jobapplier

Senior Engineer (Security Products)

CoreWeave

Skills

Required

  • integration
  • RESTful / gRPC APIs
  • failure modes
  • Go / Java / C++ / Python
  • failure-mode testing
  • relational or distributed data stores
  • asynchronous processing
  • service integration patterns
  • distributed-systems principles
  • concurrency
  • fault tolerance

Preferred

  • OAuth 2.0
  • OpenID
  • workload identity
  • Encryption / key management systems / cloud key management services / HSMs / KMIP
  • SaaS / cloud
  • REST / gRPC
  • Kubernetes / cloud infrastructure / infrastructure as code / platform engineering

Join CoreWeave, an AI-native cloud platform, as a Senior Engineer in the Security Products organization. You will design, build, and operate scalable web services that protect customer data and enforce access decisions. This role requires strong backend problem-solving skills and experience in building and operating production backend services. You will collaborate with various teams, mentor engineers, and have a direct impact on the trust and adoption of the CoreWeave platform.

Responsibilities

  • Design and implement scalable, reliable backend services using REST and/or gRPC APIs, and own services through their full lifecycle.
  • Collaborate with cross-functional teams to deliver secure and usable platform capabilities, and support integrations with customers’ on-premises and cloud environments.
  • Mentor engineers and contribute to a culture of technical excellence, ownership, and continuous learning, while influencing architecture beyond your immediate area.
  • Strong professional experience building and operating production backend services and improving their reliability, performance, and maintainability.
  • Sound judgment when working with sensitive data, trust boundaries, authorization decisions, and security-sensitive failure modes
  • Load testing, performance analysis, capacity modeling, and scaling strategy
  • Integrating SaaS or cloud services with customer-managed on-premises infrastructure, private clouds, public clouds, and enterprise security products
  • Kubernetes, cloud infrastructure, infrastructure as code, or platform engineering

Requirements

  • Fluency in Go, Java, C++ or Python; willingness to work primarily in Go
  • Strong testing practices, including unit, integration, contract, load, and failure-mode testing as appropriate
  • Experience with relational or distributed data stores, asynchronous processing, and service integration patterns
  • Deep understanding of distributed-systems principles, including consistency, concurrency, fault tolerance, networking, and service-to-service communication
  • This position requires access to export controlled information.
  • To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency.
  • CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process

Experience designing and implementing RESTful and/or gRPC APIs

  • Ability to communicate technical decisions clearly in design documents, reviews, and cross-functional discussions
  • The ideal candidate combines strong software-engineering fundamentals with sound judgment around reliability, security boundaries, failure modes, and operational trade-offs
  • Experience in one or more of the following areas is helpful but not required:
  • SRE and reliability practices, including incident response, error budgets, capacity planning, and operational readiness
  • Building security products for enterprise, regulated, or otherwise security-sensitive customers

SCIM, enterprise identity integrations, SSO, or lifecycle management

  • Designing or building authorization systems at scale, including policy evaluation, permissions, tenant isolation, or least-privilege access
  • Service observability using metrics, structured logging, distributed tracing, and production diagnostics

Preferred

  • OAuth 2.0, OpenID Connect, workload identity, federation, or related identity protocols
  • Encryption, key management systems, cloud key management services, HSMs, or KMIP

Pay

USD 182,000 - 242,000