Principal Backend Engineer, Enterpise Platform

Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs.

We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

As a Principal Software Engineer on the Enterprise Platform team, you’ll set technical direction for foundational services that power NodeZero’s customer and partner experiences. You’ll help shape how the platform manages licensing and entitlements, account administration, onboarding and provisioning, notifications, and asset workflows for managed service and security providers.

You’ll guide architecture and execution across teams, partnering with Engineering, Product, and business leaders to make complex platform capabilities secure, reliable, and operable at scale. This is a hands-on individual-contributor role with company-wide technical influence; you’ll develop other technical leaders through mentorship and technical guidance, not formal people management.

• →

  Set long-term technical direction for Enterprise Platform capabilities, including licensing and entitlements, user access and account administration, onboarding and provisioning, product and usage notifications, and MSP/MSSP client and sub-client workflows.

• →

  Guide architecture for multi-tenant services and account models, including parent-child relationships, permissions, product access, usage limits, and asset allocation across customer and partner accounts.

• →

  Partner with Engineering, Product, and business leaders to shape technical priorities and investment decisions; make clear tradeoffs across customer value, security, reliability, scale, delivery speed, and maintainability.

• →

  Lead high-impact, cross-team technical initiatives from ambiguous problem to durable solution, establishing the design principles and outcomes teams can execute against.

• →

  Stay close to implementation through design reviews, code reviews, technical investigation, and hands-on contributions to critical systems where useful.

• →

  Improve production reliability and supportability through testing, observability, monitoring and alerting, safe rollout practices, incident learning, and clear runbooks and support documentation.

• →

  Help balance product delivery with operational support, on-call health, and long-term platform investment.

• →

  Mentor senior engineers and technical leaders, and create reusable technical guidance that raises engineering quality across teams.

• →

  Communicate architecture, risks, and decisions clearly to technical and non-technical stakeholders.

• A record of sustained technical impact across multiple teams, including contributions that shaped company-level technical direction.

• Deep experience with backend services or multi-tenant SaaS platforms, including production ownership of business-critical systems.

• Strong architectural judgment across complex data models, distributed systems, security, reliability, and scalability tradeoffs.

• A history of earning trust with senior technical, product, and business partners through clear communication and sound decisions.

• A track record of raising engineering quality and developing senior technical talent through influence and mentorship.
  

• Bachelor’s degree in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.

• Extensive professional software engineering experience building and operating production backend services.

• Demonstrated technical leadership and impact beyond a single team.

• Experience designing APIs and data models for multi-tenant or customer-facing SaaS systems.

• Deep experience building and operating backend services in a modern language such as Python, Go, Java, or TypeScript.

• Strong SQL and relational data modeling experience, along with API and service design for production systems.

• Experience building cloud-hosted services and operating containerized applications such as Docker; familiarity with Kubernetes or a comparable orchestrator.

• Experience with every example technology is not required; depth in relevant areas and the ability to make sound technical choices are important.

• Experience with MSP/MSSP, reseller, or other partner software models.

• Experience with account hierarchies, delegated administration, tenant isolation, or role-based access control (RBAC).

• Experience with licensing, entitlements, asset allocation, usage limits, or product notifications.

• Experience with Python or Go, AWS, PostgreSQL, GraphQL, Docker, and Kubernetes.

• A history of leading platform or architecture changes that improved reliability, delivery speed, developer effectiveness, or customer outcomes across an organization.

We are a fully remote company, and this job may require up to 5% of travel to be successful.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.