Role OverviewWe are seeking a highly skilled Senior Full Stack.

WHAT IS BOX?

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

The Search Relevance team at Box powers discovery across billions of files, enabling customers to find the right content quickly, securely, and intelligently. As we expand into a new era of AI-powered content understanding, we’re investing in the foundation that makes great search possible: reliable systems, strong signals, and models that learn from real-world usage.

This is a rare opportunity to work at the intersection of information retrieval science, applied machine learning, and large-scale distributed systems. You’ll be building the infrastructure that powers intelligent content discovery for Fortune 500 companies—where milliseconds matter, relevance is measurable, and your experiments directly impact how millions of users work.

We’re looking for a Machine Learning Engineer III to improve search quality end-to-end—signals, ranking, retrieval, and evaluation—while building scalable, low-latency services that serve queries in real time. You’ll collaborate with senior engineers, Product, Data, and Infra partners to productionize modern retrieval techniques and experimentation frameworks that directly impact how millions of users work.

WHAT YOU’LL DO

• Design, build, and iterate on components for ranking, retrieval, and recommendations that improve measurable relevance and latency.
• Implement production features leveraging embeddings, semantic/hybrid search, and LLM-enabled retrieval under mentorship and design guidance.
• Contribute to offline/online evaluation, A/B tests, and relevance tuning using metrics such as NDCG, MRR, and precision@k.
• Develop reliable, observable microservices and near real-time indexing pipelines across distributed systems.
• Own well-scoped projects from design to rollout, writing clear design docs, tests, and operational runbooks.
• Improve data and feature pipelines (batch/streaming) to ensure quality, freshness, and end-to-end performance.
• Document patterns and contribute to team best practices that raise the bar on code quality and reliability.
• Participate in our on-call rotation, available at all times while on-call to help respond to and triage any issues that arise.

WHO YOU ARE

• 3+ years of industry experience building backend or distributed systems, with production ownership of services or data pipelines.
• Proficient in at least one of: Java, Scala, C++, or Python; comfortable writing production-grade Python is a plus.
• Exposure to search, ranking, recommendations, or applied ML in production; understand the basics of training-to-serving workflows.
• Experience with data pipelines, message queues, or streaming systems (e.g., Kafka, Pub/Sub) and near real-time processing.
• Familiarity with cloud-native microservices, CI/CD, observability, and performance tuning.
• BS in Computer Science or related field, or equivalent practical experience.
• Pragmatic, metrics-driven mindset—eager to experiment, measure impact, and iterate quickly in collaboration with partners.

Preferred

• Experience with Elasticsearch, Solr, Lucene, or custom search systems; understanding of inverted indexes and scoring functions.
• Knowledge of relevance tuning, learning-to-rank concepts, and offline/online experimentation practices.
• Exposure to vector search, dense/sparse embeddings, and hybrid retrieval architectures.
• Familiarity with IR fundamentals (BM25, TF-IDF, multi-stage retrieval) and query understanding.
• Experience with Kubernetes/Terraform and a major cloud (GCP/AWS/Azure).
• Practical exposure to PyTorch or TensorFlow; LLM familiarity helpful but not required.

Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.Your Recruiter will share more about how we work and company culture during the hiring process.

At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in.If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply!

EQUAL OPPORTUNITY

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience.

Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form. Reasonable accommodations may include scheduling adjustments, document dictation and beyond.

Notice to applicants in Los Angeles:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chair Ordinance.  The Fair Chance Ordinance is provided here.

Notice to applicants in San Francisco:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chair Ordinance.  The Fair Chance Ordinance is provided here.

For details on how we protect your information when you apply, please see our Personnel Privacy Notice. If you are a California-resident, please read our California Applicant & Candidate Privacy Notice here.

Box is committed to fair and equitable compensation practices. Actual base salary (or OTE if commissionable role) is dependent upon factors such as: knowledge, skill level, experience, and work location. This role is also eligible for equity and benefits. For more information, check out our benefits and perks.

In accordance with OFCCP compliance, here is the Pay Transparency Provision.

United States Pay Range

$175,500—$219,500 USD

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

At NICE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

So, what’s the role all about?

The DevOps Engineer is a hybrid, senior-level role sitting at the intersection of operational reliability and software delivery automation. You will function as an integrated part of a cross-functional engineering team, combining the proactive service management mindset of an Application Operations Engineer with the automation-first philosophy of a DevOps practitioner.

You will be responsible for keeping production environments healthy and performant, while simultaneously designing and maintaining the CI/CD pipelines, infrastructure-as-code frameworks, and tooling that enable rapid, high-quality software delivery. You are the connective tissue between engineering, platform, and operations — someone who is equally comfortable in an incident bridge call and a sprint planning meeting.

How will you make an impact?

DevOps & Automation

• Design, build, and maintain continuous integration and continuous delivery (CI/CD) pipelines for rapid, quality-assured deployment of software deliverables.
• Build and manage Infrastructure as Code (IaC) using tools such as CloudFormation, Ansible, Terraform, Chef, or Puppet.
• Manage day-to-day operations of release pipelines, build tools, artifact repositories, and source control systems.
• Coordinate build and release activities with engineering, QA, product, and other stakeholders across the organisation.
• Identify, research, and prototype new technologies and practices to continuously improve DevOps processes and team efficiency.
• Maintain and upgrade DevOps systems in both production and non-production environments on an ongoing basis.

Cloud & Application Operations

• Proactively monitor infrastructure and application health — including CPU, memory, file systems, databases, batch jobs, and network performance — and respond swiftly to anomalies.
• Identify and resolve operational issues including infrastructure failures, batch processing errors, network disruptions, and client data feed problems.
• Troubleshoot and respond to production downtime, performance degradation, and security-related incidents in a timely, structured manner.
• Perform end-to-end operational duties covering application server health, service availability, and platform integrity in accordance with documented processes and runbooks.
• Review and manage client service request tickets in adherence to defined SLAs, ensuring accountability and timely resolution.
• Provide on-call off-hour support as part of a structured rotation, including during non-prime and weekend shift windows as required.

Documentation, Communication & Governance

• Maintain complete and accurate operational documentation including incident tracking, change logs, and runbooks.
• Produce metric reports and regular productivity/status updates for internal stakeholders and management.
• Communicate proactively and clearly — both written and verbal — with internal teams, leadership, and customers on a daily basis.
• Liaise with management to share feedback on existing and new processes, methodologies, best practices, and technology changes.
• Work efficiently under pressure to meet tight deadlines while maintaining the professionalism, accuracy, and consistency expected in a high-availability environment.
• Demonstrate a high level of individual accountability and deliver service and support that consistently exceeds client expectations.

Have you got what it takes?

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Business Information Systems, or a related field (or equivalent practical experience).
• 4+ years of combined experience in application/production support, cloud operations, and/or software DevOps engineering in a high-availability SLA environment.
• Demonstrated experience working as a contributor on a software engineering or platform team.

Technical Skills – Required

• Strong proficiency with Linux and Unix environments; working knowledge of Windows Server administration.
• Experience writing scripting languages — Python, PowerShell, and/or Perl — for automation, monitoring, and tooling.
• Experience with distributed source control systems, preferably GitHub or BitBucket.
• Solid understanding of application server technologies including Tomcat and SSH-based remote management.
• Database experience with one or more of: SQL Server, Oracle, or MySQL — including querying, performance tuning, backup/restore, and lifecycle management.
• Experience with application debugging, performance analysis, and scalability assessment.
• Familiarity with standard application security compliance and best practices.
• Knowledge of fault detection, RCA (Root Cause Analysis), and structured resolution processes.
• Experience with Amazon Web Services (AWS) — core services for compute, storage, networking, and monitoring.

Technical Skills – Deep Knowledge in at Least One of:

• Database Administration: Structured and/or unstructured, indexing, performance tuning, backup/restore, data lifecycle management, scaling.
• Layer 2⁄3 Networking: DNS, SSL/TLS, Load Balancing, IPv4 subnetting, firewalling, and CDN configuration.
• Operating Systems & Virtualisation: Linux/Windows, containers, orchestration (Kubernetes), storage types and performance, monitoring, and capacity planning.
• VoIP Administration: Signalling, encoding/decoding, protocols including SIP, RTP, Media Gateway, security, border controllers, and QoS.

You will have an advantage if you also have:

• Familiarity with CI/CD automation tools such as Jenkins, CircleCI, Bamboo, or TFS Build.
• Experience with release pipeline tooling — Concourse, Thoughtworks Go, Octopus Deploy, ElectricFlow, or XebiaLabs.
• Experience with Docker containers, microservices architecture, and container orchestration (Kubernetes).
• Experience with infrastructure automation tools: Ansible, Chef, Puppet, or AWS CloudFormation.
• Experience with Artifactory or similar artifact repository management.
• NICE product knowledge and/or implementation or support experience with NICE CXone or related platforms.
• Knowledge of ETL processes and data pipeline management.
• Call centre or telecoms industry experience.

What’s in it for you?

Learn more about the Benefits at NICE

Join an ever-growing, market-disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

About NICE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NICE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions

Known as an innovation powerhouse that excels in AI, cloud and digital, NICE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NICE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation, or any other category protected by law.

Requisition ID: 11151 Reporting into: Director, Cloud Operations CXone, EMEA

Role Type: Individual Contributor

About NiCE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NiCE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions.

Known as an innovation powerhouse that excels in AI, cloud and digital, NiCE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NiCE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

So, what’s the role all about?

We are seeking a Senior Cloud Architect to join NICE IT AI and own the Azure cloud and AI infrastructure that powers intelligent automation across the enterprise.

This is a deeply hands-on role. You will design, build, and govern the full-stack architecture, from enterprise networking and private connectivity up to AI orchestration, delivering the platform to the development teams while partnering with the Systems, Network, and Security teams to connect, govern, and approve every design before it goes live.

How will you make an impact?

You will own NICE’s IT AI cloud architecture end-to-end, combining hands-on Azure engineering with architectural leadership across these areas:

Cloud Architecture Design & Implementation

• Own the end-to-end Azure architecture for AI workloads (LLMs, RAG, vector DBs, Graph, agents, MLOps) across all platform layers, with reference designs and ADRs.

Enterprise Networking & Private Connectivity

• Design hub-and-spoke VNets, private connectivity (Private Endpoints, Private DNS), firewall/ingress patterns, and isolated multi-environment topology (prod / dev / test).

AI Developer Toolchain & Platform Engineering

• Architect the developer AI stack, Azure AI Foundry, GitHub Copilot, Claude/MCP, Models Gateway, and scaled tooling distribution (MDM / Intune).

CI/CD, DevOps & Platform Automation

• Establish CI/CD (GitHub Actions), Infrastructure-as-Code (Terraform / Bicep), and compute, MLOps/LLMOps, and FinOps practices with the DevOps team.

Identity, Security & Governance

• Design IAM and auth flows (Entra ID, OIDC/JWT, API gateway validation) and the observability stack, and secure Security-team review and approval of every architecture.

Cross-functional Leadership

• Act as architectural liaison across AI CoE, Development, DevOps, Infrastructure, Systems, Network, and Security; mentor engineers and own the platform roadmap.

Have you got what it takes?

• 8+ years in software/cloud architecture, with 5+ years hands-on Azure (AKS, Azure OpenAI/AI Foundry, APIM, Key Vault, ACR, Azure Monitor)

• Strong Azure networking: hub-and-spoke VNets, peering, Private Endpoints, Private DNS, firewalls, and S2S VPN / ExpressRoute

• Proven track record building AI/ML infrastructure in production (LLMs, RAG, vector search, agents)

• Deep Infrastructure-as-Code (Terraform / Bicep) and CI/CD (GitHub, GitHub Actions) expertise

• Enterprise IAM and security: Entra ID, OAuth2/OIDC, managed identities, RBAC, and zero-trust connectivity

• Hands-on with containers and orchestration (Docker, Kubernetes/AKS) and observability tooling (OpenTelemetry, Grafana, Azure Monitor)

• Experience integrating AI developer tools (GitHub Copilot, Azure AI Foundry, Anthropic / OpenAI APIs) and MCP/A2A patterns

• Fluency in English

What’s in it for you?

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

Enjoy NICE-FLEX!

At NICE, we work according to the NICE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere.

Requisition ID: 11124

Reporting into: Manager, Applications Development

Role Type: IC

#LI-Hybrid

About NiCE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NiCE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions.

Known as an innovation powerhouse that excels in AI, cloud and digital, NiCE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NiCE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

So, what’s the role all about?

We are seeking a Senior Cloud Architect to join NICE IT AI and own the Azure cloud and AI infrastructure that powers intelligent automation across the enterprise.

This is a deeply hands-on role. You will design, build, and govern the full-stack architecture, from enterprise networking and private connectivity up to AI orchestration, delivering the platform to the development teams while partnering with the Systems, Network, and Security teams to connect, govern, and approve every design before it goes live.

How will you make an impact?

You will own NICE’s IT AI cloud architecture end-to-end, combining hands-on Azure engineering with architectural leadership across these areas:

Cloud Architecture Design & Implementation

• Own the end-to-end Azure architecture for AI workloads (LLMs, RAG, vector DBs, Graph, agents, MLOps) across all platform layers, with reference designs and ADRs.

Enterprise Networking & Private Connectivity

• Design hub-and-spoke VNets, private connectivity (Private Endpoints, Private DNS), firewall/ingress patterns, and isolated multi-environment topology (prod / dev / test).

AI Developer Toolchain & Platform Engineering

• Architect the developer AI stack, Azure AI Foundry, GitHub Copilot, Claude/MCP, Models Gateway, and scaled tooling distribution (MDM / Intune).

CI/CD, DevOps & Platform Automation

• Establish CI/CD (GitHub Actions), Infrastructure-as-Code (Terraform / Bicep), and compute, MLOps/LLMOps, and FinOps practices with the DevOps team.

Identity, Security & Governance

• Design IAM and auth flows (Entra ID, OIDC/JWT, API gateway validation) and the observability stack, and secure Security-team review and approval of every architecture.

Cross-functional Leadership

• Act as architectural liaison across AI CoE, Development, DevOps, Infrastructure, Systems, Network, and Security; mentor engineers and own the platform roadmap.

Have you got what it takes?

• 8+ years in software/cloud architecture, with 5+ years hands-on Azure (AKS, Azure OpenAI/AI Foundry, APIM, Key Vault, ACR, Azure Monitor)

• Strong Azure networking: hub-and-spoke VNets, peering, Private Endpoints, Private DNS, firewalls, and S2S VPN / ExpressRoute

• Proven track record building AI/ML infrastructure in production (LLMs, RAG, vector search, agents)

• Deep Infrastructure-as-Code (Terraform / Bicep) and CI/CD (GitHub, GitHub Actions) expertise

• Enterprise IAM and security: Entra ID, OAuth2/OIDC, managed identities, RBAC, and zero-trust connectivity

• Hands-on with containers and orchestration (Docker, Kubernetes/AKS) and observability tooling (OpenTelemetry, Grafana, Azure Monitor)

• Experience integrating AI developer tools (GitHub Copilot, Azure AI Foundry, Anthropic / OpenAI APIs) and MCP/A2A patterns

• Fluency in English

What’s in it for you?

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

Enjoy NICE-FLEX!

At NICE, we work according to the NICE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere.

Requisition ID: 11124

Reporting into: Manager, Applications Development

Role Type: IC

#LI-Hybrid

About NiCE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NiCE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions.

Known as an innovation powerhouse that excels in AI, cloud and digital, NiCE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NiCE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.

Why Thunderbird?

Thunderbird is one of the world’s most trusted open-source email applications, empowering more than 20 million people globally. At MZLA, the team behind Thunderbird, we build privacy-respecting communication tools that help people manage their digital lives while staying in control of their data.

We are open source by design. Our products are developed transparently and in collaboration with a global community of contributors, and that same spirit shapes how we work: collaboratively, inclusively, and with a shared commitment to putting users first.

Our small but growing distributed team includes 65+ people across seven countries. As Thunderbird evolves beyond a single desktop application, we are expanding across desktop, mobile, and paid services to build independent, privacy-respecting alternatives to big tech ecosystems.

Our revenue model combines user donations, which help keep Thunderbird’s apps freely available, with paid services that cover the costs of hosted offerings while supporting long-term sustainability and continued innovation.

A note about MZLA and Mozilla: MZLA Technologies Corporation is the nonprofit-owned company behind Thunderbird and part of the Mozilla family. MZLA is separate from Mozilla Corporation and has its own compensation programs, benefits, and employment policies.

To learn more, visit www.thunderbird.net

The opportunity

The Senior Site Reliability Engineer establishes and maintains the infrastructure and operational systems that Thunderbird users and teams depend on every day. You’ll design and develop CI/CD systems for MZLA websites, services, and release workflows, diagnose and debug production incidents, and implement improvements to enhance system reliability. We believe that good infrastructure work is invisible when it’s going well and invaluable when it isn’t.

This role is for someone who treats production as something to be understood, not just kept running. You write things down, flag problems before they become fires, and leave documentation better than you found it. You bring production instincts, infrastructure-as-code fluency, and security awareness that’s baked in, not bolted on.

You’ll work closely with Software Development Engineers, team members, and community contributors, reporting to the Sr Manager, Platform Infrastructure. This is a great opportunity for someone who thrives with ambiguity, makes good decisions without a complete picture, and cares about Thunderbird’s mission: open-source software used by millions who choose privacy and ownership over convenience.

This role requires consistent overlap with Pacific Time zone working hours to enable effective collaboration. You should have availability for regular overlap hours for context sharing with Pacific Time colleagues.

What you’ll do

• Operate and evolve our EKS-based Kubernetes platform, supporting service migrations, platform improvements, and reliability initiatives.
• Design and develop CI/CD systems supporting websites, services, and Thunderbird desktop releases, contributing to pipeline reliability and OIDC-based authentication across GitHub Actions workflows.
• Write and maintain infrastructure in Pulumi and/or Terraform/OpenTofu across multiple AWS accounts.
• Operate and evolve our observability stack (VictoriaMetrics, VictoriaLogs, Grafana, Vector) and partner with engineering teams to incorporate instrumentation and monitoring into service design.
• Apply security-conscious infrastructure practices, including least-privilege IAM, secrets management via AWS Secrets Manager and External Secrets Operator, and network segmentation.
• Diagnose and debug production incidents; drive root-cause analysis and post-incident improvements to prevent recurring problems.
• Participate in on-call rotation and collaborate with SDEs and fellow SREs to ship, maintain, and monitor new builds and support service onboarding.
• Contribute to runbooks, architecture documentation, and team processes.

What you bring

• 7+ years of experience in infrastructure, platform engineering, or site reliability roles, including hands-on production Kubernetes experience in workload operations, troubleshooting, and cluster management.
• Hands-on experience with infrastructure-as-code on AWS using Terraform, OpenTofu, or Pulumi.
• Security awareness in day-to-day infrastructure work: identity, least privilege, secrets hygiene, and network controls.
• Demonstrated ownership mindset with the ability to proactively identify issues, drive work to completion, and communicate risks early.
• Excellent async written communication skills; comfortable working with a geographically distributed team.
• Ability to collaborate effectively with software engineers and non-engineering stakeholders to improve platform reliability and operational efficiency.
• Ability to learn, evaluate, and responsibly use emerging technologies, including AI-enabled tools, to improve work processes.

Bonus points for

• Experience with GitOps workflows (ArgoCD or Flux).
• Familiarity with Keycloak or similar identity platforms (OIDC, SAML, federation).
• Knowledge of email protocols and/or experience operating email infrastructure (SMTP, IMAP).
• Prior work in or alongside an open-source community.
• French, German, Japanese, or other language proficiency in addition to English.

What success looks like

You’ll be successful in this role if you treat production as something to be understood, not just kept running. You write things down, flag problems before they become fires, and leave documentation better than you found it.

You bring production instincts. You’ve been paged at 2am, you know what good alerting looks like, and you’ve done the post-mortem work to make sure it doesn’t happen the same way twice. You think in code, not in consoles. Your security awareness is baked in, not bolted on. You default to least privilege and ask “what’s the blast radius?” before you ship.

You’re comfortable with ambiguity. We’re a small team building toward something, and you can make good decisions without a complete picture. Thunderbird is open-source software used by millions who choose privacy and ownership over convenience. That matters to you.

Work environment

This is a full-time, fully remote position. You’ll join a distributed team of Thunderbird staff, open-source community members, and contributors from around the world.

We rely on clear communication, thoughtful documentation, and collaborative decision-making to work effectively across time zones and disciplines.

Compensation & benefits

We benchmark our base salaries to local markets and target the 60th percentile of the peer market. The salary ranges for this role are:

• US: $123,000 - $144,000 USD
• Canada: $108,000 - 125,000 CAD
• UK: £62,000 - £72,000 GBP

We may consider candidates with strong skills but less than the required experience. Title, level and compensation will be determined based on qualifications and experience.

In addition to competitive salaries, we offer a comprehensive benefits package designed to support your whole self.

Work & career

• Fully remote work & schedule flexibility
• Company-provided laptop
• Annual bonus program
• Monthly remote work stipend
• Annual professional development stipend
• Industry conferences
• Company all-hands and team gatherings

Rest & play

• 24 days PTO per year (prorated)
• Your birthday
• Year-end company shutdown
• 9 wellbeing days
• Public holidays
• Other paid leave
• Quarterly wellbeing stipend for personal / family activities

Health & family

• 401(k) / RRSP contributions
• Health, dental, & vision insurance
• Disability insurance
• Life insurance
• Employee assistance program
• Paid parental leave
• Paid sick days

Work eligibility

Applicants must reside in and have permanent work authorization for the country location(s) specified in the posting. We are unable to consider applicants outside of these markets at this time. And, we do not provide visa sponsorship.

How to apply

Please apply directly through our career page. We carefully review every cover letter and screening question, so take the time to answer each fully.We value authentic, thoughtful responses that reflect your own experience and perspective. It is fine to use AI tools to polish your writing, but your answers should be your own. Candidates who submit generic or unoriginal AI-generated responses may be disqualified from further consideration.

Our commitment to diversity, equity, and inclusion

MZLA believes in the value of diverse creative practices and forms of knowledge, and knows diversity, equity and inclusion are crucial to and enrich the company’s core mission. We encourage applications from everyone, including members of all equity-seeking communities, such as (but not limited to) women, racialized and Indigenous persons, persons with disabilities, persons of all sexual orientations, gender identities and expressions.

We are an equal opportunity employer. We do not discriminate on the basis of race (including hairstyle and texture), religion (including religious grooming and dress practices), gender, gender identity, gender expression, color, national origin, pregnancy, ancestry, domestic partner status, disability, sexual orientation, age, genetic predisposition, medical condition, marital status, citizenship status, military or veteran status, or any other basis covered by applicable laws. MZLA will not tolerate discrimination or harassment based on any of these characteristics or any other unlawful behavior, conduct, or purpose.

We will ensure that qualified individuals with disabilities are provided reasonable accommodations to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment, as appropriate. Please contact us at hiringaccommodations@thunderbird.net to request accommodation.

#LI-DNI

BIDDING INSTRUCTIONS

Bidders shall submit a proposal (all four parts in one document) clearly providing the following information:

a. Cover page with the following information: company name; name(s) of assigned contractor personnel; role(s) and responsibilities assigned to each profiled contractor personnel.

b. Evidence of successfully delivering one to three projects of similar scope to the statement of work within the last five years. Each evidence shall demonstrate proof of performance and be comparable in size and scope to the requirements of this role. Additionally, ensure to include a detailed case study that highlights the Purpose, Objective, Output and Outcome (PO3) mentioned in Annex C. Evidence shall display the ability to manage and deliver standard conformance criteria and test reference components for NIRIS by following customer requirements.

c. CVs of the proposed contractor personnel for the project.

d. Detailed effort estimation (exclusively provided for evaluation purposes) covering the following: estimated total labour and operational costs associated with the delivery of services, including licensing, hosting and travelling; a breakdown of estimated effort per work package expressed in FTE, where 1 FTE represents one full-time resource working one standard working day (7.6 hours).

Deadline Date: Monday 15 June 2026

Requirement: Support NIRIS Development

Location: Remote, with occasional on-site work at NCIA The Hague (NLD)

Period of Performance: 15 July 2026 – 31 December 2026

Required Security Clearance: NATO Secret

Introduction

The NATO Information and Communication Agency (NCIA) located in The Hague, The Netherlands, is the Interoperability Assurance Authority for NATO.

In light of this responsibility, the C2 Service Centre is looking for a service contract which can provide NCIA with supporting the continued development, maintenance, and evolution of the Networked Interoperable Real-Time Information Services (NIRIS) software.

Objectives

The list below defines the overarching objectives of the engagement and establishes the intended outcomes that the Contractor is expected to achieve through the delivery of the different work packages described in this document. These objectives serve as the guiding principles against which all deliverables shall be measured. The Contractor is expected to align their approach, methodology, and resource planning with these objectives throughout the duration of the engagement.

Under the direction and guidance of the Solution Architect, Service Delivery Manager, Test Manager, and Project Manager, the services to be provided are related to the development, update, maintenance, and testing of NIRIS software modules. It is envisioned that these services shall be provided by one experienced software developer.

a. Develop, update, and maintain NIRIS software modules in accordance with agreed requirements, priorities, technical direction, and project planning.

b. Develop and update Java software components supporting the continued evolution and sustainment of the NIRIS software baseline.

c. Support the full software development lifecycle of NIRIS, including analysis, design, implementation, integration, testing, defect resolution, and documentation.

d. Develop and conduct unit testing and automated testing of software components to support software quality, maintainability, and regression testing.

e. Support integration and verification activities to ensure that developed or updated software components operate correctly within the wider NIRIS system.

f. Analyse, investigate, and resolve software defects, technical issues, and implementation gaps identified during development, testing, integration, or operational support activities.

g. Develop, update, and maintain software documentation, including technical documentation, design information, test-related documentation, and other project deliverables as required.

h. Contribute to virtual and in-person meetings, reviews, planning sessions, technical discussions, and coordination activities with NCIA stakeholders and project team members.

i. Ensure that all developed, updated, and maintained software components and associated deliverables comply with applicable NCIA development standards, quality requirements, configuration management practices, and agreed project procedures.

j. Update and expand the produced software components and documentation as necessary to accommodate new, revised, or emerging requirements throughout the duration of the engagement.

Scope of Work

The Contractor shall provide the following deliverables classified per service:

A. Service: NIRIS baseline software development, maintenance, release preparation, and Java technology uplift

Deliverable: Updated, maintained, and release-ready NIRIS software baseline aligned with supported Java LTS releases.

Output: Updated, maintained, improved, and release-prepared NIRIS software modules delivered in accordance with agreed requirements, assigned work items, technical guidance, project priorities, release planning, and supported Java Long-Term Support (LTS) runtime requirements. This includes software development, defect correction, stabilization, integration into the relevant NIRIS baseline or release branch, and Java module updates, refactoring, or uplift where required to maintain compatibility with the agreed Java LTS version used by NIRIS.

The deliverable also includes the implementation or integration of agreed functional enhancements within the NIRIS baseline, including CESMO integration and historic track data capabilities, where included in the agreed release scope. For the historic track data capability, this includes enabling users to receive a potentially filtered set of tracks read and processed from storage where NIRIS recordings have previously been saved. The existing RTS subscription mechanism and corresponding user interface shall be enhanced, where required, to support these data sources and to allow filtering based on agreed parameters such as source name, time interval, geolocation, and track number.

Outcome: The NIRIS software baseline remains functional, maintainable, secure, stable, and aligned with the agreed NIRIS roadmap and planned releases, including NIRIS 4.7 and NIRIS 4.8. The deliverable strengthens NIRIS interoperability and operational utility by enabling agreed enhancements such as CESMO integration and historic track data access. This supports both real-time and post-event operational analysis, improves the ability to exchange and consume relevant track information, and increases the value of NIRIS as a data-centric interoperability service. The baseline is prepared for integration, testing, acceptance, and release, while reducing technology obsolescence risk through continued alignment with supported Java runtime versions.

Acceptance criteria:

• Assigned software development, maintenance, uplift, defect correction, and release-related tasks are completed in accordance with agreed requirements, priorities, sprint planning, release scope, or work package timeframe.
• Updated software modules are implemented in line with the agreed technical design, coding standards, configuration management practices, and project guidance.
• Software changes are committed, reviewed, and made available in the agreed configuration management environment.
• Delivered software changes are integrated, or made suitable for integration, into the relevant NIRIS development, baseline, or release branch.
• Implemented changes support the functional and technical objectives of the planned NIRIS baseline or release.
• NIRIS Java modules are reviewed and updated where required for compatibility with the agreed Java LTS version.
• Deprecated, obsolete, or incompatible Java constructs are identified and addressed where applicable.
• Updated modules compile, build, and execute successfully in the agreed development and test environments.
• Implemented changes do not introduce known critical or high-severity defects.
• Development support is provided for defect correction, stabilization, integration, and release preparation activities.
• Release-related technical inputs are provided when required.
• Changes take into account the expected support timelines of both the NIRIS baseline and the Java runtime.

KPIs: Task Completion Rate – percentage of assigned development tasks completed within the agreed sprint, release, or work package timeframe; target ≥ 90%. Code Review Acceptance Rate – percentage of submitted software changes accepted without major rework; target ≥ 90%.

B. Service: Unit testing, automated testing, and software verification support

Deliverable: NIRIS unit and automated test updates.

Output: Unit tests and automated tests developed, updated, or maintained to verify implemented software changes and support regression testing of NIRIS software components.

Outcome: Improved software quality and maintainability through repeatable testing, early defect detection, and strengthened regression test coverage.

Acceptance criteria:

• Unit tests are developed or updated for newly implemented or modified software components where applicable.
• Automated tests are developed or updated to support regression testing of relevant NIRIS functionality.
• Tests are executable in the agreed development, build, or test environment.
• Test results are documented or made available through the agreed tooling.
• Failed tests are analysed and corrected or documented for follow-up.

KPIs: Test Coverage for Delivered Changes – percentage of delivered software changes covered by unit and/or automated tests where technically applicable; target ≥ 85%. Automated Test Execution Success Rate – percentage of automated tests executed successfully after implementation; target ≥ 90%.

C. Service: NIRIS logging and troubleshooting improvements

Deliverable: Enhanced NIRIS logging functionality.

Output: Updated and enhanced NIRIS logging functionality delivered in accordance with agreed requirements, assigned work items, technical guidance, and project priorities. This includes improvements to logging configuration, logging visibility, filtering, endpoint-specific logging, stack trace handling, log compression, logging framework migration where required, and related software corrections or enhancements. The deliverable shall support improved logging per port, endpoint, interface, or relevant NIRIS component, where technically applicable, and shall provide improved mechanisms for filtering, viewing, managing, and analysing NIRIS logs during development, testing, troubleshooting, and operational support activities.

Outcome: NIRIS maintainability, troubleshooting capability, operational support, and runtime behaviour analysis are improved. The enhanced logging capability enables developers, testers, administrators, and support personnel to identify issues more efficiently, isolate failures more accurately, and reduce the time required to investigate defects, interface issues, runtime errors, and operational incidents. The deliverable contributes to improved serviceability of the NIRIS baseline and supports more efficient defect correction, stabilization, integration, testing, and release preparation activities.

Acceptance criteria:

• Assigned logging-related development, maintenance, correction, and enhancement tasks are completed in accordance with agreed requirements, priorities, sprint planning, release scope, or work package timeframe.
• Updated logging functionality is implemented in line with the agreed technical design, coding standards, configuration management practices, and project guidance.
• Software changes are committed, reviewed, and made available in the agreed configuration management environment.
• Logging improvements are integrated, or made suitable for integration, into the relevant NIRIS development, baseline, or release branch.
• Logging can be configured or applied at the agreed level of granularity, such as port, endpoint, interface, component, or service, where technically applicable.
• Logging filters are implemented or improved to allow more efficient identification and analysis of relevant log entries.
• Stack traces are handled in a more user-friendly and operationally manageable way, including collapse, grouping, or improved display where included in the agreed scope.
• Updated modules compile, build, and execute successfully in the agreed development and test environments.
• Relevant technical or operational documentation is updated where the logging functionality, configuration, or behaviour has changed.

KPIs: Task Completion Rate – percentage of assigned logging-related tasks completed within the agreed sprint, release, or work package timeframe; target ≥ 90%. Code Review Acceptance Rate – percentage of submitted logging-related software changes accepted without major rework; target ≥ 90%.

D. Service: NIRIS interface and interoperability support

Deliverable: Updated NIRIS interface and interoperability support.

Output: Updated, maintained, and improved NIRIS interface and interoperability-related software components delivered in accordance with agreed requirements, assigned work items, technical guidance, project priorities, and planned interoperability activities. This deliverable groups work related to supported standards, data providers, data consumers, external interfaces, and interoperability test events. It includes corrections, enhancements, configuration support, integration support, and test-event support for agreed NIRIS interfaces and interoperability capabilities. This may include, where included in the agreed scope: support for interfaces with data providers and consumers; Link 16 / JREAP; OTH-Gold; DIS; VMF; AIS and other agreed formats or standards; OANT/SMAQ integration configuration; analyser limit issues; interoperability testing; CWIX-related test support; TDLITS-related test support; INTEND-related test support.

Outcome: NIRIS remains interoperable with agreed external systems, data providers, data consumers, and NATO interoperability testing environments. The deliverable supports continued operational relevance of NIRIS as an interoperability service by maintaining and improving its ability to exchange, process, transform, and disseminate information across agreed standards, systems, interfaces, and operational communities. It also supports validation of NIRIS capabilities during interoperability events, customer engagements, and test activities, contributing to increased confidence in the NIRIS baseline, its supported interfaces, and its readiness for operational use.

Acceptance criteria:

• Assigned interface, interoperability, configuration, correction, enhancement, and test-support tasks are completed in accordance with agreed requirements, priorities, sprint planning, release scope, test-event planning, or work package timeframe.
• Updated interface and interoperability-related software components are implemented in line with the agreed technical design, coding standards, configuration management practices, and project guidance.
• Software changes are committed, reviewed, and made available in the agreed configuration management environment.
• Delivered changes are integrated, or made suitable for integration, into the relevant NIRIS development, baseline, or release branch.
• Implemented changes support the agreed provider, consumer, interface, format, protocol, or interoperability objectives.
• Interface-related changes are aligned with agreed interface control documents, standards, configuration requirements, or test-event requirements where applicable.
• Support is provided for agreed standards and formats, such as Link 16 / JREAP, OTH-Gold, DIS, VMF, AIS, or other agreed NIRIS-supported interfaces, where included in the agreed scope.
• OANT/SMAQ-related configuration or analyser limit issues are addressed where included in the agreed scope.
• Support is provided for agreed interoperability events or activities, including CWIX, TDLITS, INTEND, or customer visit test support, where applicable.
• Interface and interoperability changes are tested or made ready for testing in the agreed development, integration, or test environment.
• Implemented changes do not introduce known critical or high-severity defects.
• Updated modules compile, build, and execute successfully in the agreed development and test environments.
• Relevant interface, configuration, test, or release-related technical inputs are provided when required.
• Identified interoperability issues are analysed, corrected, documented, or escalated in accordance with agreed project guidance.

KPIs: Task Completion Rate – percentage of assigned interface and interoperability-related tasks completed within the agreed sprint, release, event-support, or work package timeframe; target ≥ 90%. Code Review Acceptance Rate – percentage of submitted interface or interoperability-related software changes accepted without major rework; target ≥ 90%.

E. Service: NIRIS documentation maintenance

Deliverable: Updated NIRIS software documentation set.

Output: Updated NIRIS software documentation set reflecting implemented software changes, configuration changes, interface updates, test support functionality, release-related updates, and operational impacts. This includes maintenance and update of agreed NIRIS documentation, such as user manuals, governance documentation, internal technical documentation, interface documentation, test documentation, release-related documentation, and other software or operational documentation required to support development, testing, integration, sustainment, governance, and operational use. Documentation updates shall be prepared in accordance with agreed templates, standards, review processes, configuration management practices, and release or project timelines.

Outcome: NIRIS documentation remains accurate, current, consistent, and suitable for development, testing, governance, sustainment, release preparation, and operational use. The deliverable supports effective knowledge transfer, user understanding, technical maintainability, interface management, test execution, release governance, and long-term sustainment of the NIRIS baseline. It reduces the risk of outdated or inconsistent documentation and ensures that implemented changes are reflected in the relevant documentation set in a timely and controlled manner.

Acceptance criteria:

• Assigned documentation update, maintenance, review, and release-related tasks are completed in accordance with agreed requirements, priorities, sprint planning, release scope, or work package timeframe.
• Documentation is updated to reflect implemented software changes, configuration changes, interface changes, test support functionality, and operational impacts where applicable.
• User manual documentation is updated where user-facing functionality, workflows, screens, configuration steps, or operational procedures have changed.
• Governance documentation is updated where project, release, process, compliance, or management information has changed.
• Internal technical documentation is updated where architecture, design, implementation, configuration, deployment, or maintainability information has changed.
• Interface documentation is updated where supported interfaces, data providers, data consumers, protocols, formats, mappings, or configuration parameters have changed.
• Test documentation is updated where test cases, test procedures, test evidence, validation activities, or test-event support information has changed.
• Release-related documentation is updated where required to support release preparation, acceptance, deployment, or operational transition.
• Documentation updates are reviewed in accordance with the agreed review and approval process.
• Documentation is stored, versioned, and made available in the agreed configuration management or document management environment.
• Documentation is clear, consistent, and aligned with the implemented software baseline or agreed release scope.
• Documentation updates do not contain known major omissions or inconsistencies against the implemented changes.
• Required technical or project inputs are provided to support documentation review, release governance, or acceptance activities.

KPIs: Documentation Completion Rate – percentage of assigned documentation updates completed within the agreed sprint, release, or work package timeframe; target ≥ 90%.

Deliverables Compatibility

The deliverables produced under this SOW shall be fully compatible with the NIRIS software baseline, its architecture, and the operational and development environments provided by the NCI Agency. Accordingly, the following requirements shall be met:

All deliverables shall be designed, developed, and integrated in alignment with the existing NIRIS technology stack, architecture, and design principles.

Deliverables related to CESMO integration shall ensure compatibility with the applicable NATO standards and support the exchange, processing, and dissemination of Electronic Surveillance (ES) information within the CESMO network.

The solution shall support interoperability with NIRIS-supported data exchange formats and interfaces, including but not limited to Link 16, VMF, NVG, and other relevant Tactical Data Links (TDLs), as applicable.

Deliverables shall ensure seamless integration with existing NIRIS components and services, including managers responsible for data processing, recording, track identification, visualization, and dissemination.

Deliverables related to historic track data capability shall be compatible with the existing NIRIS data handling mechanisms, including: integration with the RTS subscription and notification services; access to stored NIRIS recordings; support for filtering based on parameters such as source, time intervals, geolocation, track identifiers, and other relevant attributes.

All software components shall be compatible with the NATO Software Factory environment, including development, testing, and integration tools like GitLab, CI/CD pipelines, and artifact repositories.

Where applicable, deliverables shall be packaged using containerization technologies (e.g. Docker) to ensure portability, scalability, and consistency across environments.

Deployment artefacts shall include clear, reproducible instructions, and where relevant, automated deployment configurations.

All developed components shall adhere to existing NIRIS interface definitions, data models, and performance constraints, particularly considering near real-time data processing requirements.

Any additional technologies, frameworks, or tools introduced as part of the deliverables shall be agreed in advance with the NCIA Point of Contact (POC).

All deliverables shall comply with NCIA security policies, secure coding practices, and accreditation requirements, as instructed by the NCIA POC.

Work Packages Delivery Schedule

The list below defines the delivery schedule for all work packages under this statement of work. Each work package represents a discrete and manageable unit of work, comprising one or more deliverables that together contribute to the overall objectives of the engagement.

a. For each work package, the Contractor shall deliver the specified outputs within the indicated target delivery date and in accordance with the defined acceptance criteria. The delivery schedule shall serve as the baseline against which progress is monitored, reported, and managed throughout the duration of the engagement.

b. The Work Packages Delivery Schedule and the scope of outputs may be subject to modification in the event of unforeseen circumstances or changes in the needs and requirements of NCIA customers, provided that such modifications do not affect the total price of the bid. Any such modifications shall be made by mutual agreement between NCIA POC and the Contractor and shall be documented in writing.

c. Any modification to the percentage of individual work packages shall be permitted if agreed between NCIA POC and the Contractor in writing, provided that the total aggregate percentage of all work packages equals 100%.

d. Each work package is considered complete only upon full acceptance of all associated deliverables and acceptance criteria.

2026 BASE: 15 July 2026 – 31 December 2026

WP 01 (45%): A1 – NIRIS baseline software development, maintenance, release preparation, and Java technology uplift. Target delivery date: 22 December 2026.

WP 02 (15%): B1 – Unit testing, automated testing, and software verification support. Target delivery date: 22 December 2026.

WP 03 (10%): C1 – NIRIS logging and troubleshooting improvements. Target delivery date: 9 October 2026.

WP 04 (16%): D1 – NIRIS interface and interoperability support. Target delivery date: 30 November 2026.

WP 05 (14%): E1 – NIRIS documentation maintenance. Target delivery date: 22 December 2026.

Payment Milestones and Proofs of Deliverable

The following proofs of deliverable are expected from this statement of work:

The payment shall be dependent upon successful acceptance of the deliverable completion report and the Delivery Acceptance Sheet (DAS).

Final payment for each deliverable shall be determined in accordance with the extent to which the defined KPIs for that deliverable have been achieved (Annex B).

KPI validation shall be performed by NCIA POC.

The Contractor may invoice one or more work packages together, provided they have been formally accepted.

The invoiced amount shall be equal to the sum of the agreed total bid percentages stated in the latest agreed Work Packages Delivery Schedule.

Invoices shall be accompanied with a Delivery Acceptance Sheet signed by the Contractor and the NCIA POC, or the assigned Service Delivery Manager.

The work packages cannot be invoiced before their defined payment milestone.

A – WP 01: Upon formal acceptance by the NCI Agency of the updated, maintained, and release-ready NIRIS software baseline aligned with supported Java LTS releases.

B – WP 02: Upon formal acceptance by the NCI Agency of the NIRIS unit and automated test updates.

C – WP 03: Upon formal acceptance by the NCI Agency of the enhanced NIRIS logging functionality.

D – WP 04: Upon formal acceptance by the NCI Agency of the updated NIRIS interface and interoperability support.

E – WP 05: Upon formal acceptance by the NCI Agency of the updated NIRIS software documentation set.

No payment shall be made for partially completed or non-accepted work packages.

Coordination and Reporting

The Contractor shall deliver the defined deliverables under the guidance of the NCIA POC, in coordination with the Project Manager, Service Delivery Manager, and relevant technical leads within the NIRIS project.

The Contractor shall primarily deliver the services remotely, unless a specific deliverable explicitly requires on-site execution at an NCIA-designated location.

The development and delivery of the deliverables shall follow an Agile approach, with activities planned, tracked and reviewed through agreed Sprint planning, execution, and review mechanisms.

The Contractor shall: participate in regular coordination activities, including sprint planning, daily stand-ups (as required), sprint reviews, and other project meetings; maintain up-to-date progress tracking through the agreed tools (e.g. Jira or equivalent); communicate proactively any risks, issues, or deviations impacting the delivery of the agreed deliverables.

For each deliverable to be considered complete and eligible for acceptance and payment, the Contractor shall submit a Deliverable Completion Report to the NCIA POC. The Deliverable Completion Report shall include, as a minimum: summary of the work performed; description of the delivered functionality or outcome; evidence of completion (e.g. code commits, test results, deployment artefacts, documentation); traceability to the agreed requirements and acceptance criteria.

The Deliverable Completion Report shall be subject to review and validation by the NCIA POC. The NCIA POC shall provide formal feedback, including: acceptance or rejection of the deliverable; evaluation against the defined acceptance criteria and applicable KPIs; identification of any required corrections or follow-up actions.

Only deliverables formally accepted by the NCIA POC shall be considered complete and eligible for payment in accordance with the defined payment milestones.

Security

Performance of the services described in this SOW requires a valid NATO SECRET security clearance prior to the start of the engagement.

It is the responsibility of the contracting company to obtain and maintain the security accreditation of all individuals working on this arrangement.

Constraints

All the documentation provided under this statement of work shall be based on NCIA templates or the format agreed with the NCIA POC.

All scripts, documentation and required code shall be stored under NATO Software Factory platforms and tools.

Practical Arrangements

This is a deliverables-based contract.

The Contractor shall be provided a user account for access to the NATO Software Factory (Azure DevOps).

This SOW requires scheduled travel on site in NCIA The Hague, twice per year or per request in any other European sites. The travel, lodging and associated expenses for travel are included in the total price of the bid, such that NCIA shall not be invoiced.

Extraordinary Travel (Purchaser Directed Travel) may be required to other NATO or non-NATO locations as necessary. In the event of such unforeseen meetings being called, the cost of all travel and subsistence will be addressed through a contract amendment. Extraordinary Travel expenses will be reimbursed in accordance with Article 5.5 of AAS+ Framework Contract. Such costs will be set as a separate PO line with a not to exceed value to cover and reimburse actual expenses upon submission of all receipts and invoices in line with NCIA processes.

The services depicted in this SOW are expected to be carried by either one contractor personnel or a team of contractors for the duration of the agreement. It is up to the bidder to propose the size of the team that delivers the services and produces the deliverables within the timelines allocated.

ANNEX B – KPI-TO-PAYMENT MAPPING MODEL

This Annex establishes the mechanism by which the achievement of defined Key Performance Indicators (KPIs) shall be mapped to the payment due for each deliverable under this Statement of Work. It describes how KPI results will be evaluated and applied for the purpose of determining the final payable amount.

Overall Payment Model

For each deliverable:

70% Fixed Payment shall be released upon formal acceptance, subject to the deliverable meeting the applicable acceptance criteria.

30% Variable Payment shall be contingent upon KPI performance.

Each KPI applicable to a deliverable shall be assigned an equal weighting within the 30% variable payment component (KPI Weight). The proportion of each KPI Weight payable shall be determined in accordance with the KPI scoring bands set out below.

Meets or exceeds target (100%): 100% of KPI weight

Minor deviation (90–99%): 90% of KPI weight

Moderate deviation (80–89%): 75% of KPI weight

Significant deviation (70–79%): 50% of KPI weight

No compliance (< 70%): 0% of KPI weight

Total Payment = Fixed Component + Variable Component

Fixed Component = 70% of deliverable value.

Variable Component = Sum of (KPI Weight × Percentage of KPI weight).

QUALIFICATIONS

Each contractor personnel must meet the following requirements

• At least 5 years of professional experience in software development, with a focus on full-stack systems.
• Proven ability to communicate effectively in English, both orally and in writing, in a clear, structured, and professional manner.
• Demonstrated experience in working within Agile/Scrum environments, including participation in sprint planning, execution, and review activities.
• At least 3 years of professional experience in Java-based software development, including experience with modern frameworks and backend service development.
• At least 2 years of experience working with web technologies, including TypeScript and/or Angular-based front-end development.
• At least 2 years of experience working with software integration, including RESTful services, messaging systems, or data exchange interfaces.
• At least 2 years of experience working with near real-time or data-intensive systems, including data processing, filtering, and dissemination.
• At least 1 year of professional experience working with containerization technologies (e.g. Docker), including building, packaging, and deploying Linux-based containers.
• At least 3 years of experience with DevOps and CI/CD practices, including use of tools such as GitLab, automated pipelines, and artifact repositories.
• Demonstrable experience in software testing practices, including unit testing, integration testing, and, where applicable, automated testing.
• Experience in defining acceptance criteria, test scenarios, or validation approaches for software deliverables.
• Demonstrable knowledge or experience in interoperability and data exchange standards, particularly within defence or similar domains (knowledge of Tactical Data Links is highly desirable).
• Experience working with distributed systems and multi-component architectures, including integration of multiple data sources.
• Familiarity with secure software development practices and working within controlled or regulated environments.
• The contractor personnel must be a national of a NATO member nation.
• Must hold a valid NATO SECRET security clearance as from the start date of the contract.

Company Description

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we enjoy our work, we inspire each other, we provide equal growth opportunities for all team members, all roles are represented in all countries. We grow together!

Job Description

As a senior developer, primary responsibility is to design, build, test and deployment of functionalities in Bosch Product Backbone (BOP). This product is a application used by all division of Bosch worldwide. One of the components of this product is the System Independent Material master (SIMAT). The SIMAT is a golden record calculated with complex rules in AMDP and CDS using S4/HANA core functionalities.

Tasks for this role include:

• As expert in SAP S/4 HANA Development you use you long experiences in development of code that is used for processes on group level in huge companies
• Should be able to understand the business needs and design and implement the requirements in SAP ABAP, BRF+, AMDP and CDS views.
• Analyze and evaluate the requirements for application enhancement with customer and senior architects to validate the completeness of requirement from implementation perspective
• Solve business issues by analyzing existing code and proposing solutions using SAP S/4 HANA Services.
• Prepare technical design documents for unit testing and integration support. Ensure the quality reviews (Unit test) are conducted.
• Driving quality and standards in our software engineering community, providing and discussing innovative solution approaches and suggestions for improvement in the development
• Work closely with Architects and IT Functional Consultants to ensure successful completion of User Stories within committed timeframe
• Ability to represent and argue the technical and implementation decisions to the architects and the customer.
• Develop application specifications, associated code and prepare technical design documents for unit testing and integration support
• Write end user documents,  document using UML/TOGAF in Sparx Enterprise Architect and train end users to operate new or modified programs
• 3rd Level Support within own component in case of defects are not found in your quality assurance but occur on productive system

Qualifications

Skills Requirements:

• 9+ years of hands-on development experience on SAP S/4 HANA, AMDPs and CDS views

Programming languages and skills:

• ABAP (Other languages of advantage)
• UML/TOGAF

Development experiences :

• ABAP RESTful Application Programming Model (RAP)
• Knowledge of databases features of HANA 2.0 (SAP S4HANA ON PREMISE Foundation Release 2023 FPS 01 (02/2024))
• Business modeling rule framework (BRF+)
• Good knowledge in technical areas like

CDS Views, AMDP, OOPs concept, Web services, ADBC concepts, RFC, and FPM

• Workflow Management
• Cloud Application Programming Model (CAP)

Business Processes

• MDM processes in Material master incl. Connected objects (Material classification, Document info records, Engineering Change Master, Bill of Material & Purchase info records)

Additional Information

Work LikeABosch:

• Employment Contract
• Competitive salary + annual bonus
• Hybrid work with flexible working hours
• Referral Bonus Program
• Copyright costs for IT employees

Grow LikeABosch:

• Complex environment of working, professional support and possibility to share knowledge and best practices
• Ongoing development opportunities in a multinational environment
• Broad access to professional trainings (incl. language courses), conferences and webinars

Live LikeABosch:

• Private medical care and life insurance
• Cafeteria System with multiple benefits (incl. MultiSport, shopping vouchers, cinema tickets, etc.)
• Prepaid Lunch Card
• Number of benefits for families (for instance summer camps for kids)
• Non-working days on the 31st of December

What you will be doing

At BMAT, infrastructure is not just a support function in the background — it is a core part of how we deliver music data and technology at scale to the global music industry.

As a Senior Systems Engineer, you’ll help operate, improve and maintain the infrastructure that powers BMAT’s platforms and services across both on-premise and cloud environments. This role is ideal for someone who enjoys understanding systems deeply, solving operational challenges, automating repetitive work, and building reliable infrastructure that engineering teams can depend on.

You’ll work in a highly autonomous environment where engineers are trusted to take ownership of their work, contribute improvements, and help make systems more stable, secure and maintainable over time. Alongside day-to-day operational responsibilities, each team member also contributes to infrastructure improvement initiatives focused on automation, reliability and operational efficiency.

Key Responsibilities

• Manage and maintain our hybrid (on-premise and cloud) system infrastructure, championing resilience, stability and sustainability in your approach.
• Identify and implement improvements to existing infrastructure, tooling and operational workflows.
• Build strong knowledge across BMAT’s infrastructure environment and contribute as a trusted technical team member.
• Write flexible, reusable IaC or configuration management system modules that the rest of the team can leverage to accelerate their own work.
• Identify reliability, performance or security risks proactively before they impact production systems.
• Assist the engineering teams in resolving their issues.
• Uphold technical quality standards and established conventions.
• Contribute to operational excellence by participating in incident response, maintenance and support workflows together with the IT team.

Collaboration and Team Dynamics

You will work closely with BMAT’s Engineering and DevOps teams to deploy, maintain and improve the infrastructure that supports our products and internal platforms. This collaboration is essential to ensuring reliability, scalability and operational efficiency across the company’s services and systems.

Expectations of the role

Within 30 Days:

During the first month, your primary focus will be on familiarising yourself with essential aspects of the role and supporting foundational tasks.

• Successfully complete the on-boarding process and get to know the IT platforms and services, company culture, processes, roles and responsibilities.
• Familiarise yourself with the IT and Engineering departments to understand their objectives and workflows.
• Gain experience with existing tooling, processes, and procedures.
• Start work on smaller tasks and take on tickets you feel confident you can handle.

Within 60 Days:

By the second month, you’ll be expected to take on more complex responsibilities and actively contribute to team/project/strategic initiatives.

• Collaborate with IT and Engineering teams to gain a deeper understanding of their objectives and workflows.
• Assist in the maintenance and upgrade of existing deployments, including e.g. OS and package upgrades or CMS improvements.
• Respond to platform-related warnings and alarms, contributing to the goal of ensuring a stable and resilient production environment.
• Further support your teammates by taking on more challenging tasks and tickets.

Within 90 Days:

At the end of the probationary period, you’ll be expected to autonomously manage tasks, contribute to strategic planning, and take on leadership roles as appropriate.

• Collaborate with the Engineering teams to understand their objectives and workflows.
• Schedule and perform maintenance and upgrade tasks to ensure an up-to-date and secured server infrastructure.
• Coordinate maintenance activities with other teams to minimize critical systems downtime.
• Assume platform-related medium-complexity tickets and tasks.
• Take ownership of team quarterly objectives and see them through to successful completion.
• Support other teams by helping them solve infrastructure access issues, hardware performance problems or backup restoration tasks.

Your technical skills

• 5+ years of experience in IT systems administration.
• Extensive experience with CLI-based installation and maintenance of the Linux OS in on-premise or cloud environments.
• Experience managing SaaS systems, including public and private cloud resources, via web console and/or API.
• Knowledge of TCP/IP network protocols and administration, and associated protocols and systems (e.g. DNS, HTTP).
• Python 3 and/or BASH scripting/programming skills.
• Extensive experience with configuration management tools such as Puppet and Ansible, and/or IaC tools such as Terraform.
• Experience in the usage and/or management of VPN systems such as  OpenVPN and/or IPsec.
• Understanding of symmetric and asymmetric key cryptography systems and their application (SSH, SSL).
• Experience in SQL database usage - DBA experience is an advantage.

Your organisational skills

• Excellent communication skills, both verbal and written, with an attention to detail.
• Ability to effectively communicate with team members, stakeholders, and third-parties.
• Time-management and self-organisation skills, with the ability to prioritize tasks among competing workloads.
• Proactive attitude with a willingness to learn, take initiative, and accept feedback from managers.
• Collaborative team player contributing positively to team dynamics to foster a supportive work environment.
• Ability to maintain confidentiality and handle sensitive information with discretion.
• Fluency in English. Proficiency in Spanish and Catalan is highly appreciated, but not mandatory.
• The role is located in Barcelona. Local candidates are preferred, but remote work arrangements may be considered.

You Can Enjoy

• Flexible working hours and location
• Flat hierarchy
• You can make the role your own and run your own development
• Online language classes to improve your Spanish or English
• Online and onsite courses and music industry workshops run by inhouse experts
• We’ll provide you with all equipment needed for you to be comfortable
• Unlimited time off because we believe that you know best when you need to rest.
• Barcelona HQ office available to you, kitted out with a rehearsal room https://www.bmat.com/bmat-house/

Who the FAQ are BMAT

BMAT started in 2005 when a group of engineers with a passion for music decided to spin-off from an audio research lab in Barcelona. We’re now over 250 people, spread across Barcelona, Buenos Aires, Lima, Rio de Janeiro, London, Paris, New Jersey, Oslo, LA, Singapore, Tokyo, Manila, Bangkok and Lagos.

We’re a team of pretty decent people who enjoy working with each other. We’re open-minded and well-traveled, coming from all parts of the world. We’ve got rappers, producers, cello players, DJs, and songwriters. The passion for music and the excitement for innovative technology have proven to make a good combination.

BMAT has grown as a company of companies. Within BMAT there are a number of products and services that developed semi autonomously for different players – Digital Service Providers, Publishers and Collective Management Organisations.

Diverse perspectives drive innovation, and innovation is kind of our thing. Our open-minded and flexible culture organically fosters this diversity. We’ve learnt that we thrive on learning from each other, so we don’t just welcome but actively hire a range of open-minded people from all walks of life. Our team is made up of people with different backgrounds, perspectives, orientations, abilities, musical tastes, dress sense and time-zones - but we all have one common goal: Making the music world a better place. With equal opportunities for everyone, BMAT is a pretty nice place to work.

WHAT IS BOX?

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

The Search Relevance team at Box powers discovery across billions of files, enabling customers to find the right content quickly, securely, and intelligently. As we expand into a new era of AI-powered content understanding, we’re investing in the foundation that makes great search possible: reliable systems, strong signals, and models that learn from real-world usage.

This is a rare opportunity to work at the intersection of information retrieval science, applied machine learning, and large-scale distributed systems. You’ll be building the infrastructure that powers intelligent content discovery for Fortune 500 companies—where milliseconds matter, relevance is measurable, and your experiments directly impact how millions of users work.

We’re looking for a Machine Learning Engineer III to improve search quality end-to-end—signals, ranking, retrieval, and evaluation—while building scalable, low-latency services that serve queries in real time. You’ll collaborate with senior engineers, Product, Data, and Infra partners to productionize modern retrieval techniques and experimentation frameworks that directly impact how millions of users work.

WHAT YOU’LL DO

• Design, build, and iterate on components for ranking, retrieval, and recommendations that improve measurable relevance and latency.
• Implement production features leveraging embeddings, semantic/hybrid search, and LLM-enabled retrieval under mentorship and design guidance.
• Contribute to offline/online evaluation, A/B tests, and relevance tuning using metrics such as NDCG, MRR, and precision@k.
• Develop reliable, observable microservices and near real-time indexing pipelines across distributed systems.
• Own well-scoped projects from design to rollout, writing clear design docs, tests, and operational runbooks.
• Improve data and feature pipelines (batch/streaming) to ensure quality, freshness, and end-to-end performance.
• Document patterns and contribute to team best practices that raise the bar on code quality and reliability.
• Participate in our on-call rotation, available at all times while on-call to help respond to and triage any issues that arise.

WHO YOU ARE

• 3+ years of industry experience building backend or distributed systems, with production ownership of services or data pipelines.
• Proficient in at least one of: Java, Scala, C++, or Python; comfortable writing production-grade Python is a plus.
• Exposure to search, ranking, recommendations, or applied ML in production; understand the basics of training-to-serving workflows.
• Experience with data pipelines, message queues, or streaming systems (e.g., Kafka, Pub/Sub) and near real-time processing.
• Familiarity with cloud-native microservices, CI/CD, observability, and performance tuning.
• BS in Computer Science or related field, or equivalent practical experience.
• Pragmatic, metrics-driven mindset—eager to experiment, measure impact, and iterate quickly in collaboration with partners.

Preferred

• Experience with Elasticsearch, Solr, Lucene, or custom search systems; understanding of inverted indexes and scoring functions.
• Knowledge of relevance tuning, learning-to-rank concepts, and offline/online experimentation practices.
• Exposure to vector search, dense/sparse embeddings, and hybrid retrieval architectures.
• Familiarity with IR fundamentals (BM25, TF-IDF, multi-stage retrieval) and query understanding.
• Experience with Kubernetes/Terraform and a major cloud (GCP/AWS/Azure).
• Practical exposure to PyTorch or TensorFlow; LLM familiarity helpful but not required.

Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.Your Recruiter will share more about how we work and company culture during the hiring process.

At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in.If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply!

EQUAL OPPORTUNITY

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience.

Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form. Reasonable accommodations may include scheduling adjustments, document dictation and beyond.

Notice to applicants in Los Angeles:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chair Ordinance.  The Fair Chance Ordinance is provided here.

Notice to applicants in San Francisco:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chair Ordinance.  The Fair Chance Ordinance is provided here.

For details on how we protect your information when you apply, please see our Personnel Privacy Notice. If you are a California-resident, please read our California Applicant & Candidate Privacy Notice here.

Box is committed to fair and equitable compensation practices. Actual base salary (or OTE if commissionable role) is dependent upon factors such as: knowledge, skill level, experience, and work location. This role is also eligible for equity and benefits. For more information, check out our benefits and perks.

In accordance with OFCCP compliance, here is the Pay Transparency Provision.

United States Pay Range

$175,500—$219,500 USD

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

At NICE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

So, what’s the role all about?

The DevOps Engineer is a hybrid, senior-level role sitting at the intersection of operational reliability and software delivery automation. You will function as an integrated part of a cross-functional engineering team, combining the proactive service management mindset of an Application Operations Engineer with the automation-first philosophy of a DevOps practitioner.

You will be responsible for keeping production environments healthy and performant, while simultaneously designing and maintaining the CI/CD pipelines, infrastructure-as-code frameworks, and tooling that enable rapid, high-quality software delivery. You are the connective tissue between engineering, platform, and operations — someone who is equally comfortable in an incident bridge call and a sprint planning meeting.

How will you make an impact?

DevOps & Automation

• Design, build, and maintain continuous integration and continuous delivery (CI/CD) pipelines for rapid, quality-assured deployment of software deliverables.
• Build and manage Infrastructure as Code (IaC) using tools such as CloudFormation, Ansible, Terraform, Chef, or Puppet.
• Manage day-to-day operations of release pipelines, build tools, artifact repositories, and source control systems.
• Coordinate build and release activities with engineering, QA, product, and other stakeholders across the organisation.
• Identify, research, and prototype new technologies and practices to continuously improve DevOps processes and team efficiency.
• Maintain and upgrade DevOps systems in both production and non-production environments on an ongoing basis.

Cloud & Application Operations

• Proactively monitor infrastructure and application health — including CPU, memory, file systems, databases, batch jobs, and network performance — and respond swiftly to anomalies.
• Identify and resolve operational issues including infrastructure failures, batch processing errors, network disruptions, and client data feed problems.
• Troubleshoot and respond to production downtime, performance degradation, and security-related incidents in a timely, structured manner.
• Perform end-to-end operational duties covering application server health, service availability, and platform integrity in accordance with documented processes and runbooks.
• Review and manage client service request tickets in adherence to defined SLAs, ensuring accountability and timely resolution.
• Provide on-call off-hour support as part of a structured rotation, including during non-prime and weekend shift windows as required.

Documentation, Communication & Governance

• Maintain complete and accurate operational documentation including incident tracking, change logs, and runbooks.
• Produce metric reports and regular productivity/status updates for internal stakeholders and management.
• Communicate proactively and clearly — both written and verbal — with internal teams, leadership, and customers on a daily basis.
• Liaise with management to share feedback on existing and new processes, methodologies, best practices, and technology changes.
• Work efficiently under pressure to meet tight deadlines while maintaining the professionalism, accuracy, and consistency expected in a high-availability environment.
• Demonstrate a high level of individual accountability and deliver service and support that consistently exceeds client expectations.

Have you got what it takes?

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Business Information Systems, or a related field (or equivalent practical experience).
• 4+ years of combined experience in application/production support, cloud operations, and/or software DevOps engineering in a high-availability SLA environment.
• Demonstrated experience working as a contributor on a software engineering or platform team.

Technical Skills – Required

• Strong proficiency with Linux and Unix environments; working knowledge of Windows Server administration.
• Experience writing scripting languages — Python, PowerShell, and/or Perl — for automation, monitoring, and tooling.
• Experience with distributed source control systems, preferably GitHub or BitBucket.
• Solid understanding of application server technologies including Tomcat and SSH-based remote management.
• Database experience with one or more of: SQL Server, Oracle, or MySQL — including querying, performance tuning, backup/restore, and lifecycle management.
• Experience with application debugging, performance analysis, and scalability assessment.
• Familiarity with standard application security compliance and best practices.
• Knowledge of fault detection, RCA (Root Cause Analysis), and structured resolution processes.
• Experience with Amazon Web Services (AWS) — core services for compute, storage, networking, and monitoring.

Technical Skills – Deep Knowledge in at Least One of:

• Database Administration: Structured and/or unstructured, indexing, performance tuning, backup/restore, data lifecycle management, scaling.
• Layer 2⁄3 Networking: DNS, SSL/TLS, Load Balancing, IPv4 subnetting, firewalling, and CDN configuration.
• Operating Systems & Virtualisation: Linux/Windows, containers, orchestration (Kubernetes), storage types and performance, monitoring, and capacity planning.
• VoIP Administration: Signalling, encoding/decoding, protocols including SIP, RTP, Media Gateway, security, border controllers, and QoS.

You will have an advantage if you also have:

• Familiarity with CI/CD automation tools such as Jenkins, CircleCI, Bamboo, or TFS Build.
• Experience with release pipeline tooling — Concourse, Thoughtworks Go, Octopus Deploy, ElectricFlow, or XebiaLabs.
• Experience with Docker containers, microservices architecture, and container orchestration (Kubernetes).
• Experience with infrastructure automation tools: Ansible, Chef, Puppet, or AWS CloudFormation.
• Experience with Artifactory or similar artifact repository management.
• NICE product knowledge and/or implementation or support experience with NICE CXone or related platforms.
• Knowledge of ETL processes and data pipeline management.
• Call centre or telecoms industry experience.

What’s in it for you?

Learn more about the Benefits at NICE

Join an ever-growing, market-disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

About NICE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NICE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions

Known as an innovation powerhouse that excels in AI, cloud and digital, NICE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NICE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation, or any other category protected by law.

Requisition ID: 11151 Reporting into: Director, Cloud Operations CXone, EMEA

Role Type: Individual Contributor

About NiCE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NiCE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions.

Known as an innovation powerhouse that excels in AI, cloud and digital, NiCE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NiCE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.

An Introduction to Primer

Primer is the unified infrastructure for global payments. We give finance and payments teams the visibility and control to reduce complexity, improve performance, and capture more revenue - all from a single platform.

Backed by Sofina, Peak XV Partners, ICONIQ, Tencent, Accel, and Balderton, we’re building the payments layer the world’s best companies rely on.

Watch our showcase >

Read up on our $100m Series C

Learn more about our culture >

🔍 What will you be doing?

• Leading the design and implementation of core backend services for high performance, complex distributed systems

• Taking ownership of key technology decisions, building for scale and optimising for output

• Driving and using modern development practices such as BDD and TDD would be highly beneficial

• Creating clear, modern, well tested code

• Collaborating across teams in a product-driven environment

• Conducting code reviews and continuously look at ways of improving our ways of working

• Creating detailed internal documentation for the projects you work on

👀 What we’d love to see:

• In-depth understanding of the entire development process (design, development and deployment)

• Knowledge of building developer frameworks and workflows, allowing both customers and third-parties to integrate as seamlessly as possible

• Experience in Python is advantageous (it’s what we use!) but we have had success hiring engineers of any technical background and understand that people can adapt

• Highly motivated self-starter who values autonomy and getting things done

• Excellent verbal and written communication skills

• Payments knowledge, always looking for ways to optimise our merchant developer experience

• You will need to be based in: Poland, Portugal, Hungary, Romania or South Africa.

✅ A typical interview process

• An initial intro call with a Talent Partner

• An interview with the Hiring Manager

• Challenge Stage - Contextualised to the role

• A final, values-alignment interview

What’s the culture like at Primer?

We’re building a culture where people can do their best work and be proud of the impact they have. You’ll be working with people who are mission-driven, smart, and reflective, and who are genuinely invested in building exceptional products and delivering success for our merchants.

We work remotely, and have done since day one. We believe that building a successful, profitable company goes beyond proximity. We invest in our relationships through great remote working practices and thoughtfully designed face-to-face time, including workations, our annual company retreat, and co-working space access worldwide.

The work is challenging. Scaleups are a challenge, and building category-defining products is a challenge. But there’s a meaningful difference between a challenge and a struggle. At Primer, the right challenge comes with the right support: strong onboarding, a collaborative environment, and a team that is genuinely invested in your success. It’s never something you face alone.

Our benefits

🌍 We are fully remote and globally distributed; and have been since day one

💰 Competitive share options

🌴 Uncapped holiday, with 25 days minimum to be taken

🗣️ Co-working space access

📅 Workations & Company Retreat

💻 The best equipment for your role

🏠 £500 towards your home office setup

🔎 Generous learning budget

🏥 Private Medical Insurance

📈 A broad set of additional perks and benefits ( depending on location)

Don’t meet every single requirement?

At Primer, we’re dedicated to building a diverse, inclusive, and authentic workplace. If you’re excited about this role but your experience doesn’t align perfectly with every qualification listed, we encourage you to apply. You may be the right candidate for this or other roles.

Primer is committed to the equal treatment of all current and prospective employees and adopts a zero-tolerance approach to discrimination, regardless of age, disability, sex, sexual orientation, pregnancy and maternity, race or ethnicity, religion or belief, gender identity, marriage and civil partnership, or any other background or belief.

Why Thunderbird?

Thunderbird is one of the world’s most trusted open-source email applications, empowering more than 20 million people globally. At MZLA, the team behind Thunderbird, we build privacy-respecting communication tools that help people manage their digital lives while staying in control of their data.

We are open source by design. Our products are developed transparently and in collaboration with a global community of contributors, and that same spirit shapes how we work: collaboratively, inclusively, and with a shared commitment to putting users first.

Our small but growing distributed team includes 65+ people across seven countries. As Thunderbird evolves beyond a single desktop application, we are expanding across desktop, mobile, and paid services to build independent, privacy-respecting alternatives to big tech ecosystems.

Our revenue model combines user donations, which help keep Thunderbird’s apps freely available, with paid services that cover the costs of hosted offerings while supporting long-term sustainability and continued innovation.

A note about MZLA and Mozilla: MZLA Technologies Corporation is the nonprofit-owned company behind Thunderbird and part of the Mozilla family. MZLA is separate from Mozilla Corporation and has its own compensation programs, benefits, and employment policies.

To learn more, visit www.thunderbird.net

The opportunity

The Senior Site Reliability Engineer establishes and maintains the infrastructure and operational systems that Thunderbird users and teams depend on every day. You’ll design and develop CI/CD systems for MZLA websites, services, and release workflows, diagnose and debug production incidents, and implement improvements to enhance system reliability. We believe that good infrastructure work is invisible when it’s going well and invaluable when it isn’t.

This role is for someone who treats production as something to be understood, not just kept running. You write things down, flag problems before they become fires, and leave documentation better than you found it. You bring production instincts, infrastructure-as-code fluency, and security awareness that’s baked in, not bolted on.

You’ll work closely with Software Development Engineers, team members, and community contributors, reporting to the Sr Manager, Platform Infrastructure. This is a great opportunity for someone who thrives with ambiguity, makes good decisions without a complete picture, and cares about Thunderbird’s mission: open-source software used by millions who choose privacy and ownership over convenience.

This role requires consistent overlap with Pacific Time zone working hours to enable effective collaboration. You should have availability for regular overlap hours for context sharing with Pacific Time colleagues.

What you’ll do

• Operate and evolve our EKS-based Kubernetes platform, supporting service migrations, platform improvements, and reliability initiatives.
• Design and develop CI/CD systems supporting websites, services, and Thunderbird desktop releases, contributing to pipeline reliability and OIDC-based authentication across GitHub Actions workflows.
• Write and maintain infrastructure in Pulumi and/or Terraform/OpenTofu across multiple AWS accounts.
• Operate and evolve our observability stack (VictoriaMetrics, VictoriaLogs, Grafana, Vector) and partner with engineering teams to incorporate instrumentation and monitoring into service design.
• Apply security-conscious infrastructure practices, including least-privilege IAM, secrets management via AWS Secrets Manager and External Secrets Operator, and network segmentation.
• Diagnose and debug production incidents; drive root-cause analysis and post-incident improvements to prevent recurring problems.
• Participate in on-call rotation and collaborate with SDEs and fellow SREs to ship, maintain, and monitor new builds and support service onboarding.
• Contribute to runbooks, architecture documentation, and team processes.

What you bring

• 7+ years of experience in infrastructure, platform engineering, or site reliability roles, including hands-on production Kubernetes experience in workload operations, troubleshooting, and cluster management.
• Hands-on experience with infrastructure-as-code on AWS using Terraform, OpenTofu, or Pulumi.
• Security awareness in day-to-day infrastructure work: identity, least privilege, secrets hygiene, and network controls.
• Demonstrated ownership mindset with the ability to proactively identify issues, drive work to completion, and communicate risks early.
• Excellent async written communication skills; comfortable working with a geographically distributed team.
• Ability to collaborate effectively with software engineers and non-engineering stakeholders to improve platform reliability and operational efficiency.
• Ability to learn, evaluate, and responsibly use emerging technologies, including AI-enabled tools, to improve work processes.

Bonus points for

• Experience with GitOps workflows (ArgoCD or Flux).
• Familiarity with Keycloak or similar identity platforms (OIDC, SAML, federation).
• Knowledge of email protocols and/or experience operating email infrastructure (SMTP, IMAP).
• Prior work in or alongside an open-source community.
• French, German, Japanese, or other language proficiency in addition to English.

What success looks like

You’ll be successful in this role if you treat production as something to be understood, not just kept running. You write things down, flag problems before they become fires, and leave documentation better than you found it.

You bring production instincts. You’ve been paged at 2am, you know what good alerting looks like, and you’ve done the post-mortem work to make sure it doesn’t happen the same way twice. You think in code, not in consoles. Your security awareness is baked in, not bolted on. You default to least privilege and ask “what’s the blast radius?” before you ship.

You’re comfortable with ambiguity. We’re a small team building toward something, and you can make good decisions without a complete picture. Thunderbird is open-source software used by millions who choose privacy and ownership over convenience. That matters to you.

Work environment

This is a full-time, fully remote position. You’ll join a distributed team of Thunderbird staff, open-source community members, and contributors from around the world.

We rely on clear communication, thoughtful documentation, and collaborative decision-making to work effectively across time zones and disciplines.

Compensation & benefits

We benchmark our base salaries to local markets and target the 60th percentile of the peer market. The salary ranges for this role are:

• US: $123,000 - $144,000 USD
• Canada: $108,000 - 125,000 CAD
• UK: £62,000 - £72,000 GBP

We may consider candidates with strong skills but less than the required experience. Title, level and compensation will be determined based on qualifications and experience.

In addition to competitive salaries, we offer a comprehensive benefits package designed to support your whole self.

Work & career

• Fully remote work & schedule flexibility
• Company-provided laptop
• Annual bonus program
• Monthly remote work stipend
• Annual professional development stipend
• Industry conferences
• Company all-hands and team gatherings

Rest & play

• 24 days PTO per year (prorated)
• Your birthday
• Year-end company shutdown
• 9 wellbeing days
• Public holidays
• Other paid leave
• Quarterly wellbeing stipend for personal / family activities

Health & family

• 401(k) / RRSP contributions
• Health, dental, & vision insurance
• Disability insurance
• Life insurance
• Employee assistance program
• Paid parental leave
• Paid sick days

Work eligibility

Applicants must reside in and have permanent work authorization for the country location(s) specified in the posting. We are unable to consider applicants outside of these markets at this time. And, we do not provide visa sponsorship.

How to apply

Please apply directly through our career page. We carefully review every cover letter and screening question, so take the time to answer each fully.We value authentic, thoughtful responses that reflect your own experience and perspective. It is fine to use AI tools to polish your writing, but your answers should be your own. Candidates who submit generic or unoriginal AI-generated responses may be disqualified from further consideration.

Our commitment to diversity, equity, and inclusion

MZLA believes in the value of diverse creative practices and forms of knowledge, and knows diversity, equity and inclusion are crucial to and enrich the company’s core mission. We encourage applications from everyone, including members of all equity-seeking communities, such as (but not limited to) women, racialized and Indigenous persons, persons with disabilities, persons of all sexual orientations, gender identities and expressions.

We are an equal opportunity employer. We do not discriminate on the basis of race (including hairstyle and texture), religion (including religious grooming and dress practices), gender, gender identity, gender expression, color, national origin, pregnancy, ancestry, domestic partner status, disability, sexual orientation, age, genetic predisposition, medical condition, marital status, citizenship status, military or veteran status, or any other basis covered by applicable laws. MZLA will not tolerate discrimination or harassment based on any of these characteristics or any other unlawful behavior, conduct, or purpose.

We will ensure that qualified individuals with disabilities are provided reasonable accommodations to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment, as appropriate. Please contact us at hiringaccommodations@thunderbird.net to request accommodation.

#LI-DNI

WHAT IS BOX?

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

The Search Relevance team at Box powers discovery across billions of files, enabling customers to find the right content quickly, securely, and intelligently. As we expand into a new era of AI-powered content understanding, we’re investing in the foundation that makes great search possible: reliable systems, strong signals, and models that learn from real-world usage.

This is a rare opportunity to work at the intersection of information retrieval science, applied machine learning, and large-scale distributed systems. You’ll be building the infrastructure that powers intelligent content discovery for Fortune 500 companies—where milliseconds matter, relevance is measurable, and your experiments directly impact how millions of users work.

We’re looking for a Machine Learning Engineer III to improve search quality end-to-end—signals, ranking, retrieval, and evaluation—while building scalable, low-latency services that serve queries in real time. You’ll collaborate with senior engineers, Product, Data, and Infra partners to productionize modern retrieval techniques and experimentation frameworks that directly impact how millions of users work.

WHAT YOU’LL DO

• Design, build, and iterate on components for ranking, retrieval, and recommendations that improve measurable relevance and latency.
• Implement production features leveraging embeddings, semantic/hybrid search, and LLM-enabled retrieval under mentorship and design guidance.
• Contribute to offline/online evaluation, A/B tests, and relevance tuning using metrics such as NDCG, MRR, and precision@k.
• Develop reliable, observable microservices and near real-time indexing pipelines across distributed systems.
• Own well-scoped projects from design to rollout, writing clear design docs, tests, and operational runbooks.
• Improve data and feature pipelines (batch/streaming) to ensure quality, freshness, and end-to-end performance.
• Document patterns and contribute to team best practices that raise the bar on code quality and reliability.
• Participate in our on-call rotation, available at all times while on-call to help respond to and triage any issues that arise.

WHO YOU ARE

• 3+ years of industry experience building backend or distributed systems, with production ownership of services or data pipelines.
• Proficient in at least one of: Java, Scala, C++, or Python; comfortable writing production-grade Python is a plus.
• Exposure to search, ranking, recommendations, or applied ML in production; understand the basics of training-to-serving workflows.
• Experience with data pipelines, message queues, or streaming systems (e.g., Kafka, Pub/Sub) and near real-time processing.
• Familiarity with cloud-native microservices, CI/CD, observability, and performance tuning.
• BS in Computer Science or related field, or equivalent practical experience.
• Pragmatic, metrics-driven mindset—eager to experiment, measure impact, and iterate quickly in collaboration with partners.

Preferred

• Experience with Elasticsearch, Solr, Lucene, or custom search systems; understanding of inverted indexes and scoring functions.
• Knowledge of relevance tuning, learning-to-rank concepts, and offline/online experimentation practices.
• Exposure to vector search, dense/sparse embeddings, and hybrid retrieval architectures.
• Familiarity with IR fundamentals (BM25, TF-IDF, multi-stage retrieval) and query understanding.
• Experience with Kubernetes/Terraform and a major cloud (GCP/AWS/Azure).
• Practical exposure to PyTorch or TensorFlow; LLM familiarity helpful but not required.

Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.Your Recruiter will share more about how we work and company culture during the hiring process.

At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in.If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply!

EQUAL OPPORTUNITY

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience.

Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form. Reasonable accommodations may include scheduling adjustments, document dictation and beyond.

Notice to applicants in Los Angeles:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chair Ordinance.  The Fair Chance Ordinance is provided here.

Notice to applicants in San Francisco:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chair Ordinance.  The Fair Chance Ordinance is provided here.

For details on how we protect your information when you apply, please see our Personnel Privacy Notice. If you are a California-resident, please read our California Applicant & Candidate Privacy Notice here.

Box is committed to fair and equitable compensation practices. Actual base salary (or OTE if commissionable role) is dependent upon factors such as: knowledge, skill level, experience, and work location. This role is also eligible for equity and benefits. For more information, check out our benefits and perks.

In accordance with OFCCP compliance, here is the Pay Transparency Provision.

United States Pay Range

$175,500—$219,500 USD

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

At NICE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

So, what’s the role all about?

The DevOps Engineer is a hybrid, senior-level role sitting at the intersection of operational reliability and software delivery automation. You will function as an integrated part of a cross-functional engineering team, combining the proactive service management mindset of an Application Operations Engineer with the automation-first philosophy of a DevOps practitioner.

You will be responsible for keeping production environments healthy and performant, while simultaneously designing and maintaining the CI/CD pipelines, infrastructure-as-code frameworks, and tooling that enable rapid, high-quality software delivery. You are the connective tissue between engineering, platform, and operations — someone who is equally comfortable in an incident bridge call and a sprint planning meeting.

How will you make an impact?

DevOps & Automation

• Design, build, and maintain continuous integration and continuous delivery (CI/CD) pipelines for rapid, quality-assured deployment of software deliverables.
• Build and manage Infrastructure as Code (IaC) using tools such as CloudFormation, Ansible, Terraform, Chef, or Puppet.
• Manage day-to-day operations of release pipelines, build tools, artifact repositories, and source control systems.
• Coordinate build and release activities with engineering, QA, product, and other stakeholders across the organisation.
• Identify, research, and prototype new technologies and practices to continuously improve DevOps processes and team efficiency.
• Maintain and upgrade DevOps systems in both production and non-production environments on an ongoing basis.

Cloud & Application Operations

• Proactively monitor infrastructure and application health — including CPU, memory, file systems, databases, batch jobs, and network performance — and respond swiftly to anomalies.
• Identify and resolve operational issues including infrastructure failures, batch processing errors, network disruptions, and client data feed problems.
• Troubleshoot and respond to production downtime, performance degradation, and security-related incidents in a timely, structured manner.
• Perform end-to-end operational duties covering application server health, service availability, and platform integrity in accordance with documented processes and runbooks.
• Review and manage client service request tickets in adherence to defined SLAs, ensuring accountability and timely resolution.
• Provide on-call off-hour support as part of a structured rotation, including during non-prime and weekend shift windows as required.

Documentation, Communication & Governance

• Maintain complete and accurate operational documentation including incident tracking, change logs, and runbooks.
• Produce metric reports and regular productivity/status updates for internal stakeholders and management.
• Communicate proactively and clearly — both written and verbal — with internal teams, leadership, and customers on a daily basis.
• Liaise with management to share feedback on existing and new processes, methodologies, best practices, and technology changes.
• Work efficiently under pressure to meet tight deadlines while maintaining the professionalism, accuracy, and consistency expected in a high-availability environment.
• Demonstrate a high level of individual accountability and deliver service and support that consistently exceeds client expectations.

Have you got what it takes?

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Business Information Systems, or a related field (or equivalent practical experience).
• 4+ years of combined experience in application/production support, cloud operations, and/or software DevOps engineering in a high-availability SLA environment.
• Demonstrated experience working as a contributor on a software engineering or platform team.

Technical Skills – Required

• Strong proficiency with Linux and Unix environments; working knowledge of Windows Server administration.
• Experience writing scripting languages — Python, PowerShell, and/or Perl — for automation, monitoring, and tooling.
• Experience with distributed source control systems, preferably GitHub or BitBucket.
• Solid understanding of application server technologies including Tomcat and SSH-based remote management.
• Database experience with one or more of: SQL Server, Oracle, or MySQL — including querying, performance tuning, backup/restore, and lifecycle management.
• Experience with application debugging, performance analysis, and scalability assessment.
• Familiarity with standard application security compliance and best practices.
• Knowledge of fault detection, RCA (Root Cause Analysis), and structured resolution processes.
• Experience with Amazon Web Services (AWS) — core services for compute, storage, networking, and monitoring.

Technical Skills – Deep Knowledge in at Least One of:

• Database Administration: Structured and/or unstructured, indexing, performance tuning, backup/restore, data lifecycle management, scaling.
• Layer 2⁄3 Networking: DNS, SSL/TLS, Load Balancing, IPv4 subnetting, firewalling, and CDN configuration.
• Operating Systems & Virtualisation: Linux/Windows, containers, orchestration (Kubernetes), storage types and performance, monitoring, and capacity planning.
• VoIP Administration: Signalling, encoding/decoding, protocols including SIP, RTP, Media Gateway, security, border controllers, and QoS.

You will have an advantage if you also have:

• Familiarity with CI/CD automation tools such as Jenkins, CircleCI, Bamboo, or TFS Build.
• Experience with release pipeline tooling — Concourse, Thoughtworks Go, Octopus Deploy, ElectricFlow, or XebiaLabs.
• Experience with Docker containers, microservices architecture, and container orchestration (Kubernetes).
• Experience with infrastructure automation tools: Ansible, Chef, Puppet, or AWS CloudFormation.
• Experience with Artifactory or similar artifact repository management.
• NICE product knowledge and/or implementation or support experience with NICE CXone or related platforms.
• Knowledge of ETL processes and data pipeline management.
• Call centre or telecoms industry experience.

What’s in it for you?

Learn more about the Benefits at NICE

Join an ever-growing, market-disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

About NICE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NICE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions

Known as an innovation powerhouse that excels in AI, cloud and digital, NICE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NICE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation, or any other category protected by law.

Requisition ID: 11151 Reporting into: Director, Cloud Operations CXone, EMEA

Role Type: Individual Contributor

About NiCE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NiCE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions.

Known as an innovation powerhouse that excels in AI, cloud and digital, NiCE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NiCE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

So, what’s the role all about?

We are seeking a Senior Cloud Architect to join NICE IT AI and own the Azure cloud and AI infrastructure that powers intelligent automation across the enterprise.

This is a deeply hands-on role. You will design, build, and govern the full-stack architecture, from enterprise networking and private connectivity up to AI orchestration, delivering the platform to the development teams while partnering with the Systems, Network, and Security teams to connect, govern, and approve every design before it goes live.

How will you make an impact?

You will own NICE’s IT AI cloud architecture end-to-end, combining hands-on Azure engineering with architectural leadership across these areas:

Cloud Architecture Design & Implementation

• Own the end-to-end Azure architecture for AI workloads (LLMs, RAG, vector DBs, Graph, agents, MLOps) across all platform layers, with reference designs and ADRs.

Enterprise Networking & Private Connectivity

• Design hub-and-spoke VNets, private connectivity (Private Endpoints, Private DNS), firewall/ingress patterns, and isolated multi-environment topology (prod / dev / test).

AI Developer Toolchain & Platform Engineering

• Architect the developer AI stack, Azure AI Foundry, GitHub Copilot, Claude/MCP, Models Gateway, and scaled tooling distribution (MDM / Intune).

CI/CD, DevOps & Platform Automation

• Establish CI/CD (GitHub Actions), Infrastructure-as-Code (Terraform / Bicep), and compute, MLOps/LLMOps, and FinOps practices with the DevOps team.

Identity, Security & Governance

• Design IAM and auth flows (Entra ID, OIDC/JWT, API gateway validation) and the observability stack, and secure Security-team review and approval of every architecture.

Cross-functional Leadership

• Act as architectural liaison across AI CoE, Development, DevOps, Infrastructure, Systems, Network, and Security; mentor engineers and own the platform roadmap.

Have you got what it takes?

• 8+ years in software/cloud architecture, with 5+ years hands-on Azure (AKS, Azure OpenAI/AI Foundry, APIM, Key Vault, ACR, Azure Monitor)

• Strong Azure networking: hub-and-spoke VNets, peering, Private Endpoints, Private DNS, firewalls, and S2S VPN / ExpressRoute

• Proven track record building AI/ML infrastructure in production (LLMs, RAG, vector search, agents)

• Deep Infrastructure-as-Code (Terraform / Bicep) and CI/CD (GitHub, GitHub Actions) expertise

• Enterprise IAM and security: Entra ID, OAuth2/OIDC, managed identities, RBAC, and zero-trust connectivity

• Hands-on with containers and orchestration (Docker, Kubernetes/AKS) and observability tooling (OpenTelemetry, Grafana, Azure Monitor)

• Experience integrating AI developer tools (GitHub Copilot, Azure AI Foundry, Anthropic / OpenAI APIs) and MCP/A2A patterns

• Fluency in English

What’s in it for you?

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

Enjoy NICE-FLEX!

At NICE, we work according to the NICE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere.

Requisition ID: 11124

Reporting into: Manager, Applications Development

Role Type: IC

#LI-Hybrid

About NiCE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NiCE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions.

Known as an innovation powerhouse that excels in AI, cloud and digital, NiCE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NiCE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.

An Introduction to Primer

Primer is the unified infrastructure for global payments. We give finance and payments teams the visibility and control to reduce complexity, improve performance, and capture more revenue - all from a single platform.

Backed by Sofina, Peak XV Partners, ICONIQ, Tencent, Accel, and Balderton, we’re building the payments layer the world’s best companies rely on.

Watch our showcase >

Read up on our $100m Series C

Learn more about our culture >

🔍 What will you be doing?

• Leading the design and implementation of core backend services for high performance, complex distributed systems

• Taking ownership of key technology decisions, building for scale and optimising for output

• Driving and using modern development practices such as BDD and TDD would be highly beneficial

• Creating clear, modern, well tested code

• Collaborating across teams in a product-driven environment

• Conducting code reviews and continuously look at ways of improving our ways of working

• Creating detailed internal documentation for the projects you work on

👀 What we’d love to see:

• In-depth understanding of the entire development process (design, development and deployment)

• Knowledge of building developer frameworks and workflows, allowing both customers and third-parties to integrate as seamlessly as possible

• Experience in Python is advantageous (it’s what we use!) but we have had success hiring engineers of any technical background and understand that people can adapt

• Highly motivated self-starter who values autonomy and getting things done

• Excellent verbal and written communication skills

• Payments knowledge, always looking for ways to optimise our merchant developer experience

• You will need to be based in: Poland, Portugal, Hungary, Romania or South Africa.

✅ A typical interview process

• An initial intro call with a Talent Partner

• An interview with the Hiring Manager

• Challenge Stage - Contextualised to the role

• A final, values-alignment interview

What’s the culture like at Primer?

We’re building a culture where people can do their best work and be proud of the impact they have. You’ll be working with people who are mission-driven, smart, and reflective, and who are genuinely invested in building exceptional products and delivering success for our merchants.

We work remotely, and have done since day one. We believe that building a successful, profitable company goes beyond proximity. We invest in our relationships through great remote working practices and thoughtfully designed face-to-face time, including workations, our annual company retreat, and co-working space access worldwide.

The work is challenging. Scaleups are a challenge, and building category-defining products is a challenge. But there’s a meaningful difference between a challenge and a struggle. At Primer, the right challenge comes with the right support: strong onboarding, a collaborative environment, and a team that is genuinely invested in your success. It’s never something you face alone.

Our benefits

🌍 We are fully remote and globally distributed; and have been since day one

💰 Competitive share options

🌴 Uncapped holiday, with 25 days minimum to be taken

🗣️ Co-working space access

📅 Workations & Company Retreat

💻 The best equipment for your role

🏠 £500 towards your home office setup

🔎 Generous learning budget

🏥 Private Medical Insurance

📈 A broad set of additional perks and benefits ( depending on location)

Don’t meet every single requirement?

At Primer, we’re dedicated to building a diverse, inclusive, and authentic workplace. If you’re excited about this role but your experience doesn’t align perfectly with every qualification listed, we encourage you to apply. You may be the right candidate for this or other roles.

Primer is committed to the equal treatment of all current and prospective employees and adopts a zero-tolerance approach to discrimination, regardless of age, disability, sex, sexual orientation, pregnancy and maternity, race or ethnicity, religion or belief, gender identity, marriage and civil partnership, or any other background or belief.

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you.

So, what’s the role all about?

We are seeking a Senior Cloud Architect to join NICE IT AI and own the Azure cloud and AI infrastructure that powers intelligent automation across the enterprise.

This is a deeply hands-on role. You will design, build, and govern the full-stack architecture, from enterprise networking and private connectivity up to AI orchestration, delivering the platform to the development teams while partnering with the Systems, Network, and Security teams to connect, govern, and approve every design before it goes live.

How will you make an impact?

You will own NICE’s IT AI cloud architecture end-to-end, combining hands-on Azure engineering with architectural leadership across these areas:

Cloud Architecture Design & Implementation

• Own the end-to-end Azure architecture for AI workloads (LLMs, RAG, vector DBs, Graph, agents, MLOps) across all platform layers, with reference designs and ADRs.

Enterprise Networking & Private Connectivity

• Design hub-and-spoke VNets, private connectivity (Private Endpoints, Private DNS), firewall/ingress patterns, and isolated multi-environment topology (prod / dev / test).

AI Developer Toolchain & Platform Engineering

• Architect the developer AI stack, Azure AI Foundry, GitHub Copilot, Claude/MCP, Models Gateway, and scaled tooling distribution (MDM / Intune).

CI/CD, DevOps & Platform Automation

• Establish CI/CD (GitHub Actions), Infrastructure-as-Code (Terraform / Bicep), and compute, MLOps/LLMOps, and FinOps practices with the DevOps team.

Identity, Security & Governance

• Design IAM and auth flows (Entra ID, OIDC/JWT, API gateway validation) and the observability stack, and secure Security-team review and approval of every architecture.

Cross-functional Leadership

• Act as architectural liaison across AI CoE, Development, DevOps, Infrastructure, Systems, Network, and Security; mentor engineers and own the platform roadmap.

Have you got what it takes?

• 8+ years in software/cloud architecture, with 5+ years hands-on Azure (AKS, Azure OpenAI/AI Foundry, APIM, Key Vault, ACR, Azure Monitor)

• Strong Azure networking: hub-and-spoke VNets, peering, Private Endpoints, Private DNS, firewalls, and S2S VPN / ExpressRoute

• Proven track record building AI/ML infrastructure in production (LLMs, RAG, vector search, agents)

• Deep Infrastructure-as-Code (Terraform / Bicep) and CI/CD (GitHub, GitHub Actions) expertise

• Enterprise IAM and security: Entra ID, OAuth2/OIDC, managed identities, RBAC, and zero-trust connectivity

• Hands-on with containers and orchestration (Docker, Kubernetes/AKS) and observability tooling (OpenTelemetry, Grafana, Azure Monitor)

• Experience integrating AI developer tools (GitHub Copilot, Azure AI Foundry, Anthropic / OpenAI APIs) and MCP/A2A patterns

• Fluency in English

What’s in it for you?

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

Enjoy NICE-FLEX!

At NICE, we work according to the NICE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere.

Requisition ID: 11124

Reporting into: Manager, Applications Development

Role Type: IC

#LI-Hybrid

About NiCE

NICE Ltd. (NASDAQ: NICE) software products are used by 25,000+ global businesses, including 85 of the Fortune 100 corporations, to deliver extraordinary customer experiences, fight financial crime and ensure public safety. Every day, NiCE software manages more than 120 million customer interactions and monitors 3+ billion financial transactions.

Known as an innovation powerhouse that excels in AI, cloud and digital, NiCE is consistently recognized as the market leader in its domains, with over 8,500 employees across 30+ countries.

NiCE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.

Why Thunderbird?

Thunderbird is one of the world’s most trusted open-source email applications, empowering more than 20 million people globally. At MZLA, the team behind Thunderbird, we build privacy-respecting communication tools that help people manage their digital lives while staying in control of their data.

We are open source by design. Our products are developed transparently and in collaboration with a global community of contributors, and that same spirit shapes how we work: collaboratively, inclusively, and with a shared commitment to putting users first.

Our small but growing distributed team includes 65+ people across seven countries. As Thunderbird evolves beyond a single desktop application, we are expanding across desktop, mobile, and paid services to build independent, privacy-respecting alternatives to big tech ecosystems.

Our revenue model combines user donations, which help keep Thunderbird’s apps freely available, with paid services that cover the costs of hosted offerings while supporting long-term sustainability and continued innovation.

A note about MZLA and Mozilla: MZLA Technologies Corporation is the nonprofit-owned company behind Thunderbird and part of the Mozilla family. MZLA is separate from Mozilla Corporation and has its own compensation programs, benefits, and employment policies.

To learn more, visit www.thunderbird.net

The opportunity

The Senior Site Reliability Engineer establishes and maintains the infrastructure and operational systems that Thunderbird users and teams depend on every day. You’ll design and develop CI/CD systems for MZLA websites, services, and release workflows, diagnose and debug production incidents, and implement improvements to enhance system reliability. We believe that good infrastructure work is invisible when it’s going well and invaluable when it isn’t.

This role is for someone who treats production as something to be understood, not just kept running. You write things down, flag problems before they become fires, and leave documentation better than you found it. You bring production instincts, infrastructure-as-code fluency, and security awareness that’s baked in, not bolted on.

You’ll work closely with Software Development Engineers, team members, and community contributors, reporting to the Sr Manager, Platform Infrastructure. This is a great opportunity for someone who thrives with ambiguity, makes good decisions without a complete picture, and cares about Thunderbird’s mission: open-source software used by millions who choose privacy and ownership over convenience.

This role requires consistent overlap with Pacific Time zone working hours to enable effective collaboration. You should have availability for regular overlap hours for context sharing with Pacific Time colleagues.

What you’ll do

• Operate and evolve our EKS-based Kubernetes platform, supporting service migrations, platform improvements, and reliability initiatives.
• Design and develop CI/CD systems supporting websites, services, and Thunderbird desktop releases, contributing to pipeline reliability and OIDC-based authentication across GitHub Actions workflows.
• Write and maintain infrastructure in Pulumi and/or Terraform/OpenTofu across multiple AWS accounts.
• Operate and evolve our observability stack (VictoriaMetrics, VictoriaLogs, Grafana, Vector) and partner with engineering teams to incorporate instrumentation and monitoring into service design.
• Apply security-conscious infrastructure practices, including least-privilege IAM, secrets management via AWS Secrets Manager and External Secrets Operator, and network segmentation.
• Diagnose and debug production incidents; drive root-cause analysis and post-incident improvements to prevent recurring problems.
• Participate in on-call rotation and collaborate with SDEs and fellow SREs to ship, maintain, and monitor new builds and support service onboarding.
• Contribute to runbooks, architecture documentation, and team processes.

What you bring

• 7+ years of experience in infrastructure, platform engineering, or site reliability roles, including hands-on production Kubernetes experience in workload operations, troubleshooting, and cluster management.
• Hands-on experience with infrastructure-as-code on AWS using Terraform, OpenTofu, or Pulumi.
• Security awareness in day-to-day infrastructure work: identity, least privilege, secrets hygiene, and network controls.
• Demonstrated ownership mindset with the ability to proactively identify issues, drive work to completion, and communicate risks early.
• Excellent async written communication skills; comfortable working with a geographically distributed team.
• Ability to collaborate effectively with software engineers and non-engineering stakeholders to improve platform reliability and operational efficiency.
• Ability to learn, evaluate, and responsibly use emerging technologies, including AI-enabled tools, to improve work processes.

Bonus points for

• Experience with GitOps workflows (ArgoCD or Flux).
• Familiarity with Keycloak or similar identity platforms (OIDC, SAML, federation).
• Knowledge of email protocols and/or experience operating email infrastructure (SMTP, IMAP).
• Prior work in or alongside an open-source community.
• French, German, Japanese, or other language proficiency in addition to English.

What success looks like

You’ll be successful in this role if you treat production as something to be understood, not just kept running. You write things down, flag problems before they become fires, and leave documentation better than you found it.

You bring production instincts. You’ve been paged at 2am, you know what good alerting looks like, and you’ve done the post-mortem work to make sure it doesn’t happen the same way twice. You think in code, not in consoles. Your security awareness is baked in, not bolted on. You default to least privilege and ask “what’s the blast radius?” before you ship.

You’re comfortable with ambiguity. We’re a small team building toward something, and you can make good decisions without a complete picture. Thunderbird is open-source software used by millions who choose privacy and ownership over convenience. That matters to you.

Work environment

This is a full-time, fully remote position. You’ll join a distributed team of Thunderbird staff, open-source community members, and contributors from around the world.

We rely on clear communication, thoughtful documentation, and collaborative decision-making to work effectively across time zones and disciplines.

Compensation & benefits

We benchmark our base salaries to local markets and target the 60th percentile of the peer market. The salary ranges for this role are:

• US: $123,000 - $144,000 USD
• Canada: $108,000 - 125,000 CAD
• UK: £62,000 - £72,000 GBP

We may consider candidates with strong skills but less than the required experience. Title, level and compensation will be determined based on qualifications and experience.

In addition to competitive salaries, we offer a comprehensive benefits package designed to support your whole self.

Work & career

• Fully remote work & schedule flexibility
• Company-provided laptop
• Annual bonus program
• Monthly remote work stipend
• Annual professional development stipend
• Industry conferences
• Company all-hands and team gatherings

Rest & play

• 24 days PTO per year (prorated)
• Your birthday
• Year-end company shutdown
• 9 wellbeing days
• Public holidays
• Other paid leave
• Quarterly wellbeing stipend for personal / family activities

Health & family

• 401(k) / RRSP contributions
• Health, dental, & vision insurance
• Disability insurance
• Life insurance
• Employee assistance program
• Paid parental leave
• Paid sick days

Work eligibility

Applicants must reside in and have permanent work authorization for the country location(s) specified in the posting. We are unable to consider applicants outside of these markets at this time. And, we do not provide visa sponsorship.

How to apply

Please apply directly through our career page. We carefully review every cover letter and screening question, so take the time to answer each fully.We value authentic, thoughtful responses that reflect your own experience and perspective. It is fine to use AI tools to polish your writing, but your answers should be your own. Candidates who submit generic or unoriginal AI-generated responses may be disqualified from further consideration.

Our commitment to diversity, equity, and inclusion

MZLA believes in the value of diverse creative practices and forms of knowledge, and knows diversity, equity and inclusion are crucial to and enrich the company’s core mission. We encourage applications from everyone, including members of all equity-seeking communities, such as (but not limited to) women, racialized and Indigenous persons, persons with disabilities, persons of all sexual orientations, gender identities and expressions.

We are an equal opportunity employer. We do not discriminate on the basis of race (including hairstyle and texture), religion (including religious grooming and dress practices), gender, gender identity, gender expression, color, national origin, pregnancy, ancestry, domestic partner status, disability, sexual orientation, age, genetic predisposition, medical condition, marital status, citizenship status, military or veteran status, or any other basis covered by applicable laws. MZLA will not tolerate discrimination or harassment based on any of these characteristics or any other unlawful behavior, conduct, or purpose.

We will ensure that qualified individuals with disabilities are provided reasonable accommodations to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment, as appropriate. Please contact us at hiringaccommodations@thunderbird.net to request accommodation.

#LI-DNI

Company Description✨ About Voyage PrivéBorn in France in 2006, Voyage Privé has grown from an ambitious startup into becoming Europe’s leading travel tech platform. Operating across 9 markets with tens...