Senior Principal Engineer, Docker, Ecosystem

This is a fully remote position, open to applicants in Washington.

📋 Description

• Spearhead a multi-year technical vision for build security and supply chain across Docker Desktop, Hub, Hardened Images, Verified Publishing, and monetization platforms.

• Outline and arrange a trusted-by-default architecture for 20 million developers.

• Collaborate with the SVP of Engineering to translate commercial strategy into technical roadmaps.

• Establish architectural principles and security standards company-wide.

• Identify platform investments that bolster security across Docker products.

• Architect systems aimed at detecting and preventing threats during the build process.

• Design provenance and attestation infrastructure to ensure verifiable build history.

• Define artifact signing, verification, and policy enforcement throughout local workflows and CI/CD pipelines.

• Architect SBOM generation, dependency analysis, and vulnerability intelligence.

• Integrate security capabilities throughout the software development lifecycle.

• Create interfaces and contracts that connect Docker tooling with customer pipelines, registries, and platforms.

• Define the developer experience for security tooling.

• Architect policy and enforcement models for enterprise security and compliance.

• Propel the convergence of security capabilities across Docker products.

• Collaborate with engineering leaders to drive strategy and execution.

• Mentor Staff and Principal engineers.

• Represent Docker's security architecture through blog posts, conference presentations, standards bodies, and community engagement.

• Engage in executive-level discussions.

• Participate in on-call rotation, respond to incidents, troubleshoot production issues, and enhance system reliability.

⛳️ Requirements

• Over 12 years of software engineering experience focused on build security, software supply chain security, or SDLC tooling.

• In-depth understanding of build process threat models and their mitigations.

• Architectural experience in artifact signing, attestations, SBOMs, dependency security, CI/CD security, base image trust, or vulnerability intelligence.

• Practical knowledge of supply chain security frameworks and standards.

• Expertise in API design, service architecture, and scalable system integration.

• Proven track record in delivering large-scale distributed systems for millions of users and enterprise customers.

• Experience with AWS, GCP, Azure, and contemporary infrastructure.

• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.

• Demonstrated success in creating strategic technical plans that enable revenue, expansion, or enterprise deals.

• Experience in converting business strategy into technical architectures and roadmaps.

• Understanding of SaaS business models, enterprise sales, and the commercial impact of security.

• Experience leading build-vs-buy decisions for essential platform components.

• Ability to lead extensive, cross-company technical initiatives across multiple engineering teams.

• Experience collaborating with VPs and executives to define and execute technical strategy.

• Proven ability to influence technical direction and build consensus without direct authority.

• Strong communication skills suitable for executive presentations and organization-wide alignment.

• Experience mentoring senior engineers and cultivating technical leaders.

• Experience developing products for enterprise customers with intricate security and compliance needs.

• Knowledge of SOC 2 and ISO 27001 and their architectural implications.

• Understanding of how enterprise security teams assess, procure, and operate tooling.

• Docker considers visa sponsorship on a case-by-case basis, depending on business needs.

🏝️ Benefits

• Remote-first work environment.

• Flexible scheduling options.

• Generous paid time off (PTO).

• Quarterly Whaleness Days.

• End-of-year Whaleness break.

• Home office support.

• Technology stipend equivalent to US$100 net per month.

• Annual learning and development stipend for conferences, courses, certifications, and ongoing education.

• 16 weeks of paid parental leave after six months of employment.

• Equity opportunities for all full-time employees.

• Medical benefits.

• Retirement benefits.

• Paid holidays.

• Docker swag.