Description:
At Axon, we’re on a mission to Protect Life. We’re explorers, pursuing society’s most critical safety and justice issues with our ecosystem of devices and cloud software. Like our products, we work better together. We connect with candor and care, seeking out diverse perspectives from our customers, communities and each other.
Life at Axon is fast-paced, challenging and meaningful. Here, you’ll take ownership and drive real change. Constantly grow as you work hard for a mission that matters at a company where you matter.
Your Impact Axon’s Real Time Operations (RTO) division builds situational awareness software that helps emergency responders manage life-and-death incidents. You will lead the design and scale-out of the cloud control plane that provisions, secures, and orchestrates Axon’s global IoT device fleets. The systems you build will ingest and act on real-time signals at planet scale, with tight SLOs for command/response and device health. Your work will directly improve response times, reduce cognitive load for dispatch and command center operators, and increase responder safety.
What You’ll Do
- Own control-plane architecture for multi-tenant, planet-scale IoT fleets: device provisioning and lifecycle, device identity & PKI, configuration/state management (twin/shadow), command & control, policy/RBAC enforcement, OTA updates and rollout strategies, and authoritative device state.
- Drive reliability, safety, and security-by-design: zero-trust defaults, mutual TLS, certificate rotation at scale, least-privilege key management (HSM/KMS), robust secrets hygiene, threat modeling, and defense-in-depth for multi-tenancy.
- Lead cross-org technical strategy: set engineering standards (APIs, versioning, deprecation, rollout, testing), create long-range roadmaps, and mentor/level-up senior engineers across cloud and device teams.
- Partner with device teams on transport and protocol choices, schema and API contracts, edge–cloud sync models, staged rollouts, failure injection, and field-safe rollback.
- Establish end-to-end observability (metrics, tracing, structured/audit logs), actionable dashboards, incident response runbooks, and capacity planning with empirical load testing and cost guardrails.
Minimum Qualifications
- 10+ years building and operating distributed systems at scale; proven track record of owning critical paths and SLOs.
- Deep expertise in control planes, service discovery, orchestration, partitioning/placement, and consistency models (CAP tradeoffs, CRDTs, leader/follower, quorum).
- Strong coding in Go (also acceptable: Java/Rust); design-first mindset, profiling and performance tuning (allocations, tail latency, lock contention).
- Cloud-native foundations: Kubernetes, containers, service mesh (Istio/Envoy), gRPC/HTTP/2, backpressure and circuit-breaking patterns.
- Streaming/eventing: Kafka/NATS/Pub-Sub, schema evolution (Protobuf/Avro), idempotency keys, and exactly-once vs at-least-once tradeoffs.
- Security: mTLS, OAuth/OIDC, JWT, x.509, HSM/KMS, structured threat modeling and mitigation.
Preferred Qualifications
- IoT protocols & fleet ops: MQTT, WebSockets, device twin/shadow patterns and FIDO Device Onboarding (FDO).
- Hardware root of trust: TPM / TPM 2.0 fundamentals—measured/verified boot device identity & remote attestation, key sealing/unsealing—and integrating TPM-backed identity with cloud HSM/KMS.
- Large-scale telemetry pipelines, time-series storage, adaptive sampling, backpressure, and edge–cloud synchronization.
- Multi-region active/active, blue/green and canary for device fleets, ring-based or attribute-based rollout tooling with automatic pause/rollback.
- Experience in regulated or safety-critical domains (e.g., public safety, medical, automotive), with audit and compliance rigor.