• Lead the architecture and technical direction of Netwrix enterprise-grade identity security products with hybrid (cloud + on-prem) deployment models. • Architect scalable multi-tenant cloud services while supporting deployable on-prem versions for regulated customers. • Define foundational cloud platform capabilities to be leveraged by all products in the Netwrix portfolio. • Ensure architectural decisions align with security, privacy, and compliance frameworks to meet enterprise and regulatory standards. • Partner with product and engineering teams to translate complex customer requirements into robust, extensible software solutions. • Drive standardization for all SaaS products to ensure a consistent and performant experience for Netwrix customers. • Mentor senior engineers and influence engineering culture across product lines.

• Architect and evolve core systems in the platform, including data services, APIs, orchestration, and automation layers. • Design scalable, distributed architectures that support performance, reliability, and security across complex enterprise environments. • Work hands-on in the codebase to prototype, validate, and implement core system components. • Lead technical direction and establish best practices for service design, configuration, observability, and maintainability. • Drive deployment and delivery excellence through Kubernetes (k3s/k8s), CI/CD pipelines, and infrastructure-as-code automation. • Collaborate across engineering, product, and operations to ensure alignment between architecture and business goals. • Mentor engineers, fostering technical growth and promoting sound engineering judgment across the team. • Champion simplicity, consistency, and scalability across all architectural and implementation decisions.

• Design, implement, and maintain backend services and APIs that power AuthZed Cloud’s control plane. • Build and operate Kubernetes-native systems, including custom operators and controllers, to manage customer environments and infrastructure lifecycle. • Design durable, idempotent workflows for provisioning, configuration changes, scaling, and deletion. • Implement and integrate authentication and identity flows (e.g., SSO, SAML, OAuth/OIDC) in a secure, multi-tenant SaaS environment. • Implement and evolve usage-based billing systems. • Engineer distributed systems that behave correctly under partial failure, retries, concurrency, and long-running operations. • Collaborate closely with frontend engineers to design APIs and workflows that result in clear, reliable user experiences. • Ensure services are observable and operable through structured logging, metrics, and alerts. • Troubleshoot and resolve complex production issues involving orchestration, authentication, or state management. • Participate in on-call rotations and contribute to incident resolution and post-incident improvements. • Document APIs, workflows, system behavior, and operational guidelines.

• Build Containerized Agent Systems: Design and implement systems that leverage Docker containers as the ideal runtime for AI agents, ensuring isolation, scalability, and portability • Expand cagent: Maintain and evolve the open-source cagent project, adding new capabilities for containerized agent deployment and orchestration • Agent Runtime Development: Build robust infrastructure for packaging, deploying, and managing agents in containers • RAG Integration: Enhance agent capabilities with Retrieval-Augmented Generation systems to provide contextual knowledge and domain expertise (secondary focus) • Evaluation & Testing: Design robust evaluation frameworks to measure agent performance, reliability, and containerized deployment effectiveness • Rapid Prototyping: Iterate quickly on new agent capabilities and deployment patterns, moving from concept to production efficiently • Open Source Community: Engage with the cagent community, review contributions, and help grow the ecosystem • Cross-functional Collaboration: Work closely with product managers, designers, and engineers across Docker's AI teams to integrate containerized agent capabilities into Docker's developer experience