at TuxCare
TuxCare offers a comprehensive portfolio of security solutions for Linux and open-source software designed for enterprise organizations.
With TuxCare, companies can automate vulnerability patching, minimize downtime, maintain security and compliance, and rely on deep expertise in Linux and open-source security.
Our solutions cover widely used Linux distributions, end-of-life systems, open-source software ecosystems, and other critical infrastructure.
Learn more at: https://tuxcare.com/
We are looking for a Go Engineer to join the team behind SecureChain, one of TuxCare's newer products focused on open-source software supply chain security.
SecureChain helps organisations use open-source dependencies more safely by providing packages rebuilt from verified source code, scanned for malware and supply chain risks, and continuously protected through ongoing maintenance and vulnerability patching.
In this role, you will focus on infrastructure automation, build and release engineering, and integrating the Go ecosystem into SecureChain.
The shared package onboarding platform is already in place, and your responsibility will be to develop and improve the Go-specific automation needed to onboard, build, and process open-source Go modules reliably and at scale. You will work with CI/CD pipelines and Linux-based build environments, investigate build failures, resolve dependency and toolchain issues, and improve existing processes through automation.
Your deep Go expertise will be essential for understanding how Go packages are built, identifying the root causes of complex build and dependency issues, and developing reliable solutions for the Go ecosystem.
This is a hands-on engineering role focused on automation and infrastructure rather than traditional Go backend or API development. You will have significant technical ownership, working with an existing platform while independently developing and improving its Go ecosystem capabilities.
Learn more about SecureChain: https://tuxcare.com/securechain-for-oss/
You will be responsible for:
- Own Go ecosystem onboarding: Develop and improve the Go-specific functionality within SecureChain's automated package onboarding pipeline, which processes thousands of open-source packages per week.
- Investigate Go build issues: Diagnose and resolve build failures involving Go modules, dependencies, toolchain versions, build configurations, and third-party code.
- Build and improve Python automation: Extend existing Python-based automation to support Go package onboarding, building, packaging, and release workflows.
- Work with CI/CD and build infrastructure: Develop, maintain, and troubleshoot automated build pipelines, Docker-based builds, and Linux environments.
- Improve automation and reliability: Identify recurring failures and manual processes, develop automated solutions, and improve the scalability and reliability of package processing.
- Use AI coding agents: Build structured AI-assisted engineering workflows, define agent rules and instructions, and independently review, test, and validate generated code.
- Take end-to-end technical ownership: Independently implement and deliver Go-specific automation solutions, integrate them into the shared platform, and troubleshoot issues as they arise.
Requirements
- Go ecosystem expertise: Hands-on experience with Go modules, dependency management, and build tooling, including GOPROXY, GOSUMDB, toolchain versions, vendoring, and cgo. Ability to investigate Go build failures, identify root causes of dependency or compatibility issues, and troubleshoot unfamiliar third-party Go code.
- Build and release engineering: Understanding of how software is compiled, built, packaged, and released, including how code moves from a Git repository through CI/CD pipelines to a deliverable artifact. Experience investigating build or release failures and identifying issues in the process.
- Python automation: Most of our internal automation is written in Python, and you will primarily use it to develop, extend, and improve existing automation workflows. Deep Python expertise is not required, but you should be comfortable working with Python code, including using AI coding agents to implement changes and independently validating the results.
- CI/CD and containers: Hands-on experience working with CI/CD pipelines and Docker-based builds. Ability to understand pipeline configurations, work with build stages and jobs, investigate failed pipelines, and troubleshoot containerized builds. GitLab CI experience is a plus.
- Linux experience: Practical experience working with Linux-based development, testing, build, or production environments. Ability to work with the Linux command line, investigate logs, and troubleshoot issues in Linux environments. Experience using Linux only as a personal desktop operating system is not sufficient.
- Git proficiency: Experience with Git workflows, including branching, merging, tagging, and resolving conflicts.
- End-to-end technical ownership: Experience independently implementing or significantly improving technical solutions, from understanding requirements and making technical decisions to integration, testing, and delivery. Ability to explain personal contributions, technical challenges, and the results of the work.
- Advanced written and spoken English.
Benefits
What's in it for you?
- Stay hands-on technically while working on complex, high-impact engineering projects.
- Solve challenging Linux, automation, and cybersecurity problems across mature and newer products.
- Influence technical direction and make meaningful architectural decisions.
- Enjoy a high level of independence and autonomy in your daily work.
- Fully remote work with flexible working hours.
- 24 paid vacation days, 10 national holidays, and unlimited sick leave.
- Private medical insurance compensation.
- Co-working and gym/sports reimbursement.
- Education budget.
- Opportunity to receive a reward for innovative ideas that the company can patent.
By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (https://tuxcare.com/privacy-policies-hub/candidate-privacy-notice/), which provides detailed information on how we maintain and handle your data.
