Full-Stack Developer, Cloud Automation & Supply-Chain Security

Ship application features and help automate the infrastructure they run on: build the dashboards and APIs behind our signing and BOM platform, with room to grow across development, cloud/DevOps and real security engineering.

About IntellixBOM

IntellixBOM is a software supply chain security platform that enables organisations to secure and verify the integrity of their software artefacts through artefact signing, provenance generation, cryptographic verification and comprehensive Bill of Materials (BOM) management. The platform supports Software Bill of Materials (SBOM), AI Bill of Materials (AIBOM), Cryptography Bill of Materials (CBOM) and Quantum Bill of Materials (QBOM), including Post-Quantum Cryptography (PQC) inventories and cryptographic agility. Designed for highly regulated and security-conscious environments, IntellixBOM is deployed entirely on-premises and supports fully air-gapped environments. It operates without any public transparency logs or vendor-hosted tenants, ensuring complete data sovereignty and control.

About the role

We're hiring a Full-Stack Developer who's comfortable shipping application features as well as automating the infrastructure they run on. You'll build the dashboards and APIs behind our signing and BOM platform, including the views engineering and security teams use to inspect SBOM, AIBOM and CBOM data, and help automate how the platform is built, deployed and verified across pipelines and clusters. A strong fit for someone early-career who wants to grow across development and cloud/DevOps on a real security product.

Key responsibilities

• Design and develop responsive, intuitive front-end applications using modern web technologies.
• Build scalable back-end services and RESTful APIs for security, automation and workflow orchestration.
• Develop secure, reliable and high-performance applications across the full technology stack.
• Automate build, testing and deployment processes using CI/CD pipelines and Infrastructure-as-Code (IaC).
• Containerise applications with Docker and deploy, manage and optimise workloads on Kubernetes across on-premises and air-gapped environments.
• Integrate security controls and policy enforcement into CI/CD pipelines, deployment gates and Kubernetes admission controllers.
• Design and optimise databases, APIs and application architecture for scalability, reliability and maintainability.
• Write clean, maintainable, well-tested and well-documented code, and actively participate in code reviews and technical design discussions.
• Collaborate closely with product managers, UX designers, DevOps engineers and security teams to deliver high-quality software.
• Troubleshoot production issues, optimise application performance, and continuously improve the development lifecycle and engineering practices.

Required skills: core stack

• JavaScript/TypeScript with a modern front-end framework (React / Angular / Vue)
• Back-end experience with Node.js / Python / Go
• REST APIs and databases (SQL and/or NoSQL)
• Hands-on with CI/CD pipelines (e.g. GitLab CI, GitHub Actions or Jenkins)
• Containers and orchestration: Docker, and exposure to Kubernetes
• Git and version-control workflows; solid HTML/CSS and responsive design

Required skills: cloud automation (core focus)

• Infrastructure as Code (Terraform, Helm or Ansible)
• Automated deployment and environment provisioning
• Familiarity with at least one cloud platform (AWS / GCP / Azure) and/or on-prem clusters
• Interest in secure, repeatable pipelines and release automation

Supply-chain security: what makes this role different

• Gain hands-on experience with modern software supply chain security technologies, including SBOMs, software provenance, artefact signing, Sigstore, in-toto and the JSON Canonicalization Scheme (JCS, RFC 8785).
• Build solutions that verify software integrity, detect tampering and enforce verification policies throughout the software development and deployment lifecycle.
• Work with modern cryptographic technologies, including certificate, key and algorithm lifecycle management, as well as emerging Post-Quantum Cryptography (PQC) concepts.
• Develop and deploy security-first applications in highly regulated, on-premises and fully air-gapped environments where data sovereignty and trust are critical.
• Contribute to platforms that help organisations establish end-to-end trust, transparency and integrity across their software supply chains.

Preferred skills

• Contributions to open-source security tooling, or a portfolio/GitHub
• Prior work with CycloneDX or SPDX bill-of-materials formats
• Familiarity with post-quantum / cryptographic migration concerns

Qualifications

• Bachelor's in computer science or equivalent practical experience
• 0–4 years hands-on development (strong internships and projects count for freshers)

What we offer

Competitive salary, learning budget, flexible hours, and the chance to work on a real, production security product from day one.