP program, Retirement program and Business Travel Insurance
• Career Growth - Be valued, Create value approach
• Fun Perks - An ergonomic and comfortable in-office / WFH setup. Food & Snacks for in-office employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior