Senior Software Engineer, Secure Build

This is a fully remote position, open to applicants in United Kingdom, +1 more country.

📋 Description

• Transform developer, agent, and security challenges into precise requirements, structured technical decisions, and quantifiable results.

• Design, develop, and manage Go services and APIs that power Docker's build and secure-CI infrastructure.

• Create capabilities for isolation, identity, policy, provenance, attestation, and signing for reliable build and test jobs.

• Collaborate with container, OCI, BuildKit, cloud, and isolated-execution technologies to provide secure and reproducible workflows.

• Oversee features from technical design through deployment, observability, incident response, and ongoing maintenance.

• Enhance the reliability and operational efficiency of Docker Build Cloud and Auto Builds.

• Utilize threat modeling to inform practical security trade-offs.

• Design developer experiences, including workflows initiated or utilized by software agents.

• Collaborate with Product, Security, Developer Experience, Registry, and other platform teams.

• Engage in the team's paid on-call rotation and enhance systems based on incidents.

• Convey decisions, risks, and progress in a remote, async-first environment.

⛳️ Requirements

• Over 6 years of software engineering experience with technical leadership in large-scale production systems.

• Bachelor’s degree in Computer Science, Engineering, or a related discipline, or equivalent practical experience.

• Strong backend engineering skills in building and operating distributed production systems.

• Production experience with Go, including writing, testing, reviewing, and debugging maintainable Go services.

• Familiarity with containers and build or CI systems such as OCI, BuildKit, Buildx, GitHub Actions, or similar platforms.

• Experience with cloud-native infrastructure and a major cloud provider.

• Strong operational mindset focused on observability, reliability, incident response, and on-call responsibilities.

• Proven experience in taking a feature or service from an ambiguous problem to production operation and measurable outcomes.

• Understanding of security boundaries, identity, secrets, and software supply-chain risks.

• Product-oriented mindset with a focus on developer workflows, including those utilized by software agents.

• Excellent written and verbal communication skills suitable for a remote, async-first company.

• Beneficial but not mandatory: Kubernetes experience.

• Beneficial but not mandatory: Familiarity with SLSA, in-toto, SBOM, VEX, Sigstore, cosign, provenance, or artifact signing.

• Beneficial but not mandatory: Experience with sandboxing, microVMs, untrusted workload execution, or multi-tenant infrastructure.

• Beneficial but not mandatory: Knowledge of hosted CI runners, remote builders, or developer-platform infrastructure.

• Beneficial but not mandatory: Experience with agentic development workflows or systems employed by software agents.

• Beneficial but not mandatory: Skill in evolving legacy production systems while introducing new capabilities.

• Must have legal authorization to work in the country of application; visa sponsorship is considered on a case-by-case basis based on business needs.

🏝️ Benefits

• Freedom and flexibility to align your work with your life.

• Designated quarterly Whaleness Days along with an end-of-year Whaleness break.

• Home office setup provided.

• 16 weeks of paid parental leave after 6 months of employment.

• Technology stipend equivalent to $100 USD net per month.

• PTO plan that encourages you to take time for activities you enjoy.

• Training stipend for conferences, courses, and classes.

• Equity participation.

• Docker swag available.

• Medical benefits, retirement plans, and holidays vary by country.

• Emphasis on a remote-first culture.