Sonatype is the software supply chain management company that invented componentized software development and pioneered the software supply chain category. As leaders in the open-source community and the DevSecOps industry, we run the world’s largest repository of Java open-source components—Maven Central.
Our groundbreaking, full-spectrum platform empowers customers to rapidly create, deploy, and maintain innovative software at scale, all while aligning directly to their business needs. Trusted by more than 2,000 organizations—including 70% of the Fortune 100—and over 15 million software developers, Sonatype’s tools and guidance help deliver exceptional, secure software.
From inventing modern artifact management with Nexus Repository to introducing the world’s only solution that halts malicious open-source malware in its tracks, we’re committed to constant innovation. We leverage AI/ML to give our clients, developers, and the industry complete confidence in the quality, automation, and security of their software. Learn more at www.sonatype.com
What you'll do:
- Debug and troubleshoot incidents with Sonatype products and solutions
- Reproduce defects and file actionable issues for product engineering
- Replicate customer deployment environments for testing (docker, AWS, Azure, Kubernetes, and more)
- Represent Technical Support and customer interests in Engineering and Product Management discussions
- Assist product management in developing and prioritizing enhancement lists
- Summarize, communicate, and escalate customer experiences to management
- Contribute to and maintain our Knowledge Base
- Contribute to our diagnostic tools and utilities, and create new ones
- Respond to customer inquiries via support cases, email, chat, and phone
Who you are
- 3+ years experience supporting complex enterprise software solutions
- Ability to read and understand Java code
- Experience with Rest APIs
- Experience with testing and/or development of Java based web applications
- Experience with SQL databases (PostgreSQL is a plus).
- Experience with networking (Sockets, HTTP, LDAP, proxies/firewalls, SSL)
- Experience with scripting languages (Python, Bash, Groovy, etc.)
- Familiarity with Linux command line tools
- Experience with 1 or more application servers (e.g. Tomcat, Apache, IIS, NGINX etc.)
- Exceptional communication skills - written and verbal
- Very good problem solver with experience interacting with internal/external clients on technical challenges
- Non-regular shift for Colombia: while this position is 40 hours per week, its primary shift is in UTC+5 and UTC+6 (Central Asia timezone). **Night shift additional pay applies**
Ideal to bring
- SCM and CI/CD and associated tools (Jenkins, Bamboo, etc.)
- Debugging certificate-based mutual TLS and SSL authentication
- Experience analyzing network traces using tools such as wireshark or tcpdump
- Component management build tools (Ant, Maven, npm, NuGet etc.)
- Container technologies (Docker, Kubernetes, etc.)
- Sonatype, jFrog, Snyk, Whitesource or similar products
- Software development (JAVA in particular) LDAP and SAML
- Deployment/Configuration of Cloud platforms such AWS, Azure and GCP
What we're proud of
- 2025 DEVIES Award to our SBOM Manager new product for its innovation and impact in developer technology
- 2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
- 2023 Fast Company Best Places for Innovators
- 2023 Gartner's Magic Quadrant
- 2023 Software Report's Top 100 Software Companies
- 2023 BuiltIn Best Places to Work
- 2022 Frost & Sullivan Technology Innovation Leader Award
- 2022 PeerSpot Silver Peer Award in Software Composition Analysis
- 2022 Tech Ascension Best DevOps Security Solution Award
- 2022 NVCT Cyber Company of the Year
- Company Wellness Week - We shut down company operations for a week to enable all employees to pursue personal growth and enjoy a much-needed and deserved rest.
- Paid Volunteer Time Off (VTO)
At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.
#LI-AL1
Top Skills
What We Do
The Sonatype journey started almost 15 years ago, just as the concept of “open source” software development was gaining steam. From our humble beginning as core contributors to Apache Maven, to supporting the world’s largest repository of open source components (Central), to distributing the world's most popular repository manager (Nexus), we’ve played a meaningful role in helping the world embrace the power of open innovation.
We empower developers and security professionals with intelligent tools to innovate more securely at scale. Our platform addresses every element of an organization’s entire software development life cycle, including third-party open source code, first-party source code, and containerized code. Sonatype identifies critical security vulnerabilities and code quality issues and reports results directly to developers when they can most effectively fix them. This helps organizations develop consistently high-quality, secure software which fully meets their business needs and those of their end-customers and partners. More than 2,000 organizations, including 70% of the Fortune 100, and 15 million software developers rely on our tools and guidance to help them deliver and maintain exceptional and secure software.
Why Work With Us
We're on a mission to change how the world innovates by making software development easier. Already used by 15 million developers, we have lofty goals for our technology to be in the hands of every engineering team. And, we need you to do that. Join us!
Gallery
_0.png)
