About the Role
As an agentic-first Senior Software Engineer, you will design, build, and ship agentic-first features within Nexus Repository Manager. You'll own meaningful pieces of the product end-to-end, and long-running multi-agent development workflows will be your primary mode of work — you'll spend most of your time directing and verifying agents rather than hand-typing code. You'll partner with Staff and Principal engineers to deliver capabilities that help enterprises secure their software supply chains at massive scale.
Why You Will Want to Apply
- Ship customer-facing, agentic-first features in a product used by 15 million developers and 70% of the Fortune 100.
- Practice a fundamentally new way of building software — long-running, multi-agent development — alongside Staff and Principal engineers who are defining the craft.
- Work on real distributed systems problems — Java, cloud, data, and security — in a codebase that matters to the global open source ecosystem.
- Grow into a Staff trajectory with clear mentorship, meaningful ownership, and direct exposure to how agentic tooling is reshaping engineering.
What You Will do
-
Design & Deliver With Agents: Design and implement scalable, high-performance features across the stack by driving long-running, multi-agent development workflows end-to-end — decomposition, orchestration, implementation, testing, and review.
-
Own Your Work End-to-End: Take features from ambiguous requirements through design, implementation, rollout, and on-call operability, using agents to move faster without compromising quality.
-
Verification Over Generation: Spend your time on direction, review, evals, and testing rather than line-by-line coding. Build and use the harnesses and guardrails that let you trust what the agents output.
-
Advance the Practice: Contribute to internal playbooks, tooling, and rituals for how Sonatype engineers work with agents — sharing what's working, what isn't, and what we should try next.
-
Quality, Security & Reliability: Write and ship clean, well-tested, observable code. Apply software supply chain security best practices to everything you deliver.
-
Collaboration: Partner with Product, UX, and fellow engineers to translate customer needs into shippable solutions, and raise the quality bar through thoughtful code review and mentorship of earlier-career engineers.
Who You Are
- Long-running Agentic Developer: Multi-step, long-running agent workflows are your default way of building software — well beyond Copilot-style autocomplete. You regularly orchestrate multiple agents in parallel across planning, coding, testing, and review, and your own time is spent directing and verifying rather than generating.
- Multi-agent Orchestration in Practice: Hands-on experience running and composing multiple agents (e.g., Claude Code, Codex, Cursor background agents, or equivalents) — including MCP tools, custom prompts/skills, shared context, and eval loops that keep output trustworthy.
- Verification-first Mindset: You've internalized that the new leverage point is human judgment over machine generation. You write and maintain evals, test harnesses, and review workflows that let you confidently ship code you didn't personally type.
- Drawn to Leading-edge Practice: You're energized by being early in a new way of building software, tracking what's happening on the frontier, and bringing new techniques back to your team.
- Product Engineering Mindset: You think in terms of customer outcomes, not just tickets, and can make sensible product trade-offs in partnership with PM and design.
- Focused on What Matters: You want to build mission-critical products that drive revenue and transform how customers build software.
- Senior-level Engineering Skills: 4+ years of professional software development, including meaningful experience shipping and operating production services.
- Solid Technical Foundation: Strong experience with Java and at least one major cloud (AWS / Azure / GCP). Comfortable working in distributed systems — APIs, databases, queues, and the failure modes that come with them.
- Exposure to DevSecOps & Supply Chain Security: Familiarity with concepts like SBOMs, SCA, vulnerability management, dependency hygiene, and artifact/package ecosystems — or strong interest in going deep here.
- Deeply Curious: You push agentic tools to their limits — probing where they work, where they break, and how to make them better. You're energized by being early in a fundamentally new way of building software.
What We Are Proud Of
- 2025 Visionary in Gartner® Magic Quadrant™ for Application Security Testing!
- 2025 AI Compliance Solution of the Year - AI Breakthrough Awards
- 2025 DEVIES Award to our SBOM Manager for a new product for its innovation and impact in developer technology
- 2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
- Constellation AST Shortlist: Sonatype has been listed on the Constellation ShortList™ for Application Security Testing for 2024
- Data Breakthrough Awards: Sonatype was announced as a 2024 winner in the "Open Source Data Solution of the Year."
- SD Times: Best in Show Security
- Fast Company Best Workplaces for Innovators 2024
- The Herd Top 100 Private Software Companies 2024.
- Diversity & Inclusion Working Groups
- Parental Leave Policy
- Paid Volunteer Time Off (VTO)