3 months ago
Base Salary
$175k - $236k/yr
Responsibilities
- Architect and deliver Drata’s internal AI platform, including MCP servers, agent customizations, workflows, engineering harnesses, and integrations.
- Build custom agent skills, subagents, hooks, and plugins for code review, test generation, pull request triage, on-call, release notes, and migrations.
- Create asynchronous, recoverable, long-running agents that automate code generation, verification, testing, and delivery.
- Roll out and customize AI coding tools across the engineering organization.
- Integrate AI into CI/CD through automated review, documentation, migration, bug triage, test generation, and autonomous coding workflows.
- Build governance, telemetry, cost tracking, audit trails, security policy enforcement, secrets scrubbing, and prompt-injection defenses.
- Design production evaluations to measure agent quality, engineering impact, time savings, and cost.
- Measure adoption and engineering productivity and adjust the platform accordingly.
- Partner with Security, Legal, and Compliance to maintain customer-trust boundaries for AI usage.
- Set technical direction, make architecture decisions, mentor engineers, review designs, and participate in coding, post-mortems, and on-call.
Requirements
- 7+ years of experience as a software engineer building production systems and platforms.
- At least 1 year of hands-on experience customizing or extending AI coding tools in a real engineering context.
- Daily use of AI coding tools and deep working knowledge of MCP, including authoring servers, tool interfaces, permissions, and authentication.
- Strong working knowledge of the Anthropic API or equivalent APIs, including tool use, structured outputs, prompt caching, batch APIs, and streaming.
- Experience building agentic workflows across planning, code generation, verification, testing, and delivery.
- Experience integrating AI into CI/CD pipelines, including GitHub Actions, automated pull request review, test generation, and background coding agents.
- Strong production experience with TypeScript, Node.js, or Python; backend and systems experience; and familiarity with event-driven architectures and CI/CD systems.
- Experience building developer-facing tooling such as CLIs, GitHub Apps, or internal portals.
- Understanding of AI security and governance, including code and data egress, secrets in prompts, prompt injection, audit trails, cost, latency, caching, batch jobs, asynchronous agents, and model selection.
- Strong experience with Node.js, TypeScript, Temporal, MySQL, Git, and AWS.
- Familiarity with engineering productivity measurement frameworks such as DORA, DX, and SPACE.
- Track record of owning ambiguous platform problems, making architecture decisions, mentoring engineers, and communicating through design documents, RFCs, and post-mortems.
- Strongly preferred: published agent skills, plugins, or open-source AI developer tool contributions.
- Nice to have: GitHub App development at scale and Terraform.
- Self-directed, adaptable, analytical, and capable of negotiating complex quality, speed, build-versus-buy, and adoption tradeoffs.
Benefits
- Hybrid work model in the Bay Area with in-office collaboration Tuesday through Thursday and flexible Mondays and Fridays.
- Stock equity, typically in the form of Restricted Stock Units (RSUs).
- Up to 100% employer-paid medical, dental, and vision premiums for employees and dependents.
- 401(k), company-paid life and disability insurance, tax-advantaged spending accounts, and discounted voluntary benefits.
- Paid parental leave after six months, plus Kindbody fertility and family-building benefits.
- Annual professional and personal development stipends and internal learning opportunities.
- Flexible vacation policy, paid holidays, and other time-off benefits.
Categories
About Drata
Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Powered by AI and designed to operationalize trust, the Drata Agentic Trust Management Platform continuously interprets controls, risk, and assurance signals—reducing repetitive manual work while improving visibility into internal and third-party risk, enabling always-on audit readiness across compliance frameworks, and accelerating security reviews. Purpose-built for enterprise complexity, Drata unifies governance, risk, compliance, and assurance to deliver faster time-to-value, reduce operational overhead, and enable continuous trust for 8,000+ organizations worldwide.