Staff Software Engineer, Anywhere Cloud (Rust & Kubernetes)

About the role

Cloudera's Anywhere Cloud team is looking for a Staff Software Engineer to design and build high-performance infrastructure for its Kubernetes-native platform, which lets data and AI workloads run on any cluster, including air-gapped environments. The systems layer handles credential brokering, protocol-level proxying, request signing and distributed log collection, and the work is done in Rust services on Kubernetes where correctness and latency matter. This is not a feature-engineering role.

Key responsibilities

• Build and own Rust-based infrastructure services (reverse proxies, credential brokers, log collectors) in the data path, shipping end-to-end from design doc to production.
• Implement and verify authentication protocols and access control, with property-based and fuzz testing.
• Design new infrastructure components, define module boundaries, memory budgets, streaming patterns and graceful shutdown semantics, and document trade-offs.
• Build distributed telemetry and log collection, instrumenting services with structured tracing, metrics and health endpoints.
• Guide other teams on systems-level design, performance-sensitive patterns, caching strategies and testing approaches.
• Drive design documents, evaluate build-vs-buy decisions and define testing strategies for critical code paths.

Required profile

• 8+ years of professional software engineering, with at least 3 years on performance-critical or security-critical systems.
• Experience shipping production Rust services, with async Rust, multi-crate workspaces and the tokio/hyper ecosystem.
• Strong understanding of networking, memory management, streaming/backpressure and concurrency.
• Experience on systems where correctness has security implications, such as authentication protocols and input validation.
• BSc/MSc in a related field or equivalent experience.

Required skills

• Rust, Kubernetes, Helm and the operator pattern.
• Property-based testing, integration test harnesses or fuzz testing.
• Preferred: S3-compatible storage or request signing (SigV4), OpenTelemetry, gRPC, reverse proxies, performance profiling and Kubernetes operators.

What we offer

• Generous PTO policy and flexible WFH policy.
• Mental and physical wellness programs, phone and internet reimbursement.
• Career development, comprehensive benefits and paid volunteer time.