Software Engineer, Backend (Go)

Mirantis is a Kubernetes-native AI infrastructure company enabling organizations to build and operate scalable, secure, and sovereign infrastructure for modern AI, machine learning, and data-intensive applications. The Backend Software Engineer will build Go services for the multi-tenant k0rdent-ai control plane, owning features across APIs, databases, orchestration, testing, and packaging while contributing to the reliability of production infrastructure.

Responsibilities:

• Build Go microservices, model database schemas, and write migrations for the multi-tenant k0rdent AI platform
• Design public REST APIs with OpenAPI, along with multi-language SDKs
• Implement durable orchestration in Temporal — idempotency, retries, timeouts, determinism constraints
• Build event-driven, asynchronous communication between services on a distributed streaming or message-broker platform
• Implement authentication and authorization boundaries across an enterprise IAM platform and an API gateway — OIDC/JWT, service-to-service auth, tenant-scoped RBAC, gateway routing, and rate limiting
• Contribute to the identity model — standards-based user and group lifecycle provisioning (SCIM), and unifying authorization between the platform's API permissions and Kubernetes-native RBAC
• Write unit, integration, and end-to-end tests as part of every change
• Instrument services for production — structured logging, metrics, and audit trails
• Package and ship services with Docker, Helm, and Kubernetes
• Review peers' code and debug incidents to root cause with regression coverage

Requirements:

• Bachelor's degree in Computer Science, Software Engineering, or a related field — or equivalent demonstrated ability
• Solid CS fundamentals: data structures, algorithms, concurrency, networking, and how HTTP and databases actually work
• 4-5 years of professional software engineering, including 2-3+ years building production backend services in Go
• Strong Go fundamentals: concurrency, context propagation, error wrapping, stdlib HTTP routing (Go 1.22+)
• Experience building and shipping REST APIs, and a working understanding of versioning and backward compatibility
• Solid relational database skills — schema design, migrations, transactions, and query tuning
• Testing discipline: unit and integration tests are part of your definition of done, alongside code review and CI/CD (GitHub Actions or equivalent)
• Clear written English for design docs, review comments, and asynchronous collaboration across global time zones
• Authorization to work in the United States
• The "I'll figure it out" instinct — you research, experiment, and read source code before asking to be unblocked, and you ask a well-formed question when you are
• Something you built and can walk us through in detail: what it does, why you designed it that way, and what you would change now
• Willingness to be reviewed rigorously and to treat feedback as the fastest way to get better
• Testing instinct — you can explain how you know your own code works
• 4+ years of Go
• Durable Workflow Execution: Temporal orchestrations
• Cloud-Native & Kubernetes Ecosystem: Container orchestration using Kubernetes, Cluster API, custom controllers and operators, Docker runtime, and deployment packaging through Helm charts
• Identity Federation & Ingress Gateway: Keycloak architecture (realms, client configurations, federated providers, auth token lifecycles) alongside Envoy or comparable edge proxies (traffic management, filter chains, rate limiting policies)
• Persistence & Event Infrastructure: Relational data persistence in PostgreSQL with database schema migration workflows, coupled with distributed streaming platforms like Apache Kafka or NATS JetStream messaging
• Multi-tenant SaaS or PaaS platform experience
• k0s ecosystem experience
• Exposure to GPU infrastructure or AI/ML workload scheduling on Kubernetes
• SCIM provisioning, or federating platform permissions with Kubernetes RBAC
• sqlc, OpenAPI codegen, or other schema-driven toolchains
• Observability: Prometheus, Grafana, OpenTelemetry, audit logging
• Python or TypeScript for E2E suites and client SDKs
• Security engineering: threat modeling, secret management, dependency and container scanning
• CNCF open-source contributions