Staff Software Engineer
Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.
As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.
More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.
About the role
At Sonatype, we empower developers with best-in-class tools to build secure, high-quality software at scale. Our mission is to create a world where software is always secure and developers can innovate without fear. Trusted by thousands of organizations, including Fortune 500 companies, we are pioneers in software supply chain management, open-source security, and DevSecOps.
We’re looking for a Staff DevOps Engineer to join our Developer Experience team and help shape how Sonatype builds, deploys, and operates secure, reliable services at scale.
In this role, you’ll combine deep technical expertise with Staff-level leadership to improve our cloud infrastructure, developer platform, automation, and service delivery practices. You’ll partner closely with engineering teams to make it easier and safer to take services from development to production while improving reliability, observability, and operational excellence.
What you'll do:
Design, develop, test, and maintain software that powers product provisioning, licensing, and purchasing capabilities across Sonatype's platform.
Build scalable, reliable, and maintainable backend services using modern engineering practices.
Contribute to technical design discussions and help drive high-quality architectural decisions.
Collaborate closely with engineers, product managers, and cross-functional teams to deliver impactful features.
Write clean, well-tested, and maintainable code while participating in code reviews.
Troubleshoot production issues and continuously improve system performance, reliability, and scalability.
Mentor and coach other engineers through technical guidance, design reviews, and knowledge sharing while remaining deeply involved in day-to-day development.
Contribute to automation, infrastructure improvements, and cloud-native engineering practices.
What success looks like:
You deliver high-quality, maintainable software that reliably supports Sonatype's provisioning, licensing, and purchasing capabilities.
You become a trusted technical contributor who proactively solves complex engineering problems.
You collaborate effectively across engineering teams, helping drive technical excellence and delivering value to customers.
You mentor and support fellow engineers through thoughtful feedback, technical guidance, and code reviews while remaining a highly productive individual contributor.
You continuously improve the reliability, scalability, and maintainability of the systems your team owns.
You embrace ownership, take initiative, and consistently deliver meaningful impact through hands-on software development.
What you'll bring:
6+ years of professional software engineering experience developing production-grade applications.
Direct experience using agent-driven development and code review.
Strong experience building backend applications with Java.
Experience with additional programming languages like Golang and Python.
Experience working with cloud platforms, particularly AWS.
Hands-on experience with containerization and infrastructure technologies such as Docker, Terraform, and Ansible.
Experience with build and dependency management tools such as Maven.
Experience working with relational databases such as PostgreSQL or MySQL.
Experience with event-driven architectures and microservices.
Strong understanding of software design principles, testing, debugging, and distributed systems.
A collaborative mindset with excellent communication skills and a passion for mentoring fellow engineers.
A desire to remain highly technical and hands-on while contributing technical leadership within the team.
It’d be great if you also had:
Exposure to Microsoft Azure and/or Google Cloud Platform (GCP).
Experience building or supporting commercial platforms involving licensing, provisioning, subscription management, or purchasing systems.
Experience working in Agile development environments.
Familiarity with DevOps and CI/CD best practices.
Things we are proud of:
- 2026 Gartner® Magic Quadrant™ Leader for Software Supply Chain Security
- 2026 Celebrating 15 Years of Sonatype Research Labs - Industry-leading software supply chain and open source security research
- 2026 Founding Member of the Linux Foundation Initiative for Open Source Sustainability
- 2026 State of the Software Supply Chain® Report - Continuing industry leadership in software supply chain security and AI security research
- 2025 Visionary in Gartner® Magic Quadrant™ for Application Security Testing!
- 2025 AI Compliance Solution of the Year - AI Breakthrough Awards
- 2025 DEVIES Award to our SBOM Manager for a new product for its innovation and impact in developer technology
- 2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
- Constellation AST Shortlist: Sonatype has been listed on the Constellation ShortList™ for Application Security Testing for 2024
- Data Breakthrough Awards: Sonatype was announced as a 2024 winner in the "Open Source Data Solution of the Year."
- SD Times: Best in Show Security
- Fast Company Best Workplaces for Innovators 2024
- The Herd Top 100 Private Software Companies 2024
- Diversity & Inclusion Working Groups
- Parental Leave Policy
- Paid Volunteer Time Off (VTO)