---
title: 'Staff Data Engineer at Sonatype'
canonical: 'https://feeny.ai/job/staff-data-engineer-sonatype-canada-5wtke6fbv579'
type: 'job'
last_seen: '2026-09-23'
---

# Staff Data Engineer at Sonatype

- **Company:** Sonatype
- **Location:** Canada
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-08-17
- **Last confirmed live:** 2026-09-23
- **Apply:** https://jobs.lever.co/sonatype/3ed1d047-ed16-4b1e-a41a-e9071d6d5fc0

## Job description

Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale. As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development. More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.

About the role:

We’re looking for a Staff Data Engineer to join our growing Data Platform team. You’ll play a key role in designing and scaling the infrastructure and pipelines that power analytics, machine learning, and business intelligence across Sonatype.You’ll work closely with stakeholders across product, engineering, and business teams to ensure data is reliable, accessible, and actionable. This role is ideal for someone who thrives on solving complex data challenges at scale and enjoys building high-quality, maintainable systems.

At Sonatype, we:

- Use data with purpose: you'll get the chance to work on problems that directly impact how the world builds secure software
- Use modern tooling: you'll get the chance to leverage the best of open-source and cloud-native technologies
- Have a deep collaborative culture: you'll be joining a passionate team that values learning, autonomy, and impact

What you'll do:

- Design, build, and maintain scalable data pipelines and ETL/ELT processes

- Architect and optimize data models and storage solutions for analytics and operational use

- Collaborate with data scientists, analysts, and engineers to deliver trusted, high-quality datasets

- Own and evolve parts of our data platform using Databricks and Spark

- Implement observability, alerting, and data quality monitoring for critical pipelines

- Drive best practices in data engineering, including documentation, testing, and CI/CD

- As a Staff Engineer you will help drive long-term architectural vision and mentor the team on engineering best practices, while partnering with stakeholders to ensure data solutions support business outcomes.

- Contribute to the design and evolution of our next-generation data lakehouse architecture

What you bring:

- 8+ years of experience as a Data Engineer or in a similar backend engineering role

- Bachelor’s degree in Computer Science, Engineering, or a related technical field

- Databricks Optimization: Tune Spark jobs, optimize join performance, and manage Delta Lake architecture for batch and streaming data.

- Experience leveraging AI-assisted development tools and AI/ML technologies to improve data engineering workflows, developer productivity, data quality and ops.

- Strong programming skills in Python, Scala, or Java

- Hands-on experience with distributed data systems like Spark or Kafka

- Proficient in writing complex SQL and NoSQL queries and optimizing queries for performance

- Experience building and maintaining robust ETL/ELT pipelines in production

- Understanding of data modeling techniques (star schema, dimensional modeling, etc.)

It’d be great if you also had:

- Familiarity with software supply chain, cybersecurity, or large-scale software ecosystem data

- A track record of improving data platform reliability, scalability, performance, and cost efficiency

- Familiarity with workflow orchestration tools (Airflow, Dagster, or similar)

- Hands-on experience with cloud data platforms, particularly AWS

- Familiarity with modern table formats such as Delta Lake, Apache Iceberg, or Apache Hudi

- Experience implementing data observability, lineage, governance, and automated data quality frameworks

- Experience designing real-time or streaming data architectures using data lake technologies

Things we are proud of:

- 2026 Gartner® Magic Quadrant™ Leader for Software Supply Chain Security
- 2026 Celebrating 15 Years of Sonatype Research Labs – Industry-leading software supply chain and open source security research
- 2026 Founding Member of the Linux Foundation Initiative for Open Source Sustainability
- 2026 State of the Software Supply Chain® Report – Continuing industry leadership in software supply chain security and AI security research
- 2025 Visionary in Gartner® Magic Quadrant™ for Application Security Testing!
- 2025 AI Compliance Solution of the Year - AI Breakthrough Awards
- 2025 DEVIES Award to our SBOM Manager for a new product for its innovation and impact in developer technology
- 2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
- Constellation AST Shortlist: Sonatype has been listed on the Constellation ShortList™ for Application Security Testing for 2024
- Data Breakthrough Awards: Sonatype was announced as a 2024 winner in the "Open Source Data Solution of the Year."
- SD Times: Best in Show Security
- Fast Company Best Workplaces for Innovators 2024
- The Herd Top 100 Private Software Companies 2024
- Diversity & Inclusion Working Groups
- Parental Leave Policy
- Paid Volunteer Time Off (VTO)

At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.

## About Sonatype

## Company Overview
- **One-liner**: Sonatype provides secure software development solutions that help organizations control open source components, containers, and AI models across the software supply chain.
- **Entity Type**: Private (backed by Vista Equity Partners; total funding $154.7M)
- **Headquarters**: Fulton, Maryland, United States
- **Founded**: 2008
- **Founders**: Not publicly available (originated from core contributors to Apache Maven)

## Core Business
- **Primary industry**: Software Supply Chain Security / DevSecOps
- **Target customers**: Enterprise engineering teams, DevOps organizations, and developers (B2B)
- **Mission or purpose**: Help organizations continuously harness the benefits of open source without risk, by providing intelligence and automation to secure the AI SDLC.

## Products & Services
- **Sonatype Nexus Repository**: The world’s most popular repository manager for storing and managing open source components, containers, and models.
- **Sonatype Repository Firewall**: Blocks dangerous components and AI models before they enter the development pipeline.
- **Sonatype Lifecycle**: Automates open source security and license policy enforcement across the SDLC.
- **Sonatype SBOM Manager**: Generates and manages Software Bill of Materials for compliance and supply chain visibility.
- **Maven Central**: The largest public repository of open source Java components, operated by Sonatype.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed (private company)
- **Key Metric**: Annual Revenue $57.1M (latest fiscal year); Total Funding $154.7M
- **Notable Investors**: TPG (lead, $80M PE round), Accel, Goldman Sachs Growth Equity, New Enterprise Associates, Hummer Winblad Venture Partners
- **Growth Signals**: Headcount of 421 employees (+7.6% YoY); named a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security; global presence across 15 countries including US, UK, India, Colombia, Canada.

## Competitive Advantages
- **Unmatched OSS intelligence**: Operates both a leading repository (Nexus Repository) and a public registry (Maven Central), providing unique visibility into open source quality.
- **AI-native security**: Acts as a control plane for AI-generated code and models, enabling safe adoption of frontier AI.
- **Developer-first approach**: Solutions designed by developers for developers, with 50+ supported languages, formats, and integrations.
- **High precision**: Fewer false positives/negatives, reducing remediation time and enabling 3x faster releases.

## Strategic Focus
- Extending leadership in software supply chain security, particularly addressing risks from AI-generated code and accelerated vulnerability discovery.
- Expanding Nexus platform capabilities with agentic-first development and deeper SBOM lifecycle management.
- Growing customer adoption through federal sales and enterprise customer success.

## Why Work Here
- **Culture**: Values trust through transparency, inclusion, boldness, and growth. Employee resource groups like Women at Sonatype and the Community, Belonging, Inclusion & Diversity cohort.
- **Remote-first**: Distributed workforce with offices in Fulton MD, Tysons Corner VA, Alameda CA, London, and Sydney. Flexible work schedules.
- **Benefits**: Competitive benefits, annual wellness week, paid volunteer time off, full parental leave (birth or adoption), learning & development support, leadership coaching.
- **Onboarding**: New hires build community from day 1 with cross-team learning and interactive onboarding.
- **Work-life balance**: Rated 3.8/5 on work-life balance by employees (263 reviews). Performance-based culture with recognition and growth opportunities.

## Sources
1. [sonatype.com](https://www.sonatype.com/) – Company overview and product info
2. [sonatype.com/company/careers](https://www.sonatype.com/company/careers) – Careers page with values, benefits, DE&I
3. [linkedin.com/company/sonatype](https://www.linkedin.com/company/sonatype) – Employee count, revenue, funding, reviews
4. [topworkplaces.com](https://topworkplaces.com/company/sonatype-inc/) – Work culture and distributed workforce details
5. [jobs.lever.co](https://jobs.lever.co/sonatype) – Open positions

## Other roles at Sonatype

- [Enterprise Account Executive, Japan & SEA](https://feeny.ai/job/enterprise-account-executive-japan-sea-sonatype-singapore-30hh560jfvph) — Singapore
- [Technical Project Manager](https://feeny.ai/job/technical-project-manager-sonatype-colombia-vcv7sfhz3j6d) — Colombia
- [Senior Data Scientist](https://feeny.ai/job/senior-data-scientist-sonatype-toronto-5t4p12w0d7tk) — Toronto, Canada
- [Senior Account Executive, Nordics & Baltics](https://feeny.ai/job/senior-account-executive-nordics-baltics-sonatype-united-kingdom-5yqdbpdyyv7h) — United Kingdom
- [Renewal Specialist - SaaS Contracts](https://feeny.ai/job/renewal-specialist-saas-contracts-sonatype-united-states-t3pxbw60t3yc) — United States
- [Product Manager](https://feeny.ai/job/product-manager-sonatype-colombia-h513qw7yc6st) — Colombia
- [Product Manager - SBOM](https://feeny.ai/job/product-manager-sbom-sonatype-hyderabad-3kfh1ffcdfgr) — Hyderabad, India
- [Project Manager](https://feeny.ai/job/project-manager-sonatype-colombia-vz6b6pyyb71n) — Colombia
- [Staff UX Software Engineer](https://feeny.ai/job/staff-ux-software-engineer-sonatype-colombia-nhwmw91d920v) — Colombia
- [Senior Data Analyst](https://feeny.ai/job/senior-data-analyst-sonatype-canada-spwb46a6m8hr) — Canada