Senior Software Engineer - Integrations

About the job

HeroDevs is hiring a Senior Software Engineer for our Shared Services team. We're the shared services team behind HeroDevs, the company that keeps critical open-source software secure long after it reaches end of life. We build and run the platforms, pipelines, and cloud infrastructure the rest of the company depends on. That includes the systems that deliver data and secure package releases to our integration partners. We care about doing things carefully, automating what shouldn't be manual, treating infrastructure as code, and building systems other engineers can trust and extend.

Position Summary

We're looking for a Senior Software Engineer with deep infrastructure experience who also enjoys building the integrations that run on it. You'll own the design, reliability, and security of the cloud platform behind our partner integrations, and you'll build and evolve the pipelines that move data and package releases between our internal systems, our APIs, and our partners.

This is a high-ownership role. You'll shape technical direction, set the patterns other engineers follow and propose architecture decisions with the team. We're looking for someone who's comfortable with ambiguity, and thinks about failure modes before they happen.

Responsibilities

• Design, build, and operate the cloud infrastructure that supports our integrations and shared platforms (compute, storage, networking, queues, scheduled workloads, and IAM)
• Own infrastructure-as-code across environments
• Architect and build reliable, secure data and package-delivery pipelines between internal systems, internal APIs, and integration partners
• Lead technical design for new partner integrations, including data contracts, delivery mechanisms, validation, retries, and failure handling
• Build and improve CI/CD with GitHub Actions, including build, test, release, and deployment automation for services and infrastructure
• Establish observability practices (metrics, logging, tracing, alerting, and SLOs) so problems surface early and are easy to diagnose
• Lead incident response and root-cause analysis for integration and infrastructure failures, and drive the follow-up work so they don't recur
• Champion security across the platform, including use of secrets management, least-privilege access, supply chain integrity, and safe handling of partner data
• Write services and tooling primarily using TypeScript/Node.js, packaged and deployed as containers
• Review code and design documents
• Write and maintain architecture docs, runbooks, and operational guides for the systems you own

Required Qualifications

• 5+ years of professional software engineering experience, with at least 3 years focused on infrastructure, platform, DevOps, or SRE work
• Strong hands-on experience with at least one major cloud provider (AWS preferred; GCP or Azure considered)
• Production experience with infrastructure-as-code tools such as Terraform, Pulumi, or CloudFormation
• Demonstrable proficiency in TypeScript/JavaScript (Node.js) or Python for building services, automation, and tooling
• Experience designing and operating data pipelines, API integrations, or ETL systems in production
• Deep familiarity with containers (Docker) and deploying containerized workloads, preferably on kubernetes
• Experience building and maintaining CI/CD pipelines, ideally with GitHub Actions
• Solid understanding of networking, IAM, and cloud security fundamentals
• Experience with observability tooling and with participating in or leading on-call and incident response
• Strong written communication skills and the ability to drive technical decisions in a distributed team
• Bachelor's degree in Computer Science or a related field, or equivalent practical experience
• Experience with git-based software development and GitOps practices (preferably on GitHub) 

Preferred (Nice-to-Have) Skills

• Background in software supply chain security, package registries, or artifact signing and provenance (e.g., Sigstore, SLSA)
• Experience working with external partners on data exchange, including SFTP, webhooks, or partner APIs
• Familiarity with the npm ecosystem and package publishing workflows
• Experience defining SLOs and improving reliability for systems with external consumers
• Experience mentoring engineers or acting as a technical lead
• Interest in open-source software and long-term maintenance of critical software