Full Stack Principal Software Engineer

Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.
As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.
More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.
Sonatype is a leader in software supply chain management, helping organizations develop secure and high-quality applications faster. Our products empower development teams to automate security, compliance, and governance across the software lifecycle.
We are looking for a Full Stack Principal Software Engineer to join our growing team in India. This role is for someone who thrives in designing and building scalable applications, leading technical strategy, and mentoring teams while working with modern front-end and back-end technologies.

Responsibilities

• Architect & Develop: Design and implement scalable, high-performance software solutions for Sonatype’s platform.
• Full Stack Development: Build and maintain front-end applications using modern frameworks (React, Angular, Vue.js) and back-end services using Java, Spring Boot, and cloud-native technologies.
• Technical Leadership: Provide technical guidance, conduct code reviews, and mentor engineers to improve software quality and performance.
• Scalability & Security: Ensure software solutions adhere to best practices for security, scalability, and performance.
• Cloud & DevOps: Deploy and manage applications on cloud platforms (AWS, Azure, GCP) using Kubernetes, Docker, and CI/CD pipelines.
• Collaboration: Work cross-functionally with product managers, UX designers, and other engineers to deliver customer-centric solutions.

Required Skills

• 10+ years of experience in full-stack development with expertise in Java, Spring Boot, and modern front-end frameworks.
• Strong experience with microservices architecture and cloud-based development.
• Deep knowledge of front-end technologies such as React.js, Angular, TypeScript, JavaScript, HTML, CSS.
• Experience with database technologies like PostgreSQL, MySQL, MongoDB.
• Hands-on experience with Docker, Kubernetes, CI/CD tools (Jenkins, GitHub Actions, ArgoCD, etc.).
• Strong understanding of API design, GraphQL/REST, and authentication protocols (OAuth, JWT, SAML).
• Experience leading development teams, mentoring engineers, and driving technical decisions.
• Excellent problem-solving skills and ability to work in an agile, fast-paced environment.
• Fluency in English - spoken and written

Preferred Qualifications

• Experience with Sonatype products (e.g., Nexus Repository, Lifecycle).
• Knowledge of DevSecOps practices and software security best practices.
• Familiarity with serverless computing (AWS Lambda, Azure Functions).
• Contributions to open-source projects or active participation in the software development community.

Why Join Sonatype

• Impactful Work: Shape the future of secure software development.
• Innovative Environment: Work with cutting-edge technologies and a passionate team.
• Career Growth: Opportunities for leadership and technical advancement.
• Join us at Sonatype India and be part of a mission-driven company revolutionizing software supply chain security!

Things that we are proud of

• 2023 Forrester Leader in SCA
• #1 ranked SCA
• 2022 Frost & Sullivan Technology Innovation Leader Award: Sonatype earned Frost & Sullivan’s 2022 Global Technology Innovation Leadership Award in Development and Operations (DevOps) Security.
• NVTC 2022 Cyber Company of the Year: Sonatype was named Commercial Cyber Company of the Year and a Capital Cyber Award-winner by the Northern Virginia Technology Council (NVTC)
• 2022 Annual Peer Award: Sonatype’s Nexus Lifecycle won a PeerSpot Silver Peer Award as a leading Enterprise Technology solution in the Software Composition Analysis category.
• 2022 Best in Biz Award: Sonatype CEO Wayne Jackson was recognized as a Silver Winner in the Best in Biz Awards' Executive of the Year category.
• Tech Ascension Awards: Sonatype was named the Best DevOps Security Solution for Nexus Lifecycle and Nexus Firewall (Software Composition Analysis).
• BuiltIn Best Places to Work: Sonatype was named to the Washington DC 100 Best Places to Work list and Washington DC Best Midsize Places to Work list.
• Company Wellness Week - We shut down company operations for a week to enable all employees to spend time pursuing personal growth and enjoying much needed and deserved rest.
• Diversity & Inclusion Working Groups
• Parental Leave Policy
• Paid Volunteer Time Off (VTO)