Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform.
Requirements
- Proficiency with a high-level programming language (eg: Python, Go), bash scripting and linux
- Proficiency in modern technical operating practices
- System architecture & design experience
- Continuous integration / continuous delivery (Jenkins, FluxCD and GitHub Actions)
- Infrastructure as Code (Terraform)
- Cloud services (AWS) and Kubernetes
- SRE principles & practices
- Experience with specific AWS offerings, including many of: ECS/EKS/ECR, EC2, S3, RDS, VPCs, IAM Policy Docs, Policies, Roles, and Instance Profiles, Cloudwatch Logs, Docker Containers and orchestration (ECS, EKS)
- Terraform and the use of Terraform modules
- Kubernetes cluster concepts and design
- Experience improving service observability: monitoring agents, metrics, logging and dashboards. Knowledge of OpenTelemetry and Prometheus and observability platforms similar to DataDog, Splunk, Dynatrace or Observe
Benefits
- Company Wellness Week
- Paid Volunteer Time Off (VTO)