4 hours ago
Base Salary
$227k - $303k/yr
Responsibilities
- Establish architectural approaches for multi-region distributed systems, including failover, replication, traffic management, disaster recovery, and regional independence.
- Design high-scale authorization systems supporting policy authoring, evaluation, enforcement, auditability, and multi-tenant integration.
- Provide technical direction for a Security Token Service covering token issuance, validation, lifecycle management, key rotation, revocation, and service-to-service access.
- Guide the design and implementation of an API Authentication Gateway for secure, observable API authentication and authorization.
- Define fault-tolerance, graceful-degradation, recovery, consistency, caching, concurrency, and ordering strategies for security-critical systems.
- Improve reliability and operability through availability goals, SLOs, metrics, logs, traces, audit events, alerting, incident response, and post-incident learning.
- Lead architecture and design reviews, capacity planning, load testing, performance analysis, and production-readiness assessments.
- Set technical standards for APIs, service contracts, threat modeling, cryptographic key management, secrets handling, observability, and operational readiness.
- Mentor senior and staff engineers and raise engineering standards across the organization.
- Communicate architecture, risks, tradeoffs, and recommendations to technical and executive audiences.
Requirements
- 12+ years of experience designing and building production software, including substantial distributed-systems and platform-infrastructure experience.
- Track record as a principal, staff-plus, distinguished, or equivalent technical leader across multiple teams or a broad technical domain.
- Deep expertise in scalability, availability, latency, consistency, concurrency, partition tolerance, caching, replication, and failure recovery.
- Experience designing and operating security-sensitive or reliability-critical production services.
- Strong software engineering experience with one or more systems languages or backend ecosystems such as Go, Java, Rust, C++, or Python.
- Ability to turn ambiguous requirements into clear architecture, sequenced execution plans, and durable engineering outcomes.
- Experience balancing security, correctness, performance, operational simplicity, and time to value in architecture decisions.
- Strong written and verbal communication skills, including influencing without direct authority and building cross-organizational alignment.
- Experience improving engineering standards, mentoring senior engineers, and helping teams deliver complex systems safely.
- Preferred experience with high-scale authorization systems, policy engines, permission models, policy distribution, decision services, enforcement points, or authorization observability.
- Preferred experience with Security Token Services, identity platforms, credential services, API Authentication Gateways, service-mesh authorization, or centralized authentication and authorization platforms.
- Preferred experience with four-nines availability, high request volume, strict latency objectives, multi-region architecture, replication, disaster recovery, regional isolation, and distributed consistency models.
- Preferred experience with OAuth 2.0, OpenID Connect, SAML, SCIM, JWT, mTLS, SPIFFE/SPIRE, cryptography, key management, HSMs, secrets management, certificate authorities, and secure credential lifecycle management.
- Preferred experience with Kubernetes, cloud infrastructure, service networking, distributed storage, messaging systems, multi-cluster operations, observability, enterprise customers, regulated workloads, or hybrid and multi-cloud environments.
Benefits
- Base benefits include medical, dental, and vision insurance fully paid by CoreWeave, company-paid life insurance, disability insurance, Flexible Spending Account, and Health Savings Account.
- Tuition reimbursement, employee stock purchase plan participation, mental wellness benefits through Spring Health, family-forming support through Carrot, paid parental leave, and childcare support through Kinside.
- 401(k) with an employer match and flexible paid time off.
- Catered lunch at office and data center locations, a casual work environment, and an innovation-focused culture.
- This is a full-time onsite role in Sunnyvale, California, or New York, New York; remote work is not available.
About CoreWeave
CoreWeave provides a GPU-accelerated cloud for AI training and inference, VFX, and rendering, with bare-metal instances, Kubernetes orchestration, and managed services to scale workloads. It sells on-demand and reserved capacity to AI labs, startups, and enterprises, and offers SaaS tools and hands-on support for deployment. Founded in 2017 and headquartered in New York, it is publicly traded on Nasdaq under the ticker CRWV.