← All roles

Founding Engineer - Full Stack

Pangolin· Engineering
Apply on company site
Hybrid (New York City, NY)$125k - $150k + equityFull-timePosted 8mo ago

About the role

Full Stack Software Engineer role at Pangolin to design, build, and maintain the core self-hosted platform (Pangolin container) including UI, APIs, and backend services; early hire with a foundational impact on product and company.

Responsibilities

  • Design, develop, and test the core of our self-hosted platform
  • Frontend (NextJS, Tailwind, ShadCN)
  • Backend (Express APIs, SQL, Drizzle ORM)
  • Processes (CI/CD, Internal Tooling)
  • Troubleshooting and resolving complex issues related to distributed systems, networking, and security.
  • Actively engaging with the open-source community, providing support, and driving engagement on platforms like GitHub and Discord
  • Ship quickly and get instant feedback from our large open-source user-base

Qualifications

  • More than 3 years of work experience in computer science
  • Extensive TypeScript experience and ability to write some Go
  • Familiarity with web identity and authentication standards: OAuth2, OIDC, SSO
  • Experience with cloud infrastructure and operational technologies (Docker, Kubernetes, Linux, AWS)
  • Basic knowledge of networking concepts: tunneling, WireGuard, proxies, SSL/TLS

Skills

Required:TypeScriptOAuth2, OIDC, SSODockerKubernetesAWSNext.jsTailwind, ShadCNExpressSQL, Drizzle ORMCI/CDDistributed systems
Nice to have:GoOpen-source community engagement

Benefits

  • Competitive salary
  • Hybrid (in-person + work-from-home)
  • Quiet work environment
  • Small, trusting team of founders and engineers
  • Relocation assistance
  • Unlimited PTO
Last updated Sep 9, 2026. Interested? Apply on the company site.
Pangolin logo

About Pangolin

Open-source alternative to Cloudflare Tunnels

Pangolin is building a new kind of open-source proxy: cloud-orchestrated, identity-aware, tunneled, and highly available. It’s the simplest way to securely expose applications on any network—only the people you want get access to your apps, and we block everyone else.