Senior Software Engineer

The OpenShift Infrastructure and Security Compliance (ISC) team is looking for a Senior Software Engineer to join our rapidly growing engineering team. The ISC team plays a major role in maintaining and improving OpenShifts security posture. 

As a core developer for the ISC team, you will have the opportunity to actively participate in development of our compliance tool set as well as the affiliated open-source communities. You will work as part of an evolving development team to rapidly design, secure, build, test, and release new capabilities. The role is primarily an individual contributor who collaborates closely with other developers and cross-functional teams. You should have a passion for working in open-source communities and for developing solutions that integrate Red Hat, open-source, and partner technologies into a cohesive platform.

What you will do:

• Develop tooling to generate and automate regulatory benchmark guidance

  • AI driven tooling (MCP servers/toolsets) that integrates with IDEs (Claude Code/Cursor)

  • Understanding Compliance Operator resources, like CustomRules and Profiles

  • Implementing checks using multiple scanning technologies, like OpenSCAP and CEL expressions

• Developing and maintaining operators that improve OpenShift security posture

• Contribute to industry benchmark regulatory bodies where applicable (CIS)

What you will bring:

• Minimum 5 years experience

• Understanding of Kubernetes and OpenShift

  • Have an understanding of security and hardening techniques for container management (e.g., Security Context Constraints, Validation Admission Policies, RBAC)

  • Machine Configs, SCCs

  • RHCOS (operating systems optimized for running containers)

  • Concept of operators within the Kubernetes ecosystem, and how they function

  • OLM (Red Hat’s package manager for operators)

• Programming proficiency

  • Fluent in git

  • Experience with python, maintaining python systems

  • Experience developing and maintaining projects in Golang 

• Project management experience and tracking with task tracking tools (e.g., Jira) - ideally comfortable giving updates on a particular project over the course of several months

• Compliance Scanning workflows with various tools 

  • Remediate

  • Rescan

  • Repeat

• Familiarity with specific regulatory bodies and their benchmarks (CIS, PCI, DISA, NIST, etc.)

• Optional, but nice to have skills

  • Familiar with Cursor and/or Claude Code - since we’re looking to lean heavily on AI tools to help with the profiles

  • GitOps-based workflows

  • Tekton pipelines

• People skills

  • Affinity for asynchronous communication

  • Experience working on distributed, remote teams

  • Self-starter

The salary range for this position is $116,270.00 - $191,840.00. Actual offer will be based on your qualifications.

Pay Transparency

Red Hat determines compensation based on several factors including but not limited to job location, experience, applicable skills and training, external market value, and internal pay equity. Annual salary is one component of Red Hat’s compensation package. This position may also be eligible for bonus, commission, and/or equity. For positions with Remote-US locations, the actual salary range for the position may differ based on location but will be commensurate with job duties and relevant work experience. 

About Red Hat

Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter