Job description

Job Summary: We are looking for a backend engineer to build the Go services behind the k0rdent-ai platform — the multi-tenant control plane for enterprise GPU infrastructure. As AI workloads scale globally, you will collaborate with engineering teams across the US, Europe, and India to design and develop the API-first services that power this ecosystem. You will own features end to end — API contract, service, schema, orchestration, tests, and packaging — with senior engineers alongside you for design review and support. We do not expect you to arrive knowing our whole stack; we expect strong Go and API fundamentals, and the appetite to learn the rest quickly. Working within an agile framework, you will directly impact the reliability and correctness of the infrastructure our customers run in production. Main Responsibilities: • Build Go microservices, model database schemas, and write migrations for the multi-tenant k0rdent AI platform. • Design public REST APIs with OpenAPI, along with multi-language SDKs. • Implement durable orchestration in Temporal — idempotency, retries, timeouts, determinism constraints. • Build event-driven, asynchronous communication between services on a distributed streaming or message-broker platform. • Implement authentication and authorization boundaries across an enterprise IAM platform and an API gateway — OIDC/JWT, service-to-service auth, tenant-scoped RBAC, gateway routing, and rate limiting. • Contribute to the identity model — standards-based user and group lifecycle provisioning (SCIM), and unifying authorization between the platform's API permissions and Kubernetes-native RBAC. • Write unit, integration, and end-to-end tests as part of every change. • Instrument services for production — structured logging, metrics, and audit trails. • Package and ship services with Docker, Helm, and Kubernetes. • Review peers' code and debug incidents to root cause with regression coverage. Required Skills/Abilities: • Bachelor's degree in Computer Science, Software Engineering, or a related field — or equivalent demonstrated ability. • Solid CS fundamentals: data structures, algorithms, concurrency, networking, and how HTTP and databases actually work. • 4-5 years of professional software engineering, including 2-3+ years building production backend services in Go (4+ years of Go preferred). • Strong Go fundamentals: concurrency, context propagation, error wrapping, stdlib HTTP routing (Go 1.22+). • Experience building and shipping REST APIs, and a working understanding of versioning and backward compatibility. • Solid relational database skills — schema design, migrations, transactions, and query tuning. • Testing discipline: unit and integration tests are part of your definition of done, alongside code review and CI/CD (GitHub Actions or equivalent). • Clear written English for design docs, review comments, and asynchronous collaboration across global time zones. • Authorization to work in the United States. Tech Stack (Prior Experience Preferred, Not Mandatory) Candidates with strong Go and API design basics are evaluated primarily; prior familiarity with these tools is beneficial, though on-the-job mastery is anticipated. • Durable Workflow Execution: Temporal orchestrations. • Cloud-Native & Kubernetes Ecosystem: Container orchestration using Kubernetes, Cluster API, custom controllers and operators, Docker runtime, and deployment packaging through Helm charts. • Identity Federation & Ingress Gateway: Keycloak architecture (realms, client configurations, federated providers, auth token lifecycles) alongside Envoy or comparable edge proxies (traffic management, filter chains, rate limiting policies). • Persistence & Event Infrastructure: Relational data persistence in PostgreSQL with database schema migration workflows, coupled with distributed streaming platforms like Apache Kafka or NATS JetStream messaging. Must Have • The "I'll figure it out" instinct — you research, experiment, and read source code before asking to be unblocked, and you ask a well-formed question when you are. • Something you built and can walk us through in detail: what it does, why you designed it that way, and what you would change now. • Willingness to be reviewed rigorously and to treat feedback as the fastest way to get better. • Testing instinct — you can explain how you know your own code works. • Authorization to work in the United States. Nice to Have • Multi-tenant SaaS or PaaS platform experience. • k0s ecosystem experience. • Exposure to GPU infrastructure or AI/ML workload scheduling on Kubernetes. • SCIM provisioning, or federating platform permissions with Kubernetes RBAC. • sqlc, OpenAPI codegen, or other schema-driven toolchains. • Observability: Prometheus, Grafana, OpenTelemetry, audit logging. • Python or TypeScript for E2E suites and client SDKs. • Security engineering: threat modeling, secret management, dependency and container scanning. • CNCF open-source contributions. What does Mirantis offer you? • Work with an established Silicon Valley leader in the cloud infrastructure industry; • Work with exceptionally passionate, talented and engaging colleagues, helping Fortune 500 and Global 2000 customers implement next-generation cloud technologies; • Be a part of cutting-edge, open-source innovation; • Thrive in the high-energy environment of a young company where openness, collaboration, risk-taking, and continuous growth are valued; • Professional development and training; • Attend conferences and working groups; • Company outings, happy hours, hackathons, and tech talks; • Receive a competitive compensation package with a strong benefits plan. We are a Leader for Container Management in G2 (#2 after AWS)!

Requirements

Must-haves

Build Go microservices, model database schemas, and write migrations for the multi-tenant k0rdent AI platform.
Design public REST APIs with OpenAPI, along with multi-language SDKs.
Implement durable orchestration in Temporal — idempotency, retries, timeouts, determinism constraints.
Build event-driven, asynchronous communication between services on a distributed streaming or message-broker platform.
Implement authentication and authorization boundaries across an enterprise IAM platform and an API gateway — OIDC/JWT, service-to-service auth, tenant-scoped RBAC, gateway routing, and rate limiting.
Contribute to the identity model — standards-based user and group lifecycle provisioning (SCIM), and unifying authorization between the platform's API permissions and Kubernetes-native RBAC.
Write unit, integration, and end-to-end tests as part of every change.
Instrument services for production — structured logging, metrics, and audit trails.
Package and ship services with Docker, Helm, and Kubernetes.
Review peers' code and debug incidents to root cause with regression coverage.
Bachelor's degree in Computer Science, Software Engineering, or a related field — or equivalent demonstrated ability.
Solid CS fundamentals: data structures, algorithms, concurrency, networking, and how HTTP and databases actually work.

Nice-to-haves

4-5 years of professional software engineering, including 2-3+ years building production backend services in Go (4+ years of Go preferred).
Tech Stack (Prior Experience Preferred, Not Mandatory)
Multi-tenant SaaS or PaaS platform experience.
k0s ecosystem experience.
Exposure to GPU infrastructure or AI/ML workload scheduling on Kubernetes.
SCIM provisioning, or federating platform permissions with Kubernetes RBAC.
sqlc, OpenAPI codegen, or other schema-driven toolchains.
Observability: Prometheus, Grafana, OpenTelemetry, audit logging.
Python or TypeScript for E2E suites and client SDKs.
Security engineering: threat modeling, secret management, dependency and container scanning.
CNCF open-source contributions.
What does Mirantis offer you?

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

goaiapirestagilekubernetesdockerci/cdmlpythontypescriptaws

Platform: smartrecruiters
Effort: medium

Benefits

Benefits detected in the listing.

Vision

Professional Development