SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 229,500 - 260,000 / annual
Horizon3.ai is a fast-growing remote cybersecurity company building NodeZero, an autonomous penetration testing platform that helps organizations proactively find and fix exploitable attack vectors. NodeZero runs as a container in customer infrastructure and is deployed across thousands of organizations ranging from educational institutions to Global 100 enterprises.
You will be the technical anchor for the Over-The-Air (OTA) Services team, owning how NodeZero updates itself across thousands of customer deployments without customer intervention, downtime, or introducing new vulnerabilities. This is a hands-on staff-level role where you will write production code, design system architecture, set technical direction, and mentor mid-level engineers.
Key responsibilities include:
- Design and own the complete OTA update system: delivery protocol, version negotiation, rollout orchestration, health verification, and automatic rollback
- Own deployment fleet management systems that track version state across all NodeZero instances
- Design safe rollout strategies including phased rollouts, canary deployments, customer pinning, and emergency hold mechanisms
- Design delivery mechanisms that work reliably in constrained environments including air-gapped networks and strict egress policies
- Own OTA system reliability end-to-end and participate in on-call for delivery failures and version drift incidents
- Mentor P4 engineers through design review, code review, and technical pairing
The OTA Services team works closely with the Image Build & Release team. This role reports to the Client Platform Engineering Manager. Up to 5% travel may be required.
Requirements:
- 8+ years of professional software engineering experience with deep specialization in distributed systems, remote update systems, or fleet management infrastructure
- Deep understanding of remote update system design including delivery protocols, version negotiation, delta delivery, health verification, and rollback semantics
- Experience designing rollout strategies for software deployed across heterogeneous, customer-managed production environments
- Strong proficiency in Go, Python, or Rust for systems-level infrastructure work
- Experience building software that operates in constrained or air-gapped environments
- Deep understanding of Kubernetes deployment management, updates, and monitoring
- Experience with container image distribution (OCI artifacts, image manifests, layer caching, registry protocol)
- Strong understanding of mTLS, certificate lifecycle, and secure channel establishment
- Track record of setting engineering standards that other engineers adopt
- Ability to produce clear architecture documents and drive technical decisions across team boundaries
- Experience mentoring mid-level engineers through design review and code review
Nice to haves:
- Experience with Kubernetes operators or controller patterns
- Background in cybersecurity or experience building software for regulated/high-security environments
- Familiarity with Fleet or similar open-source fleet management tools
- Experience with signed artifact delivery and chain-of-custody verification
