- Company Name
- Axon
- Job Title
- Senior Software Engineer II
- Job Description
-
**Job Title:** Senior Software Engineer II
**Role Summary:** Own the architecture, scaling, and security of a multi‑tenant, planet‑scale cloud control plane that provisions, secures, and orchestrates global IoT device fleets for real‑time public‑safety operations.
**Expectations:** Lead end‑to‑end design and implementation with a deep focus on reliability, safety, and security‑by‑design. Mentor senior engineers, set engineering standards, and influence long‑term technical strategy across cloud and device teams. Demonstrate a track record of owning high‑impact systems and meeting strict SLOs in distributed environments.
**Key Responsibilities:**
- Design and maintain device provisioning, lifecycle, identity, configuration, command, OTA updates, and rollback in a multi‑tenant control plane.
- Implement security‑first practices: zero‑trust, mutual TLS, certificate rotation at scale, least‑privilege key management (HSM/KMS), and threat modeling.
- Define and enforce engineering standards (API contracts, versioning, deprecation, testing, rollout) and create long‑term roadmaps.
- Collaborate with device teams on transport protocols, schema evolution, edge‑cloud sync, staged rollouts, and failure injection.
- Build observability: metrics, tracing, structured logs, dashboards, runbooks, incident response, capacity planning, and cost guardrails.
- Drive reliability improvements, safety, and performance optimizations across the control plane.
**Required Skills:**
- 10+ years in distributed systems with proven ownership of critical paths and SLOs.
- Deep expertise in control planes, service discovery, orchestration, partitioning/placement, consistency models (CAP, CRDTs, quorum).
- Strong coding in Go (Java or Rust acceptable); design‑first, profiling, and performance tuning.
- Cloud‑native technologies: Kubernetes, containerization, service mesh (Istio/Envoy), gRPC/HTTP 2, backpressure/ circuit‑breaking.
- Streaming/eventing: Kafka, NATS, Pub/Sub, schema evolution (Protobuf, Avro), idempotency, exactly‑once vs at‑least‑once tradeoffs.
- Security: mutual TLS, OAuth/OIDC, JWT, x.509, HSM/KMS, structured threat modeling, defense‑in‑depth.
- IoT domain knowledge: MQTT, WebSockets, device twin/shadow patterns, FIDO Device Onboarding.
- TPM/TPM 2.0 fundamentals, measured boot, remote attestation, key sealing/unsealing, integration with cloud HSM/KMS.
- Experience with large‑scale telemetry, time‑series storage, adaptive sampling, edge‑cloud synchronization, multi‑region rollouts, and canary/blue‑green deployments.
**Required Education & Certifications:**
- Bachelor’s or higher degree in Computer Science, Software Engineering, or a related field.
- Certifications are not mandatory; relevant cloud or Kubernetes certifications (e.g., GCP, AWS, Azure, CKA) are a plus.