Software Engineer (Senior/Lead) - OESIS Framework

OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.

About the position

At OPSWAT, we're building cutting-edge solutions that protect the world's critical infrastructure. You will play a pivotal role in shaping the future of our OESIS Framework platform with cloud solution integrations.

This role owns the architecture and implementation of the SDK's core integration layer - the code that talks to cloud-based Endpoint Device Management frameworks such as CrowdStrike Falcon, Microsoft Graph/Intune, JAMF Pro and future device management APIs, and that packages the result as native binaries our customers embed directly into their own cloud products.

It is also the technical anchor of a small pod. You set the direction the other two engineers build against: the internal data contract, the auth-token interface, and the SDK's external API surface and versioning strategy.

What you will be doing

Architect a unified, extensible integration framework that normalizes disparate vendor REST APIs: differing pagination models, rate limits and response schemas into one consistent internal interface

Design and build the SDK as native, cross-platform binaries (Windows, macOS, Linux) with a clean external API and header surface suitable for embedding into third-party customer products

Build and maintain connector modules for Endpoint Device Management frameworks (CrowdStrike Falcon API, Microsoft Graph/Intune API, JAMF Pro API), with an extension pattern for adding future platforms such as Workspace ONE and Kandji

Implement resilient request handling per vendor: retry and backoff, rate-limit compliance, partial-failure recovery, and API version migrations

Define SDK packaging, distribution and versioning strategy: ABI/API compatibility, semantic versioning, installer and package formats

Own the SDK's public developer documentation and the reference implementation used by partner and customer integration teams

Lead technical design reviews across the pod, and make the final call on the internal data contract and the auth-token interface shared with the Data and Authentication engineers

What we need from you

4+ years of professional software engineering experience, including 3+ years building or deeply integrating with REST APIs at production scale

Strong experience in a systems or compiled language: Go, Rust, C/C++ or similar producing native, cross-platform artifacts for Windows, macOS and Linux

A track record designing SDKs or libraries consumed by external developers or OEM partners, not only internal services

Strong grasp of API contract design: semantic versioning, backward compatibility, deprecation strategy

Experience with CI/CD pipelines producing multi-platform binary artifacts

Ability to write clear technical design documents and drive a design review to a decision

Professional working proficiency in written and spoken English

It would be nice if you had

Experience with ABI stability and cross-language bindings (C FFI, cgo, PyO3 or similar) for SDKs consumed from more than one language

Background in cybersecurity, endpoint security, or unified endpoint management (UEM)

Familiarity with Zero Trust Network Access (ZTNA) and device posture or compliance

Familiarity with regulatory compliance frameworks such as PCI-DSS, SOX or HIPAA

Hands-on experience with at least one of: CrowdStrike Falcon API, Microsoft Graph API, or JAMF Pro API or a comparable UEM, EDR or MDM API

Prior experience leading a small engineering pod of two to four people

Open-source contributions to SDK, networking or API client projects

Why join us?

At OPSWAT, we believe in empowering our people to do their best work. We encourage you to watch the video of our company's more than 20 years of experience securing critical infrastructure. You'll be part of a mission-driven OESIS Framework team that values innovation, collaboration and continuous development. Together, we're building SDK technology that makes a difference.

Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.