Docker, Inc

Docker, Inc

Principal Software Engineer, Docker Hardened Images

Canada · Principal

Sponsorship not specifiedDetected 28 days ago
Distributed SystemsCode ReviewDockerKubernetesHelmCI/CDLinuxGrafanaAgentic AIComplianceSupply ChainLeadership

About the role

  • Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls.
  • As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
  • Docker Hardened Images (DHI) is Docker's catalogue of security-hardened, enterprise-grade container images and Helm charts, built to be minimal, up-to-date, and safe to deploy in regulated and security-conscious environments.

Responsibilities

  • Own the architecture for DHI as a platform, making high-leverage decisions that define how images and Helm charts are authored, secured, distributed, and evolved across the entire catalogue and across Docker's broader product surface.
  • Define and drive multi-quarter technical roadmaps for the container hardening domain, balancing upstream velocity, supply chain security posture, customer compliance requirements, and long-term catalogue scalability.
  • Build alignment across teams and executives on technical strategy, tradeoffs, and sequencing, including product, security, infrastructure, and customer-facing functions.
  • Set conventions and standards at scale, defining the patterns others build within for image definition, Helm chart adaptation, hardening strategy, and supply chain tooling (Sigstore, SBOM, SLSA), and evolving those standards as the ecosystem changes.
  • Drive the hardest, most ambiguous packaging problems where the right answer requires reasoning across upstream dynamics, security tradeoffs, multi-arch constraints, and customer impact simultaneously.
  • Mentor and raise the technical ceiling for staff and senior engineers across the org, through review, design, and well-chosen architectural decisions that create durable leverage.
  • respond to incidents, debug production issues, and drive systemic improvements in reliability.
  • Take part in the paid on-call rotation; respond to incidents, debug production issues, and drive systemic improvements in reliability.
  • We are committed to building a team that represents a variety of backgrounds, perspectives, and skills.
  • From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.

Requirements

  • 10+ years of backend engineering experience, including extensive work on production-grade, distributed systems at scale.
  • Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
  • Ability to set multi-quarter technical roadmaps and align stakeholders (engineering, product, and executives) on strategy and tradeoffs.
  • Experience navigating upstream OSS communities as a decision-maker, representing a downstream organization's requirements and shaping upstream direction on security-relevant issues.
  • Experience as a package maintainer at a Linux distribution, Homebrew, or comparable ecosystem.
  • Experience in regulated environments (FedRAMP, FIPS, PCI) with direct exposure to compliance requirements shaping engineering decisions.
  • Raise the technical ceiling for the engineers around you, measurably improving review quality, architectural consistency, and the team's ability to operate independently at a higher level.
  • Deep expertise in the container and Kubernetes ecosystem: you have strong, grounded opinions about cert-manager, kyverno, grafana, istio, and similar projects, and you can reason about tradeoffs at the ecosystem level, not just the image level.
  • Mastery of container supply chain security concepts (provenance, attestation, SBOM, signing, SLSA) and experience driving posture decisions across an organization rather than implementing them on a single project.
  • Strong software engineering fundamentals: code review, testing, source control, CI/CD, and Go sufficient to shape infrastructure and harness design.
  • Track record of technical influence without authority across multiple teams or organizations, raising quality through design docs, standards, review, and mentorship.
  • Comfort working across remote, distributed teams and communicating complex technical strategy clearly to both technical and non-technical audiences.
  • Bonus but not required
  • Hands-on experience implementing or operationalizing supply chain tooling (Sigstore, SBOM, SLSA) at org scale.
  • Prior Principal or Distinguished IC experience on a platform, security, or developer-tools team.

Compensation

  • Technology stipend equivalent to $100 USD net/month

Benefits

  • Home office setup
  • 16 weeks of paid Parental leave (after 6 months of employment)
  • Technology stipend equivalent to $100 USD net/month
  • PTO plan that encourages you to take time to do the things you enjoy
  • Training stipend for conferences, courses and classes
  • Medical benefits, retirement and holidays vary by country
  • Equity; we are a growing start-up and want all employees to have a share in the success of the company
  • This is a pure individual contributor role; influence comes through technical vision, design, and the ability to move organizations.

Company info

  • we are a growing start-up and want all employees to have a share in the success of the company
  • The more inclusive we are, the better our company will be.
  • We're looking for a Principal Software Engineer to set the long-term technical direction for this catalogue and shape how the broader container security ecosystem evolves inside and beyond Docker.
  • We are a globally distributed, remote-first team building the tools that define how software gets built and delivered.

Equal opportunity

  • equal opportunity.
Apply directly at Docker, Inc →Create a free account for alerts like thisView Docker, Inc immigration profile

This listing is sourced directly from Docker, Inc's careers page and normalized into a canonical job model.