Senior Backend Engineer, SSCS: Supply Chain

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Senior Backend Engineer, SSCS: Supply Chain in India.

In this role, you will help build and evolve critical backend systems that secure the software supply chain for enterprise customers at scale. You will work on highly impactful capabilities such as package policy enforcement, artifact signing, provenance verification, and malicious package detection. As part of a founding engineering team, you will have significant ownership over architecture, API design, and system behavior in a fast-moving DevSecOps environment. The role combines strong backend engineering in Ruby on Rails with exposure to complex security and platform challenges. You will collaborate closely with senior engineers and cross-functional teams to shape product direction and deliver secure, high-performance solutions. Operating in a fully remote, async-first culture, you will contribute to building trusted software delivery systems used globally.

• Design and implement backend features across software supply chain security systems, including policy enforcement, artifact signing, provenance attestation, and malware detection integrations
• Build and enhance package policy engines, improving rule evaluation, enforcement logic, and performance within distributed systems
• Develop secure artifact signing and verification workflows, including integrations with modern cryptographic standards and identity-based signing mechanisms
• Create and maintain APIs (REST and GraphQL) used by enterprise customers to configure and manage supply chain security policies
• Integrate supply chain security capabilities into existing policy frameworks, supporting policy-as-code and scalable enforcement models
• Collaborate with adjacent engineering teams to incorporate malicious package intelligence and improve detection workflows
• Write comprehensive automated tests (RSpec and integration tests) to ensure system reliability and prevent regressions
• Participate in code reviews with a strong security-first mindset, ensuring high standards for performance, reliability, and maintainability
• Contribute to architectural decisions alongside senior engineers, influencing design choices across the platform

---

Requirements:

• Strong backend engineering experience with production-level expertise in Ruby on Rails
• Working knowledge of Go or willingness to quickly learn and apply it in production systems
• Experience designing and building APIs, including REST and GraphQL interfaces
• Solid understanding of PostgreSQL, including schema design, indexing, and query optimization
• Familiarity with Redis and distributed caching or coordination patterns
• Security-conscious engineering mindset with awareness of system vulnerabilities and trust boundaries
• Understanding of software supply chain security concepts such as SLSA, SBOMs, artifact signing, or related practices
• Experience working on complex backend systems such as policy engines, registries, or platform infrastructure
• Strong problem-solving skills with the ability to work on ambiguous, high-impact technical challenges
• Excellent collaboration and communication skills in remote or distributed teams
• Familiarity with DevSecOps or security-focused product development is a plus

---

Benefits:

• Competitive salary with equity and employee stock purchase plan
• Fully remote, async-first working environment
• Flexible paid time off and supportive work-life balance policies
• Parental leave and home office support
• Professional growth and development funding
• Access to team member resource groups and inclusive community initiatives
• Opportunity to work on globally used DevSecOps and security infrastructure
• Strong engineering culture focused on ownership, learning, and impact