Principal Software Engineer - Cloud Engineering
As industries race to embrace AI, traditional database solutions fall short of rising demands for versatility, performance, and affordability. Couchbase is leading the way with Capella, the developer data platform for critical applications in our AI world. By uniting transactional, analytical, mobile, and AI workloads into a seamless, fully managed solution, Couchbase empowers developers and enterprises to build and scale applications with unmatched flexibility, performance, and cost-efficiency—from cloud to edge. Trusted by over 30% of the Fortune 100, Couchbase is unlocking innovation, accelerating AI transformation, and redefining customer experiences. Come join our mission.
Principal Software Engineer - Cloud Engineering
This position will be part of the Capella engineering team that builds and operates our cutting-edge DBaaS service on AWS, GCP, and Azure. In this highly visible, hands-on role, you will be responsible for the architecture and leading implementation of features such as authentication, role and attribute-based access control, data encryption, and network security across all three major cloud service providers. You will also role model secure development best practices. At Capella, we are the custodians of our customers' data, and systems and operational security are paramount in everything we do. You will have a critical role in building a cutting-edge DBaaS platform that securely powers some of our customers' most demanding applications. You will collaborate closely with stakeholders across the organization, including engineering, product management, and Infosec.
Key Responsibilities
- Software Development: Responsible for designing and implementing interfaces and systems within Capella that pertain to user authentication and authorization, secure data management, network security, and implementing security best practices on all three major cloud platforms.
- Cloud Security: Capella supports AWS, GCP, and Azure. You will spearhead the development of components that interface with platform-specific IAM, key management, and other services to implement account and data isolation in a multi-tenant architecture.
- Architecture and Reviews: Responsible for the security architecture, design, and code reviews of new features and initiatives. You will drive the implementation of secure architecture best practices and information safeguards applicable in the target cloud environment, such as key management, encryption, data privacy, authentication, IAM, and enforcement of the principle of least privilege.
- Threat Modeling and Risk Assessment: Conduct threat modeling and risk assessment during the design phases of new components and features.
- Technical Leadership: Drive and lead secure development lifecycle practices across the engineering team. Contribute to security incident detection and response plans and disaster recovery plans and procedures.
- Coordinate Cross-Functionally: Collaborate closely with Infosec on security incident detection and response plans, audit readiness, and disaster recovery procedures.
Required Qualifications
- 10+ years of experience in software development with at least 5 years of experience in building distributed systems on the cloud.
- 3+ years of hands-on development experience in Golang.
- Demonstrable hands-on work experience in one or more of the following with in-depth knowledge of various protocols, specifications, and techniques - Single Sign-On, Role-based, and attribute-based access control, data encryption schemes with secure key handling on the cloud, cloud network security such as peered VPC links, Private Endpoints, firewall configuration, and ACLs.
- Expert in one or more AWS, GCP, and Azure offerings and security reference architectures. Relevant certifications are helpful but not mandatory.
- Experience designing and managing large-scale distributed systems in the cloud with clear security boundaries.
- Ability to communicate clearly and drive consensus with stakeholders across the organization.
- Experience working in environments governed by compliance standards such as SOC 2, HIPAA, ISO 27001, GDPR, or CCPA.
Base Pay Range
$200,000 - $235,000 USD
- Generous Time Off Program - Flexibility to care for you and your family
- Wellness Benefits - A variety of world class medical plans to choose from, along with dental, vision, life insurance, and employee assistance programs*
- Financial Planning - RSU equity program*, ESPP program*, Retirement program* and Business Travel Insurance
- Career Growth - Be valued, Create value approach
- Fun Perks - An ergonomic and comfortable in-office / WFH setup. Food & Snacks for in-office employees.
- And much more!
Apply for this job
*
indicates a required field