Staff Software Engineer, Sandbox Secrets

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Architect, develop, and spearhead enhancements to secrets management and credential injection frameworks.

• Analyze and resolve security, correctness, performance, and stability challenges across cloud platforms, macOS, Windows, and Linux.

• Collaborate with colleagues, Product, and related teams to advance the architecture as requirements evolve.

• Guide engineers and set high standards during design and code reviews.

• Engage with the open-source and agentic development community surrounding sandboxing, MCP, and related ecosystems.

• Participate in on-call rotations and address critical stability concerns affecting users.

• Clearly document work and share knowledge with the team.

⛳️ Requirements

• Over 8 years of software engineering experience, showcasing technical leadership on scalable production systems.

• Bachelor’s degree in Computer Science, Engineering, or a related discipline, or equivalent practical experience.

• Experience in developing developer tools, desktop applications, or runtime infrastructure directly utilized by developers.

• Knowledge of the agentic software development ecosystem, including the functionality of coding agents and interactions with tools like Claude Code, Codex, or similar agents.

• Ability to reason about isolation and security boundaries.

• Experience in driving architecture and technical strategy across multiple teams or engineers.

• Excellent written and verbal communication skills.

• Comfortable working independently in a remote-first environment.

• Preferred: Strong expertise in Go, Rust, and/or Java.

• Preferred: Experience with cryptographic key management systems and techniques, including key wrapping, HSMs, and cloud KMSes.

• Preferred: Familiarity with best practices for safeguarding credentials and secret materials both at-rest and in transit.

• Preferred: Understanding of networking, TLS, and HTTP.

• Preferred: Knowledge of one or more OS-specific credential management features.

• Docker considers visa sponsorship on a case-by-case basis based on business needs.

🏝️ Benefits

• Remote-first by design – Work from home, with offices in Seattle and Paris for connection and collaboration.

• Flexibility that accommodates your life – Manage your schedule while delivering exceptional work.

• Generous PTO.

• Designated quarterly Whaleness Days.

• Designated end-of-year Whaleness break.

• Home office support.

• Technology stipend equivalent to US$100 net per month.

• Annual stipend for conferences, courses, certifications, and ongoing learning.

• 16 weeks of paid parental leave after six months of employment.

• Equity for all full-time employees.

• Medical, retirement, and paid holidays vary by country.

• Docker swag.