Red hat RHTAS Senior Software Engineer - Model Signing Attestations 

Ireland 

951772954

About the job

This is a pivotal role that encompasses both product engineering responsibilities and significant contributions to the vibrant open-source community.

This involves sharing your expertise, providing guidance on best practices, and empowering colleagues to become more proficient contributors. A significant aspect of this position involves architectural design.

You will be instrumental in defining the architectural framework for new projects and features, ensuring scalability, security, and maintainability. This requires an understanding of the technology stack and the ability to translate high-level requirements into concrete implementation plans.

From the initial conceptualization phase to the successful integration of your work upstream, you will have the opportunity to shape the future direction of the RHTAS product.

You will be expected to manage your tasks effectively and independently, while also maintaining regular and open communication with fellow team members and upstream developers.

This communication will involve both technical discussions and broader project coordination, ensuring alignment and progress. Your ability to articulate complex technical concepts clearly and concisely, both in written and verbal form, will be crucial to your success.

What you will do

• Upstream Community Contributions: Actively engage with and drive contributions within the upstream open-source communities relevant to the Red Hat Trusted Artifact Signer (RHTAS) project, particularly around AI model signing, attestations and validation , but may include any aspect of the product outside of this area. This involves undertaking new development work, conceptualizing and implementing innovative features, and addressing and resolving bug fixes reported by users or identified internally. Proactively participate in community discussions, code reviews, and contribute to documentation to ensure a collaborative and thriving ecosystem.

• Product Development, Maintenance, and Release: Take shared ownership of the complete lifecycle of the Red Hat Trusted Artifact Signer product. This includes developing new functionalities and enhancements, maintaining the existing codebase for stability and performance, and orchestrating the smooth and timely release of new versions. Ensure adherence to best practices for software engineering, including thorough testing, version control, and documentation.

• Downstream Product Efforts & Delivery: Spearhead downstream product efforts. Ensure the reliable and efficient delivery of production-ready software to customers and internal stakeholders. Drive the development of new features based on customer requirements and market trends, integrating them seamlessly into the product.

• Cross-Product Integration: Facilitate and drive cross-product integration efforts between RHTAS and other products within the Red Hat ecosystem. Collaborate with other engineering teams to understand their product functionalities and requirements, and design interfaces and integration points that ensure interoperability and a cohesive customer experience.

• Product Security Compliance: Prioritize and ensure the security compliance of the Red Hat Trusted Artifact Signer product. Conduct regular security assessments, identify potential vulnerabilities, and implement appropriate security measures to protect against threats. Stay up-to-date on the latest security best practices and compliance requirements and ensure the product adheres to them.

• Community & Product Evangelism: Act as a key advocate for both the community and the product. Engage in community evangelism through various channels, including writing blog posts, creating demonstrations, and delivering presentations at conferences and events. Share knowledge, best practices, and the value proposition of RHTAS with the broader community and potential customers.

What you will bring

• Proven experience delivering enterprise-grade software solutions.

• Deep understanding of Kubernetes architecture and its ecosystem.

• Familiarity with AI models and deployment workflows

• Some experience with supply chain security ( signatures, attestations, SBOMs , etc)

• Proficiency in the Go programming language , with experience in other relevant languages.

• Skill in designing and implementing robust CI/CD pipelines.

• Strong production troubleshooting skills and the ability to diagnose and resolve complex issues.

• Familiarity with agile development methodologies and practices.

• A strong drive for continuous learning and staying up-to-date with the latest technologies.

• Effective professional-level English communication skills, both written and verbal.

• Experience with Python or Node.js is desirable but not required.

The following are considered a plus

• Understanding of cryptographic principles including digital signatures, key lifecycle, certificate management, and robust key management practices.

• Experience with the Sigstore upstream project and its architecture.

• Proficiency in the Ansible project and its tooling, such as writing playbooks and managing configurations.