Mirantis, an IREN company, is the Kubernetes-native AI infrastructure company, enabling organizations to build and operate scalable, secure, and sovereign infrastructure for modern AI, machine learning, and data-intensive applications. By combining open source innovation with deep expertise in Kubernetes orchestration, Mirantis empowers platform engineering teams to deliver composable, production-ready developer platforms across any environment—on-premises, in the cloud, at the edge, or in sovereign data centers. As enterprises navigate the growing complexity of AI-driven workloads, Mirantis delivers the automation, GPU orchestration, and policy-driven control needed to manage infrastructure with confidence and agility. Committed to open standards and freedom from lock-in, Mirantis ensures that customers retain full control of their infrastructure strategy. https://www.mirantis.com/
Job DescriptionWe are looking for an experienced backend engineer to build the Go services behind the k0rdent-ai platform — the multi-tenant control plane for GPU infrastructure. You will collaborate with engineering teams across US, Europe, and India to design and develop API-first services.
Your responsibilities will include owning features end to end — API contract, service, schema, orchestration, tests, and Helm packaging — and making architectural decisions that shape how enterprises consume our platform. Working within an agile framework, you will directly impact the reliability and correctness of infrastructure customers run in production.
Main Responsibilities:
Design and build Go microservices, model database schemas, and write migrations for the multi-tenant k0rdent AI platform.
Design and implement durable orchestration in Temporal — idempotency, retries, timeouts, determinism constraints.
Design public REST APIs with OpenAPI, along with multi-language SDKs.
Build event-driven, asynchronous communication between services on a distributed streaming or message-broker platform.
Implement authentication and authorization boundaries across an enterprise IAM platform and an API gateway — OIDC/JWT, service-to-service auth, tenant-scoped RBAC, gateway routing and rate limiting.
Extend the identity model with standards-based user and group lifecycle provisioning (SCIM), and unify authorization between the platform's API permissions and Kubernetes-native RBAC.
Write unit, integration, and end-to-end tests as part of every change.
Instrument services for production — structured logging, metrics, and audit trails.
Package and ship services with Docker, Helm, and Kubernetes.
Review peers' code and debug incidents to root cause with regression coverage.
Mentor junior engineers — onboarding, design guidance, and review feedback that raises the team's bar.
Required Skills/Abilities:
10+ years of professional software engineering, including 5+ years building production backend services using Go language.
Strong Go fundamentals: concurrency, context propagation, error wrapping, stdlib HTTP routing (Go 1.22+).
Deep relational database experience: schema design, migrations, transactions, and query tuning under multi-tenant load.
Track record designing versioned REST APIs consumed by external clients, and the SDKs generated from them.
Experience building durable or event-driven asynchronous systems — workflow engines, streaming platforms, or message brokers — with idempotency and retry semantics.
Solid grasp of OIDC, JWT validation, RBAC modeling, and multi-tenant isolation behind an IAM platform and API gateway.
Working Kubernetes knowledge — deploy, inspect, and debug workloads, and reason about Kubernetes RBAC.
Testing discipline: unit and integration tests are part of your definition of done.
Git-based workflow, rigorous code review, CI/CD (GitHub Actions or equivalent).
Experience mentoring engineers and leading design discussions.
Clear written English for asynchronous design docs and reviews across time zones.
Must Have
Temporal in production.
Experience developing multi-tenant SaaS or PaaS platforms.
Cluster API, Kubernetes controllers, or operators.
Keycloak — realms, clients, identity providers, token flows.
API gateway operation — routing, plugins, rate limiting.
PostgreSQL at scale, with a migration toolchain.
Docker and Helm-packaged services running on Kubernetes.
Streaming or message-broker platforms
Nice to Have
k0s ecosystem experience.
GPU infrastructure or AI/ML workload scheduling on Kubernetes.
SCIM provisioning, or federating platform permissions with Kubernetes RBAC.
sqlc, OpenAPI codegen, or other schema-driven toolchains.
Observability: Prometheus, Grafana, OpenTelemetry, audit logging.
Python or TypeScript for E2E suites and client SDKs.
Security engineering: threat modeling, secret management, dependency and container scanning.
CNCF open-source contributions.
Education and Experience:
Bachelor’s degree in Computer Science & Engineering or related field or 10 years related experience.
Additional Information
What does Mirantis offer you?
- Work with an established Silicon Valley leader in the cloud infrastructure industry;
- Work with exceptionally passionate, talented and engaging colleagues, helping Fortune 500 and Global 2000 customers implement next-generation cloud technologies;
- Be a part of cutting-edge, open-source innovation;
- Thrive in the high-energy environment of a young company where openness, collaboration, risk-taking, and continuous growth are valued;
- Professional development and training;
- Attend conferences and working groups;
- Company outings, happy hours, hackathons, and tech talks;
- Receive a competitive compensation package with a strong benefits plan.
We are a Leader for Container Management in G2 (#2 after AWS)!
Skills Required
- 10+ years of professional software engineering experience
- 5+ years building production backend services using Go
- Strong Go fundamentals, including concurrency, context propagation, error wrapping, and Go 1.22+ HTTP routing
- Relational database experience with schema design, migrations, transactions, and query tuning under multi-tenant load
- Experience designing versioned REST APIs for external clients and generated SDKs
- Experience building durable or event-driven asynchronous systems with idempotency and retry semantics
- Knowledge of OIDC, JWT validation, RBAC modeling, multi-tenant isolation, IAM platforms, and API gateways
- Working Kubernetes knowledge, including deploying, inspecting, debugging workloads, and reasoning about Kubernetes RBAC
- Unit and integration testing discipline
- Git-based workflows, code review, and CI/CD using GitHub Actions or equivalent
- Experience mentoring engineers and leading design discussions
- Clear written English for asynchronous design documentation and reviews
- Production experience with Temporal
- Experience developing multi-tenant SaaS or PaaS platforms
- Experience with Cluster API, Kubernetes controllers, or operators
- Keycloak experience with realms, clients, identity providers, and token flows
- API gateway operation, including routing, plugins, and rate limiting
- PostgreSQL at scale with a migration toolchain
- Experience with streaming or message-broker platforms
- Bachelor’s degree in Computer Science, Engineering, or a related field, or 10 years of related experience
- k0s ecosystem experience
- GPU infrastructure or AI/ML workload scheduling on Kubernetes
- SCIM provisioning or federating platform permissions with Kubernetes RBAC
- sqlc, OpenAPI code generation, or other schema-driven toolchains
- Observability experience with Prometheus, Grafana, OpenTelemetry, or audit logging
- Python or TypeScript for end-to-end suites and client SDKs
- Security engineering experience, including threat modeling, secret management, and dependency or container scanning
- CNCF open-source contributions
What We Do
We are dedicated to helping organizations increase developer productivity and ship code faster on public and private clouds. We provide a ZeroOps experience to remove the stress of managing cloud native infrastructure by combining software and automation tools with our cloud native expertise to deliver the industry's leading secure cloud platforms. Our capabilities allow us to provide a secure and reliable cloud native platform that includes validated FIPS-140-2 Encryption and DISA STIG ready capabilities. Who do we serve? We serve a wide range of industries, building on our extensive customer experience to provide distinct value in specific verticals including Financial Services, Government & Education, Healthcare, Manufacturing, and Telecommunications. Mirantis serves many of the world’s leading enterprises, including Adobe, DocuSign, Inmarsat, PayPal, Reliance Jio, Societe Generale, Splunk, and S&P Global. Learn more at www.mirantis.com.








