Automated WireGuard networks for distributed systems and Kubernetes

Principal Security Engineer

$110k - $180k / 0.25% - 1.50%
Job Type
3+ years
Connect directly with founders of the best YC-funded startups.
Apply to role ›
Dillon Carns
Dillon Carns

About the role

We’re seeking a talented security engineer to join our growing team. You will be a key part of a core engineering team who develops and maintains the Netmaker platform.

This role will be focused on security aspects of the platform. All code is written in Golang. Check out the code base here to see what you would be working on:

Your focus will be on ensuring the security of the platform across a variety of environments. You will enhance the design of the backend and client-side code, augmenting it as necessary to increase trust in the platform.

Areas of Focus:

  • Minimize permissions on client-side binary / service
  • Linux
  • Better protect and distribute user keys and tokens
  • Verification of access requests
  • Cryptography best practices
  • API protection
  • Secrets storage locally (client side)
  • Familiarity with networking is a plus
  • Familiarity with code audits is a plus.

You should be comfortable both working independently and pairing with others. You should have a keen interest in holistically improving the platform, be independently motivated, and have an eye for good architecture.

We are fully remote and offer flexible working hours. We offer health insurance and time off / vacation. We're a small but growing team, and we are flexible as long as you can get the job done. We offer competitive compensation, and as an early member of the team, you will be receiving substantial stock options.

Why you should join Netmaker

Gravitl builds and maintains Netmaker, a virtual networking platform based on WireGuard. With Netmaker, you can bridge, clouds, the edge, and on-prem environemts with scalable virtual networks that are faster than anything else. Think of it like your VPC for cross-cloud computing. Netmaker is built with Kubernetes in mind. It acts as a flexible underlay, an outbound NAT, or a multi-cluster connector.

Team Size:4
Location:Asheville, NC
Dillon Carns
Dillon Carns
Alex Feiszli
Alex Feiszli