Senior Software Engineer, Secure Build

Docker is a globally distributed, remote-first company building developer tools for building, sharing, and running applications. The Senior Software Engineer will develop and operate secure build and CI infrastructure, owning substantial work from discovery and design through production while improving reliability, security, and developer experience.

Responsibilities:

• Turn developer, agent and security problems into clear requirements, staged technical decisions and measurable outcomes
• Design, build and operate Go services and APIs that power Docker's build and secure-CI infrastructure
• Develop isolation, identity, policy, provenance, attestation and signing capabilities for trusted build and test jobs
• Work with container, OCI, BuildKit, cloud and isolated-execution technologies to deliver secure and reproducible workflows
• Own features from technical design through rollout, observability, incident response and ongoing maintenance
• Keep Docker Build Cloud and Auto Builds reliable, make targeted improvements that reduce operational load, and help their capabilities evolve towards the wider Secure Build direction
• Make practical security trade-offs and use threat modelling to guide designs without blocking delivery
• Design for a clear developer experience, including workflows initiated or consumed by software agents
• Partner with Product, Security, Developer Experience, Registry and other platform teams on end-to-end customer workflows
• Participate in the team's paid on-call rotation and drive improvements from incidents and recurring operational work
• Communicate decisions, risks and progress clearly in a remote, async-first environment

Requirements:

• 6+ years of software engineering experience, with demonstrated technical leadership on production systems at scale
• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
• Strong backend engineering experience building and operating distributed systems in production
• Production experience with Go and the ability to write, test, review and debug maintainable Go services
• Experience with containers and build or CI systems, such as OCI, BuildKit, Buildx, GitHub Actions or comparable platforms
• Experience with cloud-native infrastructure and a major cloud platform
• A strong operational mindset covering observability, reliability, incident response and on-call ownership
• Evidence of taking a feature or service from an ambiguous problem through production operation and measurable results
• Working knowledge of security boundaries, identity, secrets and common software supply-chain risks
• A strong product mindset and care for developer workflows, including experiences used by software agents
• Clear written and spoken communication suited to a remote, async-first company
• Experience with Kubernetes
• Experience with SLSA, in-toto, SBOM, VEX, Sigstore, cosign, provenance or artefact signing
• Experience with sandboxing, microVMs, untrusted workload execution or multi-tenant infrastructure
• Experience building hosted CI runners, remote builders or developer-platform infrastructure
• Experience with agentic development workflows or building systems used programmatically by software agents
• Experience evolving a legacy production system while delivering new capabilities