
Principal Software Engineer
Deluxe Corporation19 days ago
Burbank, CA, USAStaff+
Base Salary
$170k - $200k/yr
Responsibilities
- Own the design of new services and decomposition of legacy applications, including service boundaries, domain models, API contracts, data ownership, migration strategies, and modernization patterns.
- Define and demonstrate standards for API design, versioning, error handling, idempotency, retries, concurrency, resilience, testing, event-driven messaging, and data access.
- Design and implement shared capabilities on a Kubernetes/EKS-based microservices platform, including service templates, golden paths, paved-road tooling, shared libraries, and SDKs.
- Own versioning, releases, deprecation policies, and downstream migrations for shared libraries and SDKs.
- Architect and evolve identity systems for employees, contractors, partners, and machine-to-machine workloads, including OIDC/OAuth2, authentication flows, token lifecycle, sessions, federation, and browser security.
- Contribute to and review Terraform, CDK, CloudFormation, Helm, Kubernetes manifests, and infrastructure delivery code for AWS and EKS services.
- Act as a senior technical reviewer for RFCs, ADRs, architecture reviews, reference architectures, and major modernization decisions.
- Mentor senior engineers and architects through design reviews, code reviews, pairing, and technical planning without direct people-management responsibility.
Requirements
- 12+ years designing, building, and operating distributed production systems, including 4+ years at staff, principal, or architect-level scope.
- Currently hands-on, with production code shipped within the past year and an intention to continue coding and debugging.
- Demonstrated depth in software architecture, service decomposition, API design and versioning, domain and data modeling, and distributed-systems resilience patterns.
- Experience incrementally decomposing or replacing legacy applications while maintaining delivery.
- Solid working knowledge of AWS and Kubernetes/EKS as an application platform.
- Experience building shared libraries, SDKs, or internal platforms used by multiple engineering teams, including versioning and consumer migration.
- Substantive identity and access experience with OIDC/OAuth2, SAML, token and session security, and browser security.
- Strong proficiency in at least one modern backend language and ability to read and review code in others; Go or Python experience is advantageous.
- Experience with PHP, .NET, or Java is valuable for working across existing services.
- Comfort reading, extending, and reviewing infrastructure-as-code with Terraform and CDK.
- Excellent written communication and experience producing design documents, decision records, and technical plans.
- Track record of influencing engineering direction across teams without formal authority.
- Preferred qualifications include media, entertainment, or digital supply-chain experience; PostgreSQL depth; deeper Terraform ownership; observability and FinOps practice; and experience across global time zones.
- Additional desirable experience includes media supply-chain standards, content security or DRM frameworks, and integrating AI/ML pipelines or workflow orchestration into production platforms.
Benefits
- Medical, dental, and vision coverage.
- Vacation and sick leave.
- 401(k) plan and additional benefits.
- Hybrid work arrangement in Burbank, California.