Responsibilities

We are looking for an exceptional Senior Backend Developer (GOlang) to join our growing Engine team. The Engine team develops and maintains most things related to Workato Recipe runtime. Everything related to recipe execution: DSL, pulling events, processing webhooks, executing jobs. There are various aspects to it: performance, scaling, storage, durability, atomicity, concurrency guarantees, data protection, and encryption.

• Build/extend/troubleshot/fix complex heterogeneous GOlang applications, as well as small self-contained GOlang microservices.

• Improve execution engine of custom third-party code (isolation, performance, new features).

• Write well designed, testable, efficient code in GOlang.

• Integration of data storage solutions Postgres/S3/DynamoDB/Kafka/ClickHouse etc.

• Contribute in all phases of the development lifecycle.

• Provide code reviews to your teammates.

• Evaluate and propose improvements to existing system.

• Identify bottlenecks and bugs, and devise solutions to these problems.

• Help maintain code quality, organization and automatization. 

Requirements

Qualifications / Experience / Technical Skills

• Strong experience in building scalable distributed backend applications (7+ years).

• Great understanding of all building blocks of large web applications: databases, load balancers, application servers, message brokers, caching, monitoring, etc.

• Good understanding of network protocols and stacks.

• Good understanding of DB technologies: classic databases and modern no-SQL.

• Knowledge of basic data structures and algorithms and how they are used is a must.

• Excellent debugging, analytical, problem solving, and social skills.

• BS/MS degree in Computer Science, Engineering or a related subject, 7+ years of industry experience.

Can be a plus

• Experience in related fields (DevOps, ML, DBA, Enterprise applications, etc).

• Experience in building/deploying data processing pipelines.

Soft Skills / Personal Characteristics

• Readiness to work remotely with teams distributed across the world and timezones.

Job Req ID: 2314

About the Role:

Wrike’s Security team is the frontline defense ensuring the integrity and credibility of the data stored within our platform. In this senior position, you will own and evolve the security posture for Wrike’s production, Kubernetes, and GCP environments. You aren't just maintaining systems; you are architecting a "secure by default" infrastructure that allows our engineering and other teams to move fast without compromising safety.

Your Impact:

• Own Infrastructure Security: Design, implement, and improve security controls- including hardening, network segmentation, IAM, and endpoint security - across our entire fleet.

• Strategic Defense: Lead the technical direction for cyber security defense, covering enterprise posture management, threat detection, and vulnerability management.

• Collaborative Architecture: Partner with ITOps, SysOps, DevOps and XOps to embed security into the core of our architecture and change management processes.

• SIEM Evolution: Develop and maintain our SIEM strategy and the surrounding infrastructure to ensure proactive visibility.

• Mentorship: Educate and coach engineering teams on secure system design, providing guidance that elevates the security IQ of the entire organization.

Your Qualifications:

• Cloud & Container Mastery: Extensive experience with GCP permissions and security configurations within Kubernetes, Azure, and on-prem environments.

• Technical Depth: High proficiency in Intrusion Detection, Exploit Dev, Linux Operations and Security Understanding

• Security Architecture: Proven ability to identify gaps in cloud designs and recommend enhancements for authentication, authorization, and bastion host setups.

• Communication: Ability to distill complex security risks into actionable insights for both technical peers and non-technical stakeholders.

• Autonomy: Proven track record of managing large projects with complex deliverables and foreseeing potential roadblocks before they manifest.

Standout Qualities:

• Certifications: Possession of industry-recognized credentials such as CISSP, Google Security Engineer or GIAC.

• Operational Excellence: Deep hands-on experience with (Open Source) SIEM solutions and Google Security Operations or Google Security Command Center

• Philosophy: You view security not just as a job, but as a craft; you balance strict security principles with the pragmatic needs of the business.

Team Dynamics:

• Leadership: You will report to Swen Groeneveld, Head of Security Operations

• The Squad: You will join a high-performing 14-member team consisting of AppSec and Compliance specialists.

• Role Level: This is a Senior level role, requiring you to lead people you do not directly manage.

Our Work Style:

• Tech Stack: GCP, Kubernetes (k8s), Terraform, Linux, Rapid7, Tenable, and SIEM platforms.

• Methodology: Performance-driven environment utilizing Scrum-based processes, including biweekly and quarterly planning.

• Environment: Hybrid work mode.

Why Join Wrike?

• 25 calendar days of paid vacation
• Sick Leave Compensation (5 Paid Uncertified Sick Days)
• Parental Leave: 18 Weeks Maternity / 4 Week Paternity 
• 2 Volunteer Days
• Medical Insurance (Employees + Dependents)
• Hybrid Working Model
• School Allowance (Up to €600/month for school aged kids)
• Simcard w/ Unlimited Internet Access for active employees
• Office Lunch Allowance (via Wolt) on Wednesdays / Thursday

The Opportunity 

The DevSecOps Engineer role has been created to embed security into our engineering, DevOps and cloud delivery pipelines. Working closely with our Development, DevOps, Infrastructure and Security teams, you will engineer, automate and maintain security controls across our CI/CD pipelines, cloud workloads and application lifecycle. 

This position is critical in uplifting our secure by design practices, reducing vulnerabilities, and ensuring our rapidly evolving development environments adhere to best-in-class security standards. (Infosec presentations highlight the explicit gap for DevSecOps capability and security integration into Dev and Cloud projects).

Key Responsibilities

• Integrate security controls into CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins or equivalent). 
• Implement automated SAST, SCA, DAST, container scanning and secrets management controls. (Referenced in secure development lifecycle expectations.)   
• Work with Development and DevOps teams to ensure secure design principles, threat modelling and secure coding practices are embedded early in the lifecycle. 
• Engineer and maintain tooling for vulnerability management across code, containers, pipelines and cloud workloads. 
• Automate security guardrails across Azure resources, Kubernetes clusters, API gateways, serverless workloads and service meshes. 
• Support and enhance the deployment of security policies (IAM, key vaults, network controls, hardening baselines). 
• Partner with engineering squads to review architecture changes and ensure security requirements are addressed. 
• Contribute to incident response activities where application or pipeline security is implicated. 
• Contribute to uplift of our secure engineering policies, developer training and SSDLC processes. (Supports expectations stated in internal assessments and training docs).

Requirements:

• Experienced in DevOps or platform engineering with a strong security mindset. 
• Hands-on experience with at least one CI/CD platform (Azure DevOps preferred). 
• Good understanding of application security principles (OWASP Top 10, SANS/CWE Top 25). 
• Experience integrating or running security scanners: SAST, SCA, DAST, container scanning, IaC scanning. 
• Experience with infrastructure as code (Terraform, ARM/Bicep, Helm). 
• Familiar with cloud security (preferably Azure) and container security best practices. 
• Capable of supporting vulnerability management processes and remediation workflows. 
• Ability to collaborate with Software Engineering, DevOps, SRE, Cloud and Security teams. 
• Strong communicator able to translate risk into engineering friendly language. 

Nice to Have:

• Kubernetes (AKS), service mesh, container runtime security. 
• Experience integrating security telemetry into SIEM/SOAR pipelines. 
• Exposure to Zero Trust design principles. 
• Threat modelling and automated security testing frameworks. 

Principal Engineer & CMS Platform Lead 

Location: [Remote / Europe / Israel/ Cyprus] 

Technology: TypeScript, Node.js, Next.js, CMS (Open-Source), AI Localization. 

About Kape Technologies 

Kape (LSE: KAPE, privatized 2023) is a global leader in the "Privacy-First" digital security era. We are the powerhouse behind the world’s most trusted consumer privacy brands. 

With over 7 million paying subscribers and a global team of 1,000+ experts across 10 locations, our mission is to provide complete digital autonomy. We believe that a free and open internet starts with state-of-the-art technology. As we scale toward the next 10 million users, we are consolidating our web infrastructure into a unified, next-generation content platform that matches the world-class engineering of our core VPN products. 

The Challenge 

You will lead the engineering squad responsible for retiring our legacy WordPress instances across brands. You aren't just building a website; you are building a Content Operating System powered by an open-source headless CMS at its core. This platform must support high-velocity PPC landing pages, complex multi-language blogs, and technical support hubs—all while maintaining the extreme performance and security standards expected of global privacy leaders. 

A key part of this role is evaluating and adopting an open-source CMS solution (such as Strapi, Payload CMS, Directus, or KeystoneJS) as the foundation of the new platform. You will assess these solutions against our requirements for extensibility, multi-tenancy, and API-first content delivery, and lead the customization and integration effort to make the chosen platform fit our multi-brand ecosystem. 

Key Responsibilities 

• Open-Source CMS Selection & Integration: Evaluate and lead the adoption of an open-source headless CMS (e.g., Strapi, Payload CMS, Directus, KeystoneJS) as the content backbone. Define selection criteria around extensibility, plugin ecosystem, multi-tenancy support, role-based access, and API performance. Own the customization roadmap to tailor the chosen solution to our multi-brand needs.
• Unified Architecture: Design a multi-brand, component-based headless system built on the selected open-source CMS. You will architect the "Core Engine" that allows all three brands to share high-performance components while maintaining unique visual identities. 
• Inheritance & Customization: Solve the "Parent-Child" challenge. Build a system where a global campaign (Parent) can be instantly deployed across dozens of regional versions (Children) with localized overrides and inherited SEO logic. 
• Infrastructure & Security Governance: Partner with DevOps to define the global delivery strategy. You will oversee requirements for Edge Computing (ISR/Edge Functions), WAF, and multi-layered caching (Redis/CDN) to ensure sub-second LCP (Largest Contentful Paint) globally. 
• AI-Powered Localization: Architect a native-feeling translation pipeline. Integrate LLMs to handle context-aware translations and build an AI "Quality Gate" that automatically checks pages for SEO health and UI regressions before they go live. 
• Visual Editor Implementation: Bridge the gap between engineering and marketing by leveraging the chosen open-source CMS's admin panel and extending it with a high-performance visual editing experience that doesn't bloat the frontend code. 

Technical Requirements (Hard Skills) 

• Next.js & React Mastery: Expert-level experience with the App Router, Server Components, and performance optimization for massive traffic (millions of monthly uniques). 
• Node.js/TypeScript Ecosystem: Deep experience building robust, type-safe APIs and microservices. Hands-on experience with open-source headless CMS platforms (Strapi, Payload CMS, Directus, or similar) is a strong advantage. 
• Multi-layered Caching: Professional-grade understanding of browser, server-side, and edge caching strategies. 
• Infrastructure Fluency: Ability to set precise tasks for DevOps and verify the integrity of deployments, proxying, and firewalling. 
• Technical SEO: Deep knowledge of how headless architectures impact crawlability, schema, and dynamic sitemaps. 

Why Join Kape? 

This is a rare opportunity to own the web platform for one of the biggest names in cybersecurity. You will have the budget and the mandate to move away from legacy debt and build a "Golden Path" for web development using the best of the JavaScript and open-source ecosystem—starting with a best-in-class headless CMS as the foundation.