Software Development Architect
About the role
Join our team
At GoDaddy, our mission is to radically shift the global economy toward small businesses by empowering people to easily start, confidently grow, and successfully run their own ventures. We are dedicated to giving our customers the tools, insights, and the people to transform their ideas and personal initiative into success.
The CAPE team (part of Global Platform Engineering) owns GoDaddy's internal developer platform at the infrastructure layer — the foundation that every engineering team builds on. We build and operate the Golden Images system. It includes hardened, patched, and security-scanned container images and AMIs. These are distributed to all GoDaddy AWS accounts across 12 regions. We also manage CertAPI, GoDaddy's centralized certificate lifecycle service. CertAPI automates TLS/mTLS issuance, renewal, and governance for thousands of internal services. Every engineer at GoDaddy depends on what we build — our work directly resolves whether their services are secure, compliant, and able to ship. We write the specifications, documentation, and reference implementations for these foundational systems, and we own the automated pipelines and cloud infrastructure that keep them running at scale.
We're looking for a Software Development Architect who loves to dive into technology and pull it all apart to see how it works, then put it back together again better than it was before. We treasure curiosity, communication, a bias toward collaboration and action, and the desire to embrace and extend guidelines and patterns. If you're the kind of person who can't see something that isn't right without a compulsion to make it at least just a little bit better before you put it back, we want to talk to you!
What you'll get to do...
- Design, implement, and maintain the automated pipelines that build, harden, scan, and distribute container images (GCIs, GCRIs) and machine images (GAMIs) to 12 AWS regions on a continuous basis
- Own certificate lifecycle infrastructure — issuance, renewal, revocation, and policy enforcement — for thousands of internal TLS/mTLS endpoints across GoDaddy
- Drive security posture improvements: CVE triage, remediation SLA enforcement, SBOM generation, and supply-chain hardening for GoDaddy's foundational compute images
- Architect and operate event-driven, serverless AWS infrastructure (Lambda, SQS, EventBridge, DynamoDB, ECR) powering the image build and certificate management systems
- Collaborate multi-functionally with Product Security, platform teams, and hundreds of consuming engineering teams to define standards, document systems, and communicate operational impacts of platform changes
- Identify and eliminate toil through automation — build-trigger intelligence, upstream ch