Staff Software Engineer, Image Build & Release

Horizon3.ai

. Design and own the CI/CD pipeline producing NodeZero container images from source to signed and scanned distribution-ready artifacts .

Posted 10/23/2026full-timeRemote • United StatesLead💰 $229,500 - $260,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in CI/CD pipeline design and management, with a strong focus on container image construction, security compliance, and rollout strategies. Proven ability to mentor engineers and drive architectural decisions across teams.

Highest-signal resume keywords

CI/CD Pipeline ManagementDocker Container Image ConstructionImage Signing and VerificationKubernetes ExpertiseMentoring and Code Review

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CI/CDDockerGoPythonShell ScriptingImage ScanningArtifact Lifecycle ManagementOTA Update SystemsVersioningBuild Systems

Soft Skills

MentoringTechnical Decision-MakingCollaboration

Tools & Technologies

GitHub ActionsGitLab CITektonTrivyGrypeSnykCosignNotaryECRGCR

Industry Keywords

Containerized ApplicationsImage HardeningCVE ScanningRelease EngineeringBuild Reproducibility

Tech Stack

Tools & technologies

DockerKubernetesPythonShell ScriptingGo

About the role

Key responsibilities & impact

Design and own the CI/CD pipeline producing NodeZero container images from source to signed and scanned distribution-ready artifacts
Define image hardening, CVE scanning, and signing strategies meeting security and compliance requirements
Partner with the OTA Services team to design reliable and safe image-update delivery to customer-deployed NodeZero instances
Define rollout strategies, rollback procedures, and version pinning
Set standards for build reproducibility, artifact versioning, and release gating across the Client Platform team
Mentor P4 engineers through code reviews, design reviews, and architectural pairing
Write code and produce architecture designs
Own build and release infrastructure end-to-end, including on-call responsibility for pipeline failures, build-time regressions, and delivery incidents
Report to the Client Platform Engineering Manager and work directly with the OTA Services team

Requirements

What you’ll need

8+ years of professional software engineering experience, specializing in build systems, CI/CD, or release engineering for containerized applications
Expert-level knowledge of Docker and container image construction, including multi-stage builds, base image selection, layer optimization, and image hardening
Experience with container image signing and verification using Cosign, Notary, or equivalent
Experience with image scanning toolchains such as Trivy, Grype, Snyk, or equivalent
Strong experience building and operating CI/CD pipelines at scale, using GitHub Actions, GitLab CI, Tekton, or equivalent
Deep understanding of Kubernetes, including image pulling, versioning, and updates in running clusters
Experience designing and operating OTA or remote update systems, including rollout strategies, delta delivery, version negotiation, and rollback
Proficiency in Go, Python, or shell scripting
Experience with artifact registries such as ECR, GCR, Docker Hub, or Harbor and artifact lifecycle management
Track record of setting engineering standards adopted by other engineers
Ability to produce architecture documents and drive technical decisions across team boundaries
Experience mentoring mid-level engineers through design and code review
Minimum 25Mbps consumer-grade broadband connection
Legally authorized to work in the United States

Benefits

Comp & perks

Equity package in the form of stock options may be available
Health, vision, and dental care for employees and their families
Flexible vacation policy
Generous parental leave
Remote work flexibility
Career development opportunities
Inclusive and collaborative work environment