Senior Engineering Manager (Client Platform)

Join NodeZero as a Senior Engineering Manager for the Client Platform team. You will lead the development of the software that enables autonomous pentesting in customer environments. Your responsibilities will include managing two sub-teams, overseeing CI/CD workflows, architecting the over-the-air update delivery system, collaborating with security research, and acting as a product owner. This role offers growth opportunities, an innovation-driven culture, an inclusive and diverse team, and a flexible work environment.

Lead and manage the Client Platform team, overseeing the Image Build & Release and OTA Services sub-teams, and setting the technical and cultural direction for the organization.

Drive the end-to-end CI/CD workflows for creating, signing, and publishing the NodeZero runner container image, and own software supply chain security.

Responsibilities

• Collaborate closely with Security Research to ensure the runner seamlessly executes new autonomous pentest capabilities as they ship, and act as a Product Owner in managing the client-side roadmap.
• Experience designing and operating OTA update mechanisms for distributed agents or edge software at scale — including staged rollouts, rollback, and delivery verification
• Experience implementing robust software supply chain practices — secure builds, image signing (cosign, Notary), reproducible builds, and vulnerability scanning in CI
• Ability to reason about correctness in opaque, customer-controlled environments where you cannot observe failure modes directly
• Demonstrated expertise leading teams that design, build, and operate containerized software (Docker, VM images) deployed into on-premise or customer-managed environments
• Proven ability to define and instill engineering culture: rigorous code review standards, robust testing across diverse customer environments, and a strong culture of ownership
• Drives high-impact architecture decisions rigorously — requires design documents, runs structured reviews, builds consensus, and ensures decisions account for customer environment variables
• Understanding of TLS, certificate pinning, and secure software delivery in hostile network environments

Requirements

• Experience building or significantly growing an engineering team — including hiring, onboarding, and establishing engineering norms tailored for shipped software
• Experience with CI/CD pipelines for building and signing container images (cosign, Notary v2, or equivalent)
• Strong Linux OS-level operations: container runtimes, networking in corporate environments, systemd, process isolation

Proficient in Go (preferred), Python, or C++

• Familiarity with OTA update protocols and frameworks: TUF (The Update Framework), Omaha, or custom mechanisms
• Exposure to cybersecurity, pentesting tools, or vulnerability remediation
• Experience with cross-platform agents (Windows/Linux) and endpoint telemetry
• Background in software running in air-gapped or restricted network environments
• Familiarity with SLSA supply chain security framework

Pay

USD 242,250 - 275,000