Full Stack Staff Software Engineer
Summary
Build and scale Sonatype’s secure software supply chain products using Java/Kotlin backend, React frontend, and cloud-native tools like Kubernetes and AWS.
At Sonatype, we empower developers with best-in-class tools to build secure, high-quality software at scale. Our mission is to create a world where software is always secure and developers can innovate without fear. Trusted by thousands of organizations, including Fortune 500 companies, we are pioneers in software supply chain management, open-source security, and DevSecOps.
We're looking for a Full Stack Staff Software Engineer to help us shape the future of secure software development. If you love solving complex problems, working with cutting-edge technologies, and mentoring engineering teams, we’d love to hear from you.
What you will do
As a Staff Software Engineer, you will play a critical role in designing, developing, and scaling Sonatype’s core products. You’ll work across the stack—building powerful backend services, intuitive frontend experiences, and robust cloud-native applications. You'll also provide technical leadership and mentorship, influencing engineering best practices across the team.
Key Responsibilities:
-
Architect and build scalable, secure, and resilient backend systems using Java, Kotlin, or other JVM-based languages.
-
Lead design and implementation efforts for core components across cloud-native services (e.g., Kubernetes, Docker, AWS/GCP/Azure).
-
Contribute to the development and enhancement of Sonatype’s software supply chain security products (e.g., Nexus Repository, Nexus IQ).
-
Collaborate with product management and cross-functional teams to translate complex business requirements into robust technical solutions.
-
Champion modern DevSecOps practices, integrating security into CI/CD pipelines and ensuring automation across build and deployment processes.
-
Guide and mentor engineering teams through technical challenges, providing architectural guidance and code reviews.
-
Advocate for and implement best practices in testing, observability, reliability, and performance optimization.
-
Evaluate and integrate open-source tools and libraries, contributing back to the community when appropriate.
-
Drive improvements in platform scalability, data processing pipelines, and distributed system architecture.
-
Participate in and lead incident response, root cause analysis, and long-term reliability engineering efforts.
What we are looking for
We are seeking an experienced engineer who thrives in an agile, collaborative environment and enjoys tackling technical challenges.
Minimum Qualifications:
-
8+ years of professional software engineering experience, including 2+ years in a Staff Engineer or equivalent technical leadership role.
-
Proven experience designing and building scalable, production-grade full stack applications.
-
Strong proficiency in Java and/or Kotlin on the backend, with experience building RESTful APIs and microservices.
-
Proficiency with modern frontend frameworks such as React, Vue, or similar JavaScript/TypeScript libraries.
-
Solid understanding of cloud-native architecture and experience deploying applications to cloud platforms (AWS, GCP, or Azure).
-
Experience with containerization and orchestration tools (Docker, Kubernetes).
Familiarity with secure software development practices and integrating security into full stack applications. -
Skilled in automated testing, CI/CD pipelines, and modern DevOps workflows.
-
Strong communication and collaboration skills, with experience working across engineering, product, and design teams.
Bachelor’s degree in Computer Science, Engineering, or a related field—or equivalent practical experience. -
Experience working in an agile environment and collaborating with cross-functional teams.
-
Passion for mentoring and coaching engineers.
Nice-to-Have Skills:
-
Experience with security-focused development (e.g., OWASP, SAST, DAST).
-
Knowledge of infrastructure as code (Terraform, CloudFormation).
-
Familiarity with serverless architectures (AWS Lambda, API Gateway).
-
Open-source contributions or community involvement.