Docker, Inc

Senior Supply Chain Security Engineer

Canada · Senior

Sponsorship not specifiedDetected 70 days ago

Distributed SystemsGitMongoDBDockerKubernetesHelmLinuxGrafanaAgentic AICybersecuritySupply Chain

About the role

Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls.
As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
Docker Hardened Images (DHI) is Docker's catalogue of security-hardened, enterprise-grade container images and Helm charts - built to be minimal, up-to-date, and safe to deploy in regulated and security-conscious environments.

Authoring and maintaining image definition files that track upstream OSS project releases, define build steps, and keep our catalogue current across dozens of images
Writing Go-based integration tests that validate images and charts behave correctly in real Kubernetes environments
This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.
We are committed to building a team that represents a variety of backgrounds, perspectives, and skills.

6+ years of backend engineering experience with production-grade systems
Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
Strong familiarity with the container and Kubernetes ecosystem - you know what cert-manager, kyverno, grafana, and istio are, you've deployed them, and you can read upstream Helm chart source without getting lost
Comfort with YAML as a primary working medium - you think carefully about structure, conventions, and patterns
Familiarity with GitHub-heavy open source workflows - PRs, upstream tracking, monorepo conventions
Experience as a package maintainer (any Linux distribution, Homebrew, etc.)
Familiarity with supply chain tooling (Sigstore, SBOM, SLSA)
Experience in a regulated or security-conscious environment
Familiarity with GitHub-heavy open source workflows
we want you comfortable while you work
Understanding of container security basics - non-root users, UID/GID, image layers, multi-arch builds, supply chain concepts
Some Go ability - enough to read and write test code, not to build distributed systems
A maintainer mindset - you take pride in consistency, catch drift from patterns, and think about how your change affects others downstream
Helm chart authorship or contribution experience
Docker considers visa sponsorship on a case-by-case basis based on business needs.
Freedom & flexibility; fit your work around your life

Home office setup
16 weeks of paid Parental leave (after 6 months of employment)
Technology stipend equivalent to $100 USD net/month
PTO plan that encourages you to take time to do the things you enjoy
Training stipend for conferences, courses and classes
Medical benefits, retirement and holidays vary by country
Equity; we are a growing start-up and want all employees to have a share in the success of the company

Reviewing peers' definitions and chart PRs against established conventions and catching subtle issues before they reach customers
we are a growing start-up and want all employees to have a share in the success of the company
The more inclusive we are, the better our company will be.

Docker considers visa sponsorship on a case-by-case basis based on business needs.

This listing is sourced directly from Docker, Inc's careers page and normalized into a canonical job model.