Want to know if this job is worth applying to?
Thành phố Hồ Chí Minh, Việt Nam
Onsite
OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.
At OPSWAT, we're building cutting-edge solutions that protect the world's critical infrastructure. You will play a pivotal role in shaping the future of our OESIS Framework platform with cloud solution integrations.
This role owns the architecture and implementation of the SDK's core integration layer - the code that talks to cloud-based Endpoint Device Management frameworks such as CrowdStrike Falcon, Microsoft Graph/Intune, JAMF Pro and future device management APIs, and that packages the result as native binaries our customers embed directly into their own cloud products.
It is also the technical anchor of a small pod. You set the direction the other two engineers build against: the internal data contract, the auth-token interface, and the SDK's external API surface and versioning strategy.
Architect a unified, extensible integration framework that normalizes disparate vendor REST APIs: differing pagination models, rate limits and response schemas into one consistent internal interface
Design and build the SDK as native, cross-platform binaries (Windows, macOS, Linux) with a clean external API and header surface suitable for embedding into third-party customer products
Build and maintain connector modules for Endpoint Device Management frameworks (CrowdStrike Falcon API, Microsoft Graph/Intune API, JAMF Pro API), with an extension pattern for adding future platforms such as Workspace ONE and Kandji
Implement resilient request handling per vendor: retry and backoff, rate-limit compliance, partial-failure recovery, and API version migrations
Define SDK packaging, distribution and versioning strategy: ABI/API compatibility, semantic versioning, installer and package formats
Own the SDK's public developer documentation and the reference implementation used by partner and customer integration teams
Lead technical design reviews across the pod, and make the final call on the internal data contract and the auth-token interface shared with the Data and Authentication engineers
4+ years of professional software engineering experience, including 3+ years building or deeply integrating with REST APIs at production scale
Strong experience in a systems or compiled language: Rust, Go, C/C++ or similar producing native, cross-platform artifacts for Windows, macOS and Linux
Hands-on experience with at least one of: CrowdStrike Falcon API, Microsoft Graph API, or JAMF Pro API or a comparable UEM, EDR or MDM API
A track record designing SDKs or libraries consumed by external developers or OEM partners, not only internal services
Strong grasp of API contract design: semantic versioning, backward compatibility, deprecation strategy
Experience with CI/CD pipelines producing multi-platform binary artifacts
Ability to write clear technical design documents and drive a design review to a decision
Professional working proficiency in written and spoken English
Hands-on C/C++ experience building embeddable native SDK binaries - our existing OESIS SDK is C++, so this shortens ramp-up considerably
Experience with ABI stability and cross-language bindings (CFFI, cgo, PyO3 or similar) for SDKs consumed from more than one language
Background in cybersecurity, endpoint security, or unified endpoint management (UEM)
Familiarity with Zero Trust Network Access (ZTNA) and device posture or compliance
Familiarity with regulatory compliance frameworks such as PCI-DSS, SOX or HIPAA
Familiarity with vulnerability and patch management concepts (CVE, NVD, SCAP) directly applicable to OESIS's existing domain
Prior experience leading a small engineering pod of two to four people
Open-source contributions to SDK, networking or API client projects
At OPSWAT, we believe in empowering our people to do their best work. We encourage you to watch the video of our company's more than 20 years of experience securing critical infrastructure. You'll be part of a mission-driven OESIS Framework team that values innovation, collaboration and continuous development. Together, we're building SDK technology that makes a difference.
OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.
Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.
