Svitla Systems Inc. is looking for a Senior Python Engineer, Curated Images, for a full-time remote position (40 hours per week) in the USA.
Our client is a cloud-native cybersecurity company that helps organizations automatically and continuously minimize the attack surface of their cloud workloads.
The client is building the next generation of container supply chain security. The Curated Images platform delivers hardened, near-zero-CVE container images for enterprise and federal environments through automated remediation, image minimization, SBOM intelligence, and secure software supply chain workflows. You'll join the team responsible for designing, developing, and operating the backend systems that build, harden, scan, remediate, sign, and distribute curated container images at scale. This role sits at the intersection of backend engineering, Linux systems, container internals, automation, distributed systems, and software supply chain security. The ideal candidate has deep expertise in Python, strong Bash/shell scripting capabilities, and experience building scalable microservices and platform automation systems in production environments.
Note: A candidate must be a U.S. citizen.
Role Overview
It is not a traditional CRUD backend role. We are looking for engineers who enjoy solving difficult infrastructure and platform problems involving: Linux package ecosystems; image hardening; CVE remediation; distributed backend systems; container build systems; cloud-native infrastructure; automation at scale; software supply chain security.
Technical Skills
- Programming Languages: Python (Deep expertise with frameworks like FastAPI, Flask, or Django). Bash/Shell scripting for Linux automation, package remediation, image orchestration, CI/CD workflows. Go (Golang) (Experience building robust, high-concurrency microservices) (Preferred)
- Container Internals: OCI image spec, image layers, multi-stage builds, distroless patterns, image minimization
- Container Build & Registry: Dockerfiles, BuildKit/buildx, OCI distribution spec, registry APIs, manifests, multi-arch builds
- Supply Chain Security: BOM generation and analysis (Syft, CycloneDX, SPDX, Vulnerability scanning (Trivy, Grype). Signing/attestation (cosign, sigstore, SLSA)
- Linux Package Ecosystems: apt, apk, yum/dnf, pip, npm, gem - dependency management, patching, version pinning
- Microservices/Architecture: Designing, developing, and deploying RESTful APIs and distributed backend services
- Security: Keycloak, API authentication, JWT, OAuth 2.0
- Databases: Real-time analytics (ClickHouse). Relational databases (MySQL), including complex query optimization. NoSQL databases (Redis)
- Containerization/Orchestration: Kubernetes for deployment, orchestration, and scaling
- Linux Systems: Linux debugging, networking, filesystem troubleshooting, package management, log analysis
- Testing: Writing comprehensive unit, integration, and end-to-end tests
- Observability: Monitoring, tracing, structured logging, and operational visibility tooling
- CI/CD: Automated deployment pipelines, release management, rollback strategies
Requirements
- 7+ years of professional experience in backend, platform, infrastructure, or systems engineering.
- Strong experience building and operating backend microservices and automation systems in production environments.
- Proven ability to work with and contribute to large-scale distributed systems.
- Experience with cloud platforms (AWS, Azure, or GCP) for deployment, monitoring, and scaling.
- Hands-on experience with Linux automation and containerized environments.
- Experience working with Docker, Kubernetes, and cloud-native infrastructure.
- Strong understanding of software reliability, operational excellence, and production troubleshooting.
Responsibilities
- Design, implement, and maintain scalable backend services powering the Client’s Curated Images platform.
- Build and enhance systems responsible for: image build orchestration; CVE remediation workflows; SBOM generation and enrichment; image signing and attestation; metadata indexing; image publishing pipelines; customer-facing APIs.
- Extend curated image support across Linux distributions, runtimes, and package ecosystems.
- Develop Python- and Bash-based automation for: package remediation; image manipulation; Dockerfile generation; vulnerability reduction; build orchestration; CI/CD workflows;
- Drive image minimization and near-zero-CVE remediation efforts.
- Work directly with Linux package ecosystems, including: apt; apk; yum/dnf; pip; npm; gem;
- Integrate and operate supply chain security tooling, including: Trivy; Grype; Syft; cosign; sigstore.
- Implement secure image publishing, provenance tracking, and attestation workflows.
- Contribute to secure software supply chain initiatives aligned with: SBOM frameworks; SLSA; OCI best practices.
- Ensure services are deployed, monitored, and scaled efficiently in Kubernetes environments.
- Improve observability, monitoring, logging, and operational tooling across the platform.
- Support scalable cloud infrastructure across AWS, Azure, and/or GCP.
- Collaborate with product managers, frontend teams, security research teams, and customer engineering teams to define API specifications and integration points.
- Participate in: code reviews; architecture discussions; planning sessions; incident response; on-call rotations.
- Troubleshoot and resolve complex production issues while ensuring high availability and platform reliability.
- Drive continuous improvement in engineering standards, automation, testing, and operational maturity.
WE OFFER
- US and EU projects based on advanced technologies.
- Competitive compensation based on skills and experience.
- Flexibility in workspace, either remote or our welcoming office.
- Bonuses for article writing, public talks, and other activities.
- Free tech webinars and meetups organized by Svitla.
- Regular corporate online activities.
- Awesome team, friendly and supportive community!
