Software engineer, AI model supply chain and package security

We build fast, modern developer tools in Rust, and a surprising amount of serious software runs on them. Pixi, rattler and rattler-build are open source and used by hundreds of thousands of developers: quant teams in finance, physicists at CERN, biotech labs, and humanoid robot companies you've probably seen videos of. We are also core maintainers of conda-forge, one of the largest open source package ecosystems, and we maintain RoboStack, which gets ROS running on any OS from a single lockfile.When that much software flows through your tools, security stops being optional. Every package that ends up on a laptop, a server or a robot should be traceable back to the source and build that produced it. We're building that for conda today, and we want to extend it to AI models.The engineering team is spread across Europe (Netherlands, Germany, UK, Moldova). This work is based in Berlin, and so is this role.The workRobots increasingly run learned models: vision transformers, RL policies, LLMs. Today those models are usually copied onto machines as large opaque files, with little record of where they came from or what changed. We think models should be shipped like packages: versioned, signed, verifiable, and updated efficiently.You'll work on two related areas.Package security. Signing and verification for conda packages with Sigstore, provenance from source to build to install, SBOMs, and mapping known vulnerabilities onto the packages people actually use. This work goes into Pixi, rattler and conda-forge, and is used by a lot of people.AI models as packages. Taking the same ideas to model artifacts. That includes:A provenance chain from training through packaging to deployment, with signatures that can be verified offline on air-gapped robotsA model SBOM format, building on CycloneDX's ML-BOMDelta updates between model versions (full models, fine-tunes, LoRA adapters, quantized variants), so robots don't download gigabytes for a small changeCompression that combines mod