Senior Software Engineer, Containers
Builds new features for Chainguard Images, a hardened container registry, using Go and container/Kubernetes tooling to deliver secure, production-ready software.
- Compensation
- $157K–$184K / yr
- Location
- Canada - Remote; Germany - Remote; United Kingdom - Remote; United States - Remote
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Software engineering
- Posted
Skills
Must have
- 3+ years building and operating software that paying customers use, preferably at a startup or a company in hyper-growth.
- High agency and urgency. You find a way, you do not wait to be unblocked, and you ask for help early when you are stuck.
- Judgment on trade-offs. You can explain why you chose speed here and rigor there, and you can change your mind when the data says to.
- A systems thinker. You reason about how a change moves through the build pipeline, the registry, and the customer's cluster, and you anticipate what breaks next.
- AI-native in how you work. You use agentic coding tools daily and can show what changed in your output because of them.
- Comfortable with ambiguity. You can pick up a half-defined problem, decide what to build, and pivot when priorities shift.
- Strong fundamentals in a systems language (Go preferred), API design, databases and caching, and cloud infrastructure on GCP or AWS.
- Working knowledge of containers, container registries, the OCI image format (Open Container Initiative, the standard for container images and registries), and Kubernetes.
- Low ego. You do what you say and say what you do, and you communicate early when the news is bad.
- Excellent written English and experience working on a distributed, remote-first team.
Nice to have
- Software supply chain security background: SBOMs (software bill of materials), Sigstore signing, or SLSA (Supply-chain Levels for Software Artifacts, a framework for build integrity).
- Familiarity with Chainguard's open-source tools: Wolfi, apko, and melange.
- Terraform or other infrastructure-as-code experience.
- Author of or contributor to open-source projects.
- A non-traditional path into engineering. We value people who learned by building.
Full description
Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk.
Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake.
Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.
Who we are
Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk.
Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake.
Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. Include the term "DiscoTech" on the resume
The role, in a nutshell
Chainguard Containers is our core product, and this team builds it. As a Senior Software Engineer in Container Product Engineering you will design and ship the features, services, and build systems behind Chainguard Containers, working in a small sub-team of two to four engineers that owns one project end to end.
Chainguard is growing explosively. Every line of code is now written with AI in the loop, which means the foundation it runs on has to be secure by default. You will build that foundation: the hardened container images, the registry that serves them, and the tooling that lets engineers and AI agents adopt them.
This is a product role. You will work directly with Product Managers and customers, make the trade-off calls on the features you own, and ship them.
What the team owns
- Product features for Chainguard Containers. Letting customers push their own images to our registry, Custom Assembly (customers compose images from our hardened packages), Helm charts, notifications, and compliance views such as STIG dashboards (STIG is the US government's hardening standard).
- The image build pipeline. The systems that turn packages from Wolfi, our Linux distribution, into signed and attested container images at scale, including moving image builds onto our own runner infrastructure.
- Registry performance and distribution. Work such as lazy loading, so a container starts before its whole image has downloaded, and image signing with Sigstore.