Python & Go Software Architect

Responsibilities:

• Development of an application operating in a microservices architecture
• Design and development of high-performance services in Go and asynchronous Python
• Creating and developing functionalities related to access and permission management
• Development of components responsible for processing network traffic and telemetry
• Integration with network devices, messaging systems, databases, and customer environments
• Maintenance and further development of the existing codebase
• Profiling, testing, and performance optimization of the solution
• Ensuring code quality, automated testing, dependency security, and build reproducibility
• Participation in the preparation of installation packages, upgrades, and rollback mechanisms
• Cooperation in implementing new functionalities in the cybersecurity domain

Requirements:

• Very good knowledge of Go, including the development of concurrent services, UDP/TCP servers, and high-throughput decode loops
• Profiling Go applications using pprof
• Very good knowledge of asynchronous Python, including asyncio, event loop, tasks, cancellation, and backpressure
• Development of asynchronous HTTP clients and servers and multiprocess worker pools
• Practical knowledge of networking at the L2/L3/L4 levels
• Knowledge of VLANs, MAC/IP semantics, TCP flags, MTU, fragmentation, IPv4, and IPv6
• Knowledge of network flow telemetry protocols: IPFIX (RFC 7011), NetFlow v5/v9, and sFlow v5
• Experience with template-based decoding, sampling rates, sequence gaps, and loss handling
• Experience with packet capture and crafting and pcap file analysis
• Network device automation through SSH/CLI and vendor APIs, including Cisco, Arista, Juniper, and Palo Alto
• Experience with idempotent configuration deployment and drift detection
• Protocol Buffers, including schema design and evolution and code generation
• Fast JSON and binary codecs for performance-critical paths
• Kafka, including producer and consumer semantics, partitioning, acks, batching, compression, SASL/Kerberos, and lag diagnosis
• NSQ or NATS as an additional advantage
• Knowledge of columnar or time-series databases, such as ClickHouse
• Performance profiling, optimization of memory allocation and GC pressure, lock contention analysis, and the use of zero-copy mechanisms
• Knowledge of data structures such as LPM/Patricia tries, LRU caches, and fast hashing, together with the ability to explain the trade-offs associated with their use
• Load generation and sustained-throughput testing
• Knowledge of Linux, including sockets, epoll, sysctl tuning, cgroups, and resource limits
• EBPF as a strong advantage
• Containers and Kubernetes, including multi-stage builds, fast inner-loop development environments, and manifests
• Building self-contained packages deployed in customer infrastructure, including static/frozen builds, deb/rpm packages, and upgrade and rollback mechanisms
• IPC patterns, for example ZeroMQ
• Cache and state synchronization design, eventual consistency, reconnecting and resynchronizing after long disconnects, and idempotent event replay
• Static typing and quality-control tools, including mypy, golangci-lint, formatters, linters, and pre-commit gates
• Asynchronous unit tests, snapshot tests for decoders, and load tests in CI
• Dependency and CVE management and reproducible pinned builds
• Very good command of English, both spoken and written

Nice to have:

• Windows/AD, including WinRM, SMB, and Kerberos
• Knowledge of an SDK for one major cloud platform, Azure or AWS, for asset and log ingestion

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant
• Employee referral program