Infrastructure Software Engineer, Security

Position Overview

• Location Type: Remote
• Employment Type: Full-Time
• Salary: Not provided

Cohere is dedicated to scaling intelligence to serve humanity by training and deploying AI models for developers and enterprises. They foster a culture of hard work, speed, and customer focus, valuing a diverse team of experts. They are seeking a Senior Software Engineer with a security focus to join their North team.

Why This Role?

This position offers a significant opportunity to contribute to the security of Cohere's AI agents and North's architecture. You will be involved in the core development of critical security features, including OIDC/OAuth flows and session management, placing you at the forefront of AI innovation and enterprise security.

Responsibilities

• Software Development:
  • Contribute to the core development of security features such as OIDC/OAuth flows and session management.
• Secure Coding:
  • Write secure code for handling OIDC tokens, user claims, and sensitive data.
  • Adhere to best practices for JWT validation and encryption.
• Authentication and Data Protection:
  • Implement authentication mechanisms including user login, token management, and authorization checks to maintain data integrity.
• Tool Integration:
  • Integrate new tools to enhance North's security capabilities.
• DevSecOps:
  • Design and implement secret management within Kubernetes clusters, including encryption and RBAC.
• Cross-functional Collaboration:
  • Communicate security best practices to stakeholders.

Requirements

• Experience:
  • 5+ years of previous experience in software engineering with a strong focus on developing user-facing security features.
• Skills:
  • Strong development skills with a proven track record of shipping Python in production.
  • Experience with Kubernetes development, production coding, and support.
  • Familiarity with cloud platforms such as GCP, Azure, AWS, OCI, and multi-cloud on-prem/hybrid serving environments.
  • Deep understanding of OIDC specifications, including OAuth 2.0, JWT, and related protocols.
  • Solid knowledge of security principles such as session management, multi-factor authentication, and secure coding practices.
  • Strong coding abilities and comfort working across the full stack.
  • Ability to read, understand, and fix issues outside of the primary codebase.
  • Ability to employ a flexible and constructive approach to problem-solving.

Company Information

• Mission: To scale intelligence to serve humanity.
• Team: North team
• Values: Obsession over what they build, hard work, speed, customer focus, and diversity of perspectives.