Careers at Upbound Group

Job Description: Upbound Group Summer 2027 Internship – Cybersecurity Who We Are Upbound Group, Inc. (NASDAQ: UPBD) is a technology and data-driven leader in accessible and inclusive financial solutions that address the evolving needs and aspirations of underserved customers. The Company’s customer-facing operating units include industry-leading brands such as Acima, Brigit, and Rent-A-Center that facilitate consumer transactions across a wide range of store-based and digital channels, including over 2,300 company branded retail units across the United States, Mexico, and Puerto Rico. Upbound Group, Inc. is headquartered in Plano, Texas. Summer Intern Program Upbound Group’s 2027 Summer Intern Program offers an immersive professional development experience that goes beyond traditional internships, providing participants with a comprehensive opportunity to grow both personally and professionally through dynamic networking events, engaging volunteer activities, and exclusive executive leadership speaker sessions. Interns can anticipate a robust learning environment that balances structured training modules with self-paced learning pathways, enabling them to explore their potential, develop critical skills, and gain meaningful insights into corporate culture. Program Dates The ten-week program will run from May 25 through July 30, 2027, and is an in-office experience at our company headquarters in Plano, Texas. The Role The Cybersecurity team’s job is to protect Upbound’s customers, employees, and brands from threat actors and fraudsters. This internship is part of how we bring AI into that work. You’ll work as one team with the other cybersecurity interns, with a mentor from the Cybersecurity team, and build two things: an offensive harness that runs attacker techniques safely and measures how our detections respond, and a defensive harness that uses AI to help analysts triage alerts and recommend what to fix first. You leave behind working code in our repository, documented and handed to the team that will run it after you go. This is new and interesting work, and your fresh thinking will help inject new ideas into our existing team. Compensation Summer Interns at Upbound Group are paid hourly in accordance with usual payroll procedures. $23.00 per hour Key Responsibilities Build the offensive harness: script MITRE ATT&CK techniques, run them in a test environment under agreed rules of engagement, and record whether each technique was detected and how quickly. Build the defensive harness: use LLMs and agents to draft alert triage for an analyst to review and to chain vulnerability findings into attack paths with a recommended fix order. Analyze what both produce: detection coverage against ATT&CK, time to detect, alert quality, and time to fix, and report what changed. Use AI coding tools every day and own what you ship: tests, code review, and documentation. Progress over perfection: ship a working first version early and improve it every week. Write the runbook, hand the tooling over, and demo it to cybersecurity leadership. Qualifications You have built something with generative AI, such as an app on an LLM API or an agent, and you can show it. You use AI coding assistants, and you can explain what the tool wrote, what you changed, and why. You write Python, use Git, and can work with APIs and JSON. You know SQL and a data analysis library such as pandas. You can take a messy dataset, clean it, find what matters, and explain what you found. Coursework in Cybersecurity, Computer Science, Data Science, or a related field. Capture-the-flag experience, a home lab, or a security certification helps. Must be a rising Junior or above at an accredited four-year college or university. Cumulative grade point average of 3.0 or higher Excellent verbal and written communication skills Ability to work in our home office in Plano, Texas Monday through Friday In your application, include a link to a repository, notebook, or write-up of something you built with AI. To be eligible for this program, you must be authorized to work in the U.S. We do not offer any type of employment-based immigration sponsorship for this program. Likewise, Upbound Group will not provide any assistance or sign any documentation in support of any other form of immigration sponsorship or benefit including optional practical training (OPT) or curricular practical training (CPT.) Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Job Description: Upbound Group Summer 2027 Internship – Software Engineer Who We Are Upbound Group, Inc. (NASDAQ: UPBD) is a technology and data-driven leader in accessible and inclusive financial solutions that address the evolving needs and aspirations of underserved customers. The Company’s customer-facing operating units include industry-leading brands such as Acima, Brigit, and Rent-A-Center that facilitate consumer transactions across a wide range of store-based and digital channels, including over 2,300 company branded retail units across the United States, Mexico, and Puerto Rico. Upbound Group, Inc. is headquartered in Plano, Texas. Summer Intern Program Upbound Group’s 2027 Summer Intern Program offers an immersive professional development experience that goes beyond traditional internships, providing participants with a comprehensive opportunity to grow both personally and professionally through dynamic networking events, engaging volunteer activities, and exclusive executive leadership speaker sessions. Interns can anticipate a robust learning environment that balances structured training modules with self-paced learning pathways, enabling them to explore their potential, develop critical skills, and gain meaningful insights into corporate culture. Program Dates The ten-week program will run from May 25 through July 30, 2027, and is an in-office experience at our company headquarters in Plano, Texas. The Role The Software Engineer will assist the team with a variety software engineering processes and will have direct exposure to full software development lifecycle. Qualifications Pursuing a Computer Science Major, with an expected graduation between May 2027 and December 2028 Excellent verbal and written communication skills Ability to work in our home office in Plano, TX Monday through Friday To be eligible for this program, you must be authorized to work in the U.S. We do not offer any type of employment-based immigration sponsorship for this program. Likewise, Upbound Group will not provide any assistance or sign any documentation in support of any other form of immigration sponsorship or benefit including optional practical training (OPT) or curricular practical training (CPT.) Upbound Group is an equal opportunity employer committed to ensure that all employment decisions are made on a non- discriminatory basis, and without regard to actual or perceived race (the definition of race also includes traits historically associated with race, including, but not limited to, hair texture and braids, locks, and twists), religious creed, color, national origin, ancestry, physical or mental disability, genetic information (including testing and characteristics), sex (including pregnancy, childbirth, lactation and related medical conditions), gender (including gender identity, transgender, and gender expression), age, sexual orientation, citizenship status, veteran status, uniformed servicemember status, or any other consideration protected by federal, state or local law. Compensation Summer Interns at Upbound Group are paid hourly in accordance with usual payroll procedures. $23.00 per hour Employment Eligibility To be eligible for this opportunity, you must be authorized to work in the U.S. Upbound Group does not offer employment-based immigration sponsorship for this role, including OPT or CPT. Equal Opportunity Employer Upbound Group is an equal opportunity employer committed to ensuring all employment decisions are made on a non-discriminatory basis in accordance with applicable federal, state, and local laws. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Job Description: 2027 Summer Internship Proposal: Acima Software Engineering About Upbound Group, Inc: Upbound Group, Inc. (NASDAQ: UPBD), is a technology and data-driven leader in accessible and inclusive financial solutions that address the evolving needs and aspirations of underserved consumers. The Company’s customer-facing operating units include industry-leading brands such as Acima®, Brigit™, and Rent-A-Center® that facilitate consumer transactions across a wide range of store-based and digital channels in the United States, Mexico and Puerto Rico. Upbound Group, Inc. is headquartered in Plano, Texas. What You’ll Do: Work with a Product Management team to transform requirements into user stories to define software. Collaborate closely with other interns and experienced engineers to define project plans. Build full-stack software that will be used daily in our production environment. Work in a learning-oriented environment where you will proactively build software in new and unfamiliar situations in partnership with a team. Follow industry best practices of engineering excellence, thinking about security, compliance, quality, and design as part of every change. Use development tools like git, code editors, and AI agents. What We’re Looking For Currently pursuing a bachelor’s or master’s degree in computer science with an expected graduation date between May 2027 and May 2028. Minimum cumulative GPA of 3.2 or higher. Demonstrated interest in learning and growth. Strong coding, collaboration, and communication skills. Proficiency in development tools like git and at least one programming language. Excellent written, verbal, and presentation skills. Ability to thrive in a fast-paced, collaborative environment and manage multiple priorities effectively. Proven leadership potential through academic achievement, internships, campus involvement, athletics, military service, or extracurricular activities. Preferred Qualifications Prior internship experience in collaborative software development Experience with web development in interpreted languages (such as Python, JavaScript/TypeScript, Ruby) Coursework in software architecture or backend web development Work Location Ability to work in our corporate headquarters in Draper, Utah throughout the entire ten-week summer intern program. Compensation Summer Interns at Upbound Group are paid hourly in accordance with usual payroll procedures. $23.00 per hour Employment Eligibility To be eligible for this opportunity, you must be authorized to work in the U.S. Upbound Group does not offer employment-based immigration sponsorship for this role, including OPT or CPT. Equal Opportunity Employer Upbound Group is an equal opportunity employer committed to ensuring all employment decisions are made on a non-discriminatory basis in accordance with applicable federal, state, and local laws. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Job Description: Upbound Group Summer 2027 Internship – Software Engineer Who We Are Upbound Group, Inc. (NASDAQ: UPBD) is a technology and data-driven leader in accessible and inclusive financial solutions that address the evolving needs and aspirations of underserved customers. The Company’s customer-facing operating units include industry-leading brands such as Acima, Brigit, and Rent-A-Center that facilitate consumer transactions across a wide range of store-based and digital channels, including over 2,300 company branded retail units across the United States, Mexico, and Puerto Rico. Upbound Group, Inc. is headquartered in Plano, Texas. Summer Intern Program Upbound Group’s 2027 Summer Intern Program offers an immersive professional development experience that goes beyond traditional internships, providing participants with a comprehensive opportunity to grow both personally and professionally through dynamic networking events, engaging volunteer activities, and exclusive executive leadership speaker sessions. Interns can anticipate a robust learning environment that balances structured training modules with self-paced learning pathways, enabling them to explore their potential, develop critical skills, and gain meaningful insights into corporate culture. Program Dates The ten-week program will run from May 25 through July 30, 2027, and is an in-office experience at our company headquarters in Plano, Texas. The Role The Software Engineer will assist the team with a variety software engineering processes and will have direct exposure to full software development lifecycle. Qualifications Pursuing a Computer Science Major, with an expected graduation between May 2027 and December 2028 Excellent verbal and written communication skills Ability to work in our home office in Plano, TX Monday through Friday To be eligible for this program, you must be authorized to work in the U.S. We do not offer any type of employment-based immigration sponsorship for this program. Likewise, Upbound Group will not provide any assistance or sign any documentation in support of any other form of immigration sponsorship or benefit including optional practical training (OPT) or curricular practical training (CPT.) Upbound Group is an equal opportunity employer committed to ensure that all employment decisions are made on a non- discriminatory basis, and without regard to actual or perceived race (the definition of race also includes traits historically associated with race, including, but not limited to, hair texture and braids, locks, and twists), religious creed, color, national origin, ancestry, physical or mental disability, genetic information (including testing and characteristics), sex (including pregnancy, childbirth, lactation and related medical conditions), gender (including gender identity, transgender, and gender expression), age, sexual orientation, citizenship status, veteran status, uniformed servicemember status, or any other consideration protected by federal, state or local law. Compensation Summer Interns at Upbound Group are paid hourly in accordance with usual payroll procedures. $23.00 per hour Employment Eligibility To be eligible for this opportunity, you must be authorized to work in the U.S. Upbound Group does not offer employment-based immigration sponsorship for this role, including OPT or CPT. Equal Opportunity Employer Upbound Group is an equal opportunity employer committed to ensuring all employment decisions are made on a non-discriminatory basis in accordance with applicable federal, state, and local laws. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Job Description: CRM HTML Designer/Developer Who We Are Upbound Group, Inc. (NASDAQ: UPBD) is a technology and data-driven leader in accessible and inclusive financial solutions that address the evolving needs and aspirations of underserved customers. The Company’s customer-facing operating units include industry-leading brands such as Acima, Brigit, and Rent-A-Center that facilitate consumer transactions across a wide range of store-based and digital channels, including over 2,300 company branded retail units across the United States, Mexico, and Puerto Rico. JOB PURPOSE: The CRM designer will own the end‑to‑end crafting of CRM retention messaging—from coding responsive, on‑brand email templates to designing segmented, personalized journeys in our ESP/CDP. This role will lift opens, clicks, conversions, and retention by uniting beautiful design and copy, bulletproof HTML/CSS, and smart data activation. KEY RESPONSIBILITIES: Develop and deploy high‑quality, responsive email campaigns that render cleanly across 50+ clients and devices (desktop, mobile, webmail). Design & hand‑code table‑based, inline‑styled HTML/CSS emails; use mobile‑first, fluid‑hybrid techniques and media queries to ensure consistent rendering (Outlook, Gmail, Apple Mail). Test & QA at scale using Litmus. Validate links, tracking, image weights, and fallbacks before every launch. Partner with broader team on cross QC. Personalize at scale with dynamic content and scripting (Liquid script in Zeta Marketing Platform); set up automations, triggers, and versioned content by audience or lifecycle stage. Visual Communication & UI/UX: Translate marketing briefs into intuitive, high-converting, on-brand visual hierarchies that guide the subscriber's eye toward the primary Call to Action (CTA). Design Tool Mastery (Required): Proficiency in Figma, Adobe Creative Suite (Photoshop/Illustrator), or similar tools to create pixel-perfect mockups before moving to code. Collaborate across multiple departments. You’ll be working with product and personalization teams, legal, developers, CX, data science, etc. Maintain a modular design system (master templates, reusable components) to ensure brand consistency and speed production. Monitor performance & experiment design A/B tests (subject lines, CTA color/size/placement, layout structure); partner on reporting to inform next iterations and cross‑channel orchestration (email/SMS/push). Use AI/GPT to draft copy for SMS, push notifications and email, including subject lines/pre-headers. JOB REQUIREMENTS: Required: 1 year coding responsive, table‑based HTML/CSS for email with rigorous cross‑client QA and brand stewardship. Deep familiarity with email‑specific constraints (inline CSS, limited/unsupported properties, Outlook quirks) and fluid‑hybrid/mobile‑first methods. ESP proficiency: hands‑on campaign setup in platforms such as Zeta, Salesforce Marketing Cloud, Braze, Iterable, Klaviyo, Mailchimp, or HubSpot. Dynamic content scripting (AMPscript, Liquid; Velocity a plus) and strong QA discipline (Litmus/Email on Acid) for rendering verification. Collaboration & project management skills in a fast‑paced environment handling multiple projects at once. This position is in-office (Monday through Friday) in Plano, TX Preferred: Experience building modular email systems (master templates, component libraries) and maintaining documentation. Working knowledge of deliverability drivers (image‑to‑text ratios, file size) and practical spam‑trigger avoidance. A/B and multivariate testing experience; comfort reading performance dashboards and converting insights into design changes. Ability to create lightweight animated assets (optimized GIFs/APNGs) and kinetic email patterns (progressive enhancement with safe fallbacks). Familiarity with omni‑channel orchestration (email, SMS, push) and CDP concepts. SPONSORSHIP: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Job Description: Quality Assurance Engineer II (Draper Utah, In-Office) At Upbound Group, we are committed to elevating financial opportunity for all through innovative, inclusive, and technology-driven financial solutions that address the evolving needs and aspirations of consumers. The Company’s customer-facing operating units include industry-leading brands such as Rent-A-Center, Acima and Brigit that facilitate consumer transactions across a wide range of store-based and digital retail channels, including over 2,400 company-branded retail units across the United States, Mexico, New York and Puerto Rico. Upbound Group, Inc. is headquartered in Plano, Texas. ABOUT THE POSITION We are looking for a detail-oriented Quality Assurance professional to join our team. In this role, you will monitor processes, test products or systems, and identify defects to ensure our final output meets the highest standards of quality and regulatory compliance. KEY RESPONSIBILITIES Monitor and Inspect: Review production workflows, test software code, or inspect physical goods to catch errors early Develop Standards: Help create and implement quality control protocols, testing plans, and safety guidelines Track and Report: Document bugs, non-conformances, and test results accurately; Prepare routine performance reports for management Root Cause Analysis: Investigate product defects or system failures to find the core problem and prevent future occurrences Collaborate: Work closely with developers, engineers, and operations teams to verify fixes and improve overall product design Compliance: Ensure all processes align with industry regulations and standards QUALIFICATIONS Bachelor’s degree in Business, Engineering, Computer Science, or a related field (or equivalent work experience) 2-5+ years of experience in a QA, testing, or manufacturing/technical role Strong problem-solving abilities with experience using data tools, root-cause analysis, and statistical process control. Excellent written and verbal communication skills to write clear technical reports and train team members. Meticulous habits to spot minor discrepancies that could impact the final user or product safety COMPENSATION/BENEFITS Full health benefits-Medical/Dental/Vision 401(k) match, 5%/4% DTO (discretionary time off) Health savings account (HSA) with company contribution College tuition reimbursement program (STEM degrees) Unlimited use of Linkedin Learning On-site gym and showers Free car charging Work Location Ability to work in the Draper, Utah office, Monday through Friday, with travel between locations as necessary based on transformation and governance activities. Sponsorship Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time. Equal Opportunity Employer Upbound Group is an equal opportunity employer committed to ensuring all employment decisions are made on a non-discriminatory basis in accordance with applicable federal, state, and local laws. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Job Description: Job Description Senior Software Engineer About Upbound Upbound Group (NASDAQ: UPBD) is a technology-driven platform company focused on expanding financial opportunity through innovative and inclusive solutions. Our brands, including Rent-A-Center, Acima, and Brigit, serve customers across digital and retail channels throughout the U.S., Mexico, and Puerto Rico. About the Role We are seeking an experienced Senior Software Engineer to join our Enterprise & Store Technology team. This is a hands-on, highly technical Senior Engineer role where you will spend approximately 60-70% of your time designing, developing software , while the remaining time is focused on technical leadership, mentoring engineers, influencing architecture, and driving delivery excellence. You will partner closely with product managers, architects, business stakeholders, and engineering teams to build scalable, secure, and high-performing applications. This role is ideal for a seasoned engineer who enjoys staying close to the code, solving complex technical problems, and influencing technical direction across the organization. As part of our ongoing technology transformation, we're also looking for someone who embraces modern engineering practices and AI-powered tools such as GitHub Copilot, Claude Code to improve developer productivity, accelerate delivery, and enhance software quality. What You'll Do Software Development & Delivery Design, develop, test, and support enterprise applications and services. Build and maintain APIs, microservices, and cloud-native solutions. Drive code quality through code reviews, testing strategies, and engineering best practices. Lead projects through the full software development lifecycle, from design to deployment and production support. Technical Leadership Mentor and coach engineers through technical guidance and code reviews. Influence architecture, design decisions, and implementation approaches. Partner with cross-functional teams and vendors to ensure successful solution delivery. Promote engineering standards and continuous improvement across the team. AI & Engineering Innovation Champion the adoption of AI-assisted development tools such as GitHub Copilot. Identify opportunities to improve efficiency through automation and modern engineering practices. Explore and implement AI-driven capabilities that enhance business applications and developer experience. Collaboration & Operations Partner with product, business, and technology teams to deliver high-impact solutions. Troubleshoot complex technical issues and support production environments. Participate in releases, UAT, and ongoing application enhancements. What We're Looking For Technical Skills Strong full-stack development experience. Front-end experience with React or Angular. Back-end development experience with Node.js, Java, or Python. Experience building REST APIs, microservices, and distributed applications. Cloud experience, preferably AWS. Strong database design and SQL skills. Leadership & Approach Experience leading technical initiatives and mentoring engineers. Strong analytical, problem-solving, and communication skills. Ability to balance hands-on development with technical leadership responsibilities. Experience working collaboratively across technical and business teams. Nice to Have Experience with GitHub Copilot, ChatGPT, or similar AI development tools. Exposure to AI-driven, intelligent, or data-centric applications. Experience in retail, fintech, or omni-channel environments. Requirements Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent experience). 8+ years of software development experience. Experience designing and delivering solutions within enterprise-scale, cloud-based environments. Sponsorship Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Upbound is redefining how modern infrastructure is built for the Agentic AI Era. We’re the creators and primary maintainers of Crossplane , and we’re building the Intelligent Control Plane —a new platform layer that makes infrastructure programmable, autonomous, and composable . Our mission is to power the AI-native enterprise with a foundational platform layer that helps teams provision, operate, and adapt infrastructure at scale—so platforms are ready for both humans and AI agents . We partner with leading cloud providers, ISVs, and open-source communities to help organizations move faster with greater confidence. Today, Upbound supports Fortune 500 companies and platform engineers across 100+ countries . Crossplane has surpassed 100M+ downloads and is used by 1,000+ teams worldwide . We’re a Series B company backed by GV (formerly Google Ventures), Altimeter Capital, and Intel Capital , and we’ve raised $69M to date. Learn more at upbound.io Upbound is building the control plane for the modern enterprise. As the company behind Crossplane, the open-source CNCF project that extends Kubernetes into an AI-native cloud control plane, Upbound enables organizations to compose, manage, and operate infrastructure and services through declarative, programmable control planes. Upbound Cloud delivers hosted, multi-tenant control planes that power platform engineering teams at scale. The Management Plane is how customers experience all of it. It is the unified API surface, the interface they work in, the catalog they discover content through, and the systems that connect, license, and bill everything they run. As we scale into the next phase of growth, we are hiring a Senior Manager to lead this group. Areas of Ownership Hub — The Upbound Hub API, which indexes and aggregates control planes across an organization and provides unified API access, multi-tenancy, and organization context regardless of where those control planes run. Console — The primary frontend client and user experience for the entire Upbound platform, spanning single control plane views, multi-control-plane management, and organization-level operations. Marketplace — The distribution and discovery layer where users and customers find providers, functions, configurations, and extensions. Middleware — The platform services the business depends on: billing and metering, licensing and entitlements, Connect, and the identity and access plumbing that ties them together. This is a senior leadership role responsible for growing a team, defining the architecture of the Management Plane, and ensuring these four surfaces operate as one coherent product rather than four adjacent ones. In this role, you will … Management Plane Strategy Own the long-term technical direction for Hub, Console, Marketplace, and middleware. Ensure they present a single coherent experience to customers whether their control planes run in Upbound Cloud or in their own environment. Define the architectural direction for the Hub API, multi-tenancy, and organization-level identity and access management. Drive the reliability and performance standards these surfaces are held to. Middleware and Commerce Own the systems that turn product usage into revenue: metering, usage aggregation, billing, licensing, and entitlement enforcement. Ensure these systems are accurate, auditable, and resilient, and that they can support new packaging and pricing without a rewrite each time. Partner with Finance and Revenue on the operational side of billing correctness. AI-Native Access Ensure the Hub API is a first-class interface for autonomous agents as well as human operators, with the declarative, programmatic access agentic workflows require. Evolve the Console toward a multi-modal experience that works alongside those workflows rather than around them. Team Leadership Lead senior ICs and tech leads directly. Grow the team deliberately against the roadmap, raise the hiring bar, and develop engineers into senior and lead roles. Establish operational rigor: roadmap planning, delivery predictability, on-call ownership, and production excellence across the Management Plane surfaces. Cross-Functional Partnership Partner closely with Product, Design, GTM, Finance, and Customer Success. Translate enterprise requirements around security, multi-tenancy, packaging, and entitlements into platform capabilities. Represent the Management Plane in conversations about pricing changes, packaging, and customer-facing reliability. You are a good fit if you have… 7+ years of engineering experience, including 3+ years managing engineers directly Experience building and operating multi-tenant SaaS products at scale Strong API design fundamentals, including versioning, backward compatibility, and designing for third-party consumers Hands-on experience with at least one commerce or platform middleware domain: billing, metering, licensing, entitlements, or identity and access management Track record of owning production reliability for customer-facing services, including incident response and on-call culture Has built or intentionally restructured a team, not only inherited one Technically credible with senior and principal engineers while operating at the roadmap level Skills / Traits Leadership: Sets direction and quality standards for a group of senior engineers who need clarity more than supervision. Earns followership through judgment and technical credibility rather than title. People Management: Develops engineers deliberately toward their next level, runs consistent 1:1s and feedback loops, and addresses underperformance directly instead of waiting for a review cycle. Decision-Making: Makes calls with incomplete information on a surface where reversals are expensive. A published API, a data model, or a billing schema is hard to walk back, so the bar for thinking a decision through is higher here than in most teams. Communication: Translates fluently between engineering, Product, Design, Finance, and GTM. Writes clearly enough that a pricing change or an API deprecation can be understood by everyone it affects without a meeting. Problem-Solving: Drives to root cause on correctness problems rather than stopping at a mitigation. Comfortable reasoning about a discrepancy that only shows up in one tenant's invoice. Prioritization: Balances roadmap commitments against revenue-blocking middleware work, reliability debt, and customer escalations, and can explain the tradeoff to the people who lost the argument. Project Management: Delivers predictably across four tightly coupled surfaces where a Hub API change can block Console and Marketplace at the same time. Manages dependencies and sequencing without adding process for its own sake. Adaptability: Absorbs shifts in packaging, pricing, and agentic access requirements without rearchitecting each time. Adjusts approach when a framework or plan stops serving the team. Risk Management: Treats billing accuracy, entitlement enforcement, and API compatibility as areas where mistakes cost real money and customer trust. Builds the guardrails, auditability, and testing to catch problems before customers do. Technical Proficiency: Credible in API design, multi-tenant data modeling, and identity and access patterns, with enough frontend depth to lead Console work substantively rather than defer on it. It is a plus if you have… Familiarity with Kubernetes and the cloud-native ecosystem Frontend or full-stack depth, enough to lead Console work substantively Experience with marketplaces, developer catalogs, or package distribution systems Experience with usage-based or hybrid pricing models and the systems behind them Startup experience in high-growth infrastructure or developer-tools companies Familiarity with how AI agents consume infrastructure APIs #LI-REMOTE Why Upbound? At Upbound, you’ll help shape the systems and strategies that drive predictable, scalable growth in a product-led company embracing usage-based models. If you're excited to build from the ground up, work with cutting-edge cloud technologies, and directly impact how revenue is generated and scaled—this is your seat at the table. About Upbound Upbound is pioneering infrastructure platforms for the Agentic AI Era, serving Fortune 500 companies and platform engineers across more than 100 countries. The company empowers infrastructure and platform teams with Intelligent Control Planes - based on Kubernetes and Crossplane - that provision, operate, and adapt so platforms are ready for both humans and AI agents. Upbound is the creator and primary maintainer of Crossplane, the popular open-source framework for building cloud-native control planes, with over 100 million downloads and adoption by more than 1,000 teams worldwide. A Series B startup backed by GV (formerly Google Ventures), Altimeter Capital, and Intel Capital, Upbound has raised $69M to date. For more information, visit www.upbound.io .

Upbound is redefining how modern infrastructure is built for the Agentic AI Era. We’re the creators and primary maintainers of Crossplane , and we’re building the Intelligent Control Plane —a new platform layer that makes infrastructure programmable, autonomous, and composable . Our mission is to power the AI-native enterprise with a foundational platform layer that helps teams provision, operate, and adapt infrastructure at scale—so platforms are ready for both humans and AI agents . We partner with leading cloud providers, ISVs, and open-source communities to help organizations move faster with greater confidence. Today, Upbound supports Fortune 500 companies and platform engineers across 100+ countries . Crossplane has surpassed 100M+ downloads and is used by 1,000+ teams worldwide . We’re a Series B company backed by GV (formerly Google Ventures), Altimeter Capital, and Intel Capital , and we’ve raised $69M to date. Learn more at upbound.io Upbound is hiring a Senior Software Engineer to help us build and operate Upbound Spaces, the multi-control-plane management software at the heart of the Upbound Platform. As part of the Spaces team, you’ll help us scale Upbound to reliably support thousands of control planes while extending enterprise-grade control plane management and operations across both cloud and on-premises environments. Our team is growing, and this is an opportunity to make a meaningful engineering impact across both product development and production operations. For this particular opening, we’re focused on growing our engineering presence in the San Francisco Bay Area and Seattle, and are prioritizing candidates who are currently based in, or able to work from, one of those two markets. What You'll Do Actively build and operate Upbound Spaces in production, troubleshooting and resolving issues across multi-tenant SaaS environments, as well as contributing to Upbound's open-source projects, including Crossplane. Take ownership of building features in high demand by Upbound's customers and deliver new functionality that will delight and amaze our users. Investigate and debug complex issues in customer environments, including multi-control plane scenarios, resource reconciliation problems, and performance bottlenecks. Communicate through thoughtful and thorough design documents for new initiatives and detailed post-incident reviews that drive system improvements. Support the full project lifecycle for highly scalable and reliable services running in a cloud environment – discovery, analysis, architecture, design, review, documentation, building, migration, automation, deployment, production-readiness, and ongoing operational support. Write and maintain Go code that interfaces with the Kubernetes API, such as operators, controllers, add-ons, etc., with a focus on observability, debuggability, and operational excellence. Deploy, manage, and troubleshoot our Kubernetes services in production, using metrics, logs, and traces to identify and resolve issues quickly. Build and maintain operational tooling for debugging customer environments, analyzing control plane health, and automating incident response. Author documentation, user guides, runbooks, and blog posts to support and promote new features that you release. Support the software release cycle for Spaces self-hosted distributions, including diagnosing issues in customer-managed deployments. Participate in on-call rotation to support Upbound Cloud, responding to incidents and driving them to resolution. What You'll Bring Have experience operating production cloud services at scale: monitoring, alerting, incident response, post-mortems, and continuous improvement of service reliability. Have strong debugging skills across distributed systems, including experience with observability tools (Prometheus, Grafana, OpenTelemetry, distributed tracing) and techniques for diagnosing issues in production environments. Have experience building and operating controllers that interact with the Kubernetes API server, including troubleshooting reconciliation loops, managing API rate limits, and optimizing controller performance. Are comfortable working directly with customers to understand, reproduce, and resolve complex technical issues in their environments. Take responsibility and ownership for solving problems even if they are outside your lane, especially during incidents affecting customer workloads. Demonstrate excellence in your work, constantly trying to improve your skills and the operational posture of the systems you build. Have empathy for customers and keep them in mind as you build solutions, understanding that reliability and debuggability are features. Realize the importance of clear communication and effective collaboration to work as a team, deliver great results, and support customers through technical challenges. Help create a safe environment where everyone can contribute, learn from failures, share on-call knowledge, and help each other grow as operators and engineers. #LI-REMOTE Why Upbound? At Upbound, you’ll help shape the systems and strategies that drive predictable, scalable growth in a product-led company embracing usage-based models. If you're excited to build from the ground up, work with cutting-edge cloud technologies, and directly impact how revenue is generated and scaled—this is your seat at the table. About Upbound Upbound is pioneering infrastructure platforms for the Agentic AI Era, serving Fortune 500 companies and platform engineers across more than 100 countries. The company empowers infrastructure and platform teams with Intelligent Control Planes - based on Kubernetes and Crossplane - that provision, operate, and adapt so platforms are ready for both humans and AI agents. Upbound is the creator and primary maintainer of Crossplane, the popular open-source framework for building cloud-native control planes, with over 100 million downloads and adoption by more than 1,000 teams worldwide. A Series B startup backed by GV (formerly Google Ventures), Altimeter Capital, and Intel Capital, Upbound has raised $69M to date. For more information, visit www.upbound.io .

Job Description: Cybersecurity Engineer II Who We Are At Upbound Group, we are committed to elevating financial opportunity for all through innovative, inclusive, and technology-driven financial solutions that address the evolving needs and aspirations of consumers. The Company’s customer-facing operating units include industry-leading brands such as Rent-A-Center, Acima and Brigit that facilitate consumer transactions across a wide range of store-based and digital retail channels, including over 2,400 company-branded retail units across the United States, Mexico, New York and Puerto Rico. Upbound Group, Inc. is headquartered in Plano, Texas. Role Summary We are seeking a hands-on Cybersecurity Engineer II to join our Security team. This role is responsible for the day-to-day engineering, administration, and support of core security platforms that protect our infrastructure, data, and users, including our privileged access management (PAM) platform and our Zscaler environment. The Cybersecurity Engineer will also drive Data Loss Prevention (DLP) initiatives, assist in IAM operations and support, help resolve security support tickets, and contribute to network security engineering activities across our hybrid environment. This is an operationally focused engineering role, ideal for a security professional who enjoys owning platforms end to end: deploying, tuning, supporting, and continuously improving the controls that the business relies on every day. As part of an AI-native engineering organization, the Cybersecurity Engineer will be expected to embrace AI-driven ways of working, using GenAI tools, AI assistants, and agentic workflows to accelerate policy tuning, ticket resolution, investigation, and documentation, and to help identify opportunities to automate routine security engineering operations. Key Responsibilities Privileged Access Management (PAM) Assist in managing the enterprise PAM platform (Delinea Secret Server), including secret and vault management, folder and permission structures, discovery rules, and platform upgrades and health monitoring. Onboard privileged accounts across servers, databases, network devices, applications, and cloud services; enforce credential rotation, check-in/check-out workflows, and session recording and auditing. Drive reduction of standing privilege through just-in-time elevation, least-privilege access policies, and periodic privileged access reviews in partnership with IAM and infrastructure teams. Support integration of PAM with Active Directory, SIEM, and service account and secrets management workflows for both human and non-human identities. Zscaler Deployment, Management, and Support Deploy, manage, and support the Zscaler platform, including Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Client Connector across the enterprise. Author and tune policies for URL filtering, SSL inspection, cloud app control (CASB), bandwidth control, and firewall rules within ZIA; build and maintain ZPA application segments, access policies, and app connectors to enable Zero Trust Network Access (ZTNA). Manage Zscaler client rollouts, agent health, traffic forwarding (tunnels, PAC files, GRE/IPSec), and location/sub-location configuration; troubleshoot user connectivity, latency, and access issues. Monitor Zscaler dashboards and logs, integrate telemetry with the SIEM, and partner with network and helpdesk teams to resolve escalations and continuously improve the user experience. Data Security Deploy, operate, and tune DLP controls across endpoint, network, email, web, and cloud channels using Microsoft Purview and Zscaler DLP to prevent exfiltration of sensitive consumer data such as PII and SPI. Extend DLP coverage to AI platforms, including controls that detect and block sensitive data from being submitted to GenAI tools, external LLMs, and AI assistants, in alignment with enterprise AI acceptable use policies. Author and maintain DLP policies, data classification rules, and detection logic, including custom dictionaries and exact data matching (EDM); manage false-positive tuning with business stakeholders. Triage and investigate DLP alerts and incidents, document findings, and coordinate remediation and user education with HR, Legal, and Compliance as appropriate. Support Data Security Posture Management (DSPM) capabilities to discover, classify, and continuously monitor sensitive data across cloud storage, databases, SaaS platforms, and unstructured repositories. Assist in remediating data exposure risks surfaced through DSPM, including over-permissioned data stores, shadow data, stale sensitive data, and excessive access paths. Partner with Data, Privacy, and Compliance teams on data classification, retention, and minimization efforts, and validate data store security posture before data is exposed to AI platforms and workflows. Identity and Access Management (Microsoft Entra ID) Provide day-to-day IAM support and maintenance for Microsoft Entra ID, including user and group lifecycle administration, enterprise application and app registration management, and directory hygiene. Administer and tune Conditional Access policies, multi-factor authentication (MFA), and device compliance requirements to enforce least-privilege, risk-based access. Support single sign-on (SSO) integrations (SAML, OAuth 2.0/OIDC, SCIM provisioning) for enterprise and SaaS applications, and troubleshoot authentication and access issues. Assist with Entra ID Governance activities, including access reviews, entitlement management, and Privileged Identity Management (PIM) for just-in-time role elevation. Security Support and Ticket Management Assist with security support tickets and service requests within defined SLAs, including access issues, policy exceptions, allowlist/blocklist changes, certificate issues, and security tool troubleshooting. Serve as an escalation point for the helpdesk on security platform issues; document root causes, maintain runbooks and knowledge base articles, and identify recurring issues for permanent fixes or automation. Support audit and compliance requests with evidence collection, access reviews, and control documentation. Network Security Support network security engineering activities including firewall rule reviews and changes, network segmentation, IDS/IPS, VPN, and egress filtering across on-premises and cloud environments. Participate in vulnerability remediation efforts for network and security infrastructure, including patching, hardening, and configuration baseline enforcement. Assist with security monitoring and incident response activities, including investigating alerts from network and security tooling and executing containment actions when required. Required Qualifications 3-5 years of hands-on experience in cybersecurity engineering, security operations, or a related security infrastructure role. Hands-on experience administering a PAM platform (Delinea Secret Server strongly preferred; CyberArk, BeyondTrust, or equivalent considered), including privileged account onboarding, credential rotation, and session management. Hands-on experience deploying, managing, and supporting Zscaler (ZIA and/or ZPA), including policy administration, traffic forwarding, client connector management, and troubleshooting. Experience operating DLP controls across one or more channels (endpoint, network, email, web, or cloud) using Microsoft Purview, Zscaler DLP, or equivalent, including policy authoring, alert triage, and false-positive tuning. Exposure to DSPM platform and operations. Working knowledge of network security fundamentals: TCP/IP, DNS, proxies, firewalls, VPN, network segmentation, and TLS/SSL inspection. Experience working in a ticket-driven environment (ServiceNow, Jira, or equivalent) with a strong customer-service orientation and demonstrated ability to meet SLAs. Hands-on experience supporting and maintaining Microsoft Entra ID (Azure AD), including Conditional Access, MFA, SSO integrations, and user/group administration, along with familiarity with Active Directory and least-privilege principles. Strong troubleshooting, documentation, and communication skills; able to explain security requirements and issues to technical and non-technical audiences. Preferred Qualifications Experience using AI tools (GenAI assistants, LLM-based copilots, or agentic workflows) as part of daily engineering and operational workflows, such as accelerating investigations, policy tuning, scripting, and documentation. Experience with Zero Trust architecture concepts (NIST SP 800-207) and ZTNA implementations. Experience with SIEM platforms (Rapid7, Microsoft Sentinel, or equivalent) and log integration from security tools. Exposure to cloud security in AWS, Azure, or GCP, including cloud-native IAM and security posture management. Scripting or automation experience (PowerShell, Python) for administrative and reporting tasks. Experience in regulated consumer finance, payments, or retail environments, with working knowledge of PCI DSS, GLBA, or SOX control expectations. Relevant certifications: Zscaler ZDTA, Zscaler ZTCA, CompTIA Security+, CompTIA CySA+, Delinea certifications, CISSP (or progress toward), or equivalent. Work Location Ability to work in the Plano, Texas Monday through Friday, with travel between locations as necessary based on transformation and governance activities. Sponsorship Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time . Equal Opportunity Employer Upbound Group is an equal opportunity employer committed to ensuring all employment decisions are made on a non-discriminatory basis in accordance with applicable federal, state, and local laws. Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.