The Base Layers team is responsible for designing, building, and operating a composable image build platform to derive secure, tested operating system and container images for Bloomberg's managed fleet. Our platform is the foundation for a variety of large-scale, mission-critical workflows, ensuring all machines and container workloads start from a verified, secure state.
Our stack leverages best-in-class open source technologies for infrastructure automation, CI/CD, and workflow orchestration. We focus on deep systems engineering, large-scale distributed architecture, and software development, with a strong emphasis on Linux and security hardening.
What You’ll Work On
- Image Pipeline Design and Implementation – Architecting and building a composable, highly-reliable image and container base image building pipeline for both on-prem and cloud environments.
- Secure Baselines and Hardening – Defining, implementing, and enforcing secure operating system and container baselines, including CIS-aligned controls, to reduce the attack surface across the fleet.
- Tooling and Automation – Developing custom automation frameworks and developer-facing APIs on top of open source projects to streamline the image creation and testing lifecycle.
- Provenance and Supply-Chain Security – Implementing image lineage, asset tracking, and SBOM generation to provide traceability across the image lifecycle and strengthen supply-chain security.
- Testing and Verification – Integrating automated testing into the pipeline to ensure all derived images are fully tested, verified, and ready for deployment.
- Image Visibility and Consumer Interfaces – Building user-facing tools and web interfaces to allow consumers to inspect base image states, metadata, provenance, and compatibility, enabling informed adoption and derivation decisions.
- Upstream OSS Contributions – Collaborating with the broader open source community to enhance the tooling we rely on.
Why Join Us
- Solve hard problems at scale: performance tuning, orchestration of massive workloads, and automation of global fleets.
- Work in a hybrid environment that blends systems reliability engineering with software development.
- See your work impact thousands of developers across Bloomberg and developers worldwide through open source.
- Bring strong engineering principles and informed tool recommendations, helping evolve the platform for the benefit of the product and its users.
- Be part of a team that values deep technical curiosity, collaborative problem-solving, and bold thinking.
What You’ll Need
- 4+ years of professional software engineering experience working with an object-oriented programming language (Python, C/C++, Java, etc.)
- A degree in Computer Science, Engineering or similar field of study or equivalent work experience
- Strong Linux/Unix systems background, including deep understanding of operating system internals, hardening, and configuration.
- Experience designing and operating highly-available, large-scale systems.
- Familiarity with foundational security concepts related to OS baselines and layers.
- Familiarity with containerization technologies (Docker, Podman, Kubernetes, etc.) and their security implications.
- A collaborative, pragmatic approach to problem-solving and building scalable solutions.
We’d love to see
- Experience with image building systems (e.g., Packer, Kairos, or similar tools) and CI/CD platforms (e.g., Jenkins or equivalents).
- Hands-on experience with configuration management, orchestration, or workflow systems (e.g., Chef, Ansible, Salt, Airflow or equivalents) in production environments.
- Experience defining and enforcing secure operating system baselines or container layers.
- Experience with one or more programming languages used for systems or product development (e.g., Go, React, Typescript, Ruby).
- Experience contributing to or maintaining open source projects.
- Strong interest in testing, observability, and reliability engineering practices.
Senior Software Engineer - Base Layers in new york at Unknown Company
This position is listed as full time and hybrid.