3 hours ago
Responsibilities
- Build and operate Fleet platform services including an API gateway, Kafka-based event routing, Zitadel machine identity integration, capability grant management, and ClickHouse-backed immutable audit ledger writes.
- Implement a pluggable Secret Management and KMS abstraction supporting AWS KMS, Azure Key Vault, Google Cloud KMS, BYOK, envelope encryption, and per-client cryptographic isolation.
- Build the capability grant enforcement pipeline using Zitadel-issued grants and sidecar validation on inbound requests.
- Own the GitOps-based automation catalog deployment pipeline for versioning and deploying workflow definitions to per-client Temporal namespaces.
- Develop MSP onboarding tooling for Zitadel organization provisioning, compliance tier configuration, and per-client KMS setup.
- Contribute to Safe Connector Layer vendor API wrapper services that enforce scope, inject managed credentials, and log calls before execution.
- Instrument platform services with structured logging, distributed tracing, and metrics.
Requirements
- Strong backend engineering experience with Go or Rust; the team is moving away from Java-heavy backgrounds for new platform work.
- Experience building event-driven systems using Kafka, event-sourcing patterns, and at-least-once delivery guarantees.
- Familiarity with Temporal or another durable workflow engine.
- Experience with IAM systems, OAuth 2.0, OIDC, token lifecycle management, and fine-grained authorization models.
- Understanding of envelope encryption, key hierarchy design, and KMS integrations.
- Experience operating in multi-tenant, regulated environments where correctness and audit evidence are critical.
- Strong observability practices, including structured logging, distributed tracing, and metrics.
- Preferred experience with Zitadel, Keycloak, or similar identity providers; ClickHouse or other columnar or append-only stores; MSP tooling; PSA/RMM API integrations; or compliance-adjacent infrastructure such as CMMC, HIPAA, or SOC 2.
About Kaseya
Kaseya is the leading global provider of AI-powered IT management and cybersecurity software. Kaseya delivers a unified technology platform to manage infrastructure, secure endpoints, back up critical data, and streamline operations for more than 40,000 MSP and SMB customers around the globe. To learn more, visit www.kaseya.com.