Docker, Inc

Docker, Inc

Senior Supply Chain Security Engineer (East Coast Preferred)

Canada · Senior · Full-time

Sponsorship not specified$155k-$251kDetected 164 days ago
GitDockerKubernetesHelmLinuxAgentic AICybersecurityComplianceSupply ChainCommunicationMicrosoft Office

Stay score

odds of building a lasting career here

59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

5 transfer filings in the last year, covering 5 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls.
  • This is a supply-chain and open-source maintainer role rather than a conventional backend engineering role.
  • You will work across upstream OSS projects, package and image definitions, Helm charts, Kubernetes, integration tests, vulnerability remediation and the controls that prove content is ready to publish.

Responsibilities

  • Author and maintain definitions for hardened system packages and container images, including build steps, upstream tracking, multi-architecture support and reproducibility controls.
  • Adapt and maintain upstream Helm charts so they work correctly with DHI images under non-root, restricted and production-shaped Kubernetes security constraints.
  • Partner with Product, Security, Support and customer-facing teams to turn demand and incidents into prioritised content and durable improvements.
  • a catalogue of security-hardened system packages, container images and Helm charts designed to be minimal, up to date and safe to use in security-conscious and regulated environments.
  • The work is broad by design:
  • Routine work should begin with a machine-produced change and pass through automated build, test, policy and review controls.
  • As a Senior Supply Chain Security Engineer, you will own substantial content and improvement work from upstream discovery through release and ongoing maintenance.
  • Flexibility that fits your life - We trust you to manage your schedule while delivering great work.
  • We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives.
  • We believe diverse teams build better products, make better decisions, and better serve our global community.

Requirements

  • Strong experience with containers, Linux and Kubernetes in production or production-shaped environments.
  • Experience maintaining software you did not originate, such as Linux packages, container images, open-source integrations, charts or a comparable downstream distribution.
  • Familiarity with GitHub-heavy open-source workflows, including pull requests, review, release tracking and upstream contribution.
  • Comfort using AI-assisted engineering critically while retaining ownership of security assertions, test evidence and release quality.
  • Experience as a maintainer for Alpine, Debian, Fedora, Wolfi, Homebrew or another package ecosystem.
  • Experience with SBOMs, VEX, SLSA, Sigstore, cosign, provenance or artefact signing.
  • Experience with apk, deb, rpm, Go modules, Maven or Gradle, npm, pip, Cargo or other dependency ecosystems.
  • Experience with FIPS, FedRAMP, PCI or other regulated and security-conscious environments.
  • Reduce recurring manual work by moving a class of changes into a proven automated path.
  • Practical experience reading, adapting or maintaining Helm charts and diagnosing how chart templates, values and workload security settings affect deployment behaviour.
  • Strong YAML and configuration-review skills, including care for conventions, consistency and downstream impact across a large catalogue.
  • Working knowledge of container and Kubernetes security, including non-root execution, UID and GID, capabilities, filesystem restrictions, image layers and multi-architecture builds.
  • Practical programming ability in Go or a comparable language, sufficient to write and review integration tests, validators and content automation.
  • Experience tracking upstream releases and reasoning about semver, breaking changes, dependency graphs and reproducible builds.
  • A maintainer mindset: you catch drift, improve patterns for the next contributor and consider the effect of a change across many downstream consumers.
  • A strong operational mindset and clear written and spoken communication suited to a remote, async-first company.

Compensation

  • Compensation & Equity

Benefits

  • Time to recharge - Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
  • Home office support - Set up your workspace for comfort and success.
  • Technology stipend - Equivalent to US$100 net per month to help support your work.
  • Learning & development - Annual stipend for conferences, courses, certifications, and continued learning.
  • Parental leave - 16 weeks of paid parental leave after six months of employment.
  • Equity for all full-time employees - Share in Docker's long-term success as we continue to grow.
  • Comprehensive benefits - Medical, retirement, and paid holidays vary by country.
  • Participate in the team's paid on-call rotation and drive learning from customer escalations, failed builds and content defects.

Company info

  • We are moving DHI content production towards a machine-first factory.
  • customers should be able to select hardened packages and images and, where relevant, deploy them through hardened charts without the pieces drifting apart.

Equal opportunity

  • equal opportunity employer.

Visa & Work Authorization

  • Docker considers visa sponsorship on a case-by-case basis based on business needs.
Apply directly at Docker, Inc →Create a free account for alerts like thisView Docker, Inc immigration profile

This listing is sourced directly from Docker, Inc's careers page and normalized into a canonical job model.