Principal Software Engineer (Libraries Platform)
Chainguardabout 2 hours ago
Responsibilities
- Define the architecture and technical strategy for scaling the Libraries Platform across multiple language ecosystems.
- Generalize package indexing, build orchestration, and metadata services while keeping ecosystem-specific extensions clean and maintainable.
- Redesign CVE remediation workflows to automate detection, patching, rebuilding, verification, SBOM and provenance regeneration, policy verification, and rollout.
- Set the direction for agentic and AI-driven security patch generation with automated validation, regression testing, provenance controls, and human checkpoints.
- Set platform-wide direction across package indexing, build and packaging pipelines, registry mirrors, and orchestration tooling.
- Make build-versus-buy and sequencing decisions for bringing .NET, Go, and Rust ecosystems online.
- Partner with Ecosystem, Platform, Delivery, Sustaining, and Security teams on platform strategy and roadmap alignment.
- Mentor Staff and Senior Engineers, lead design reviews, and produce technical documentation and RFCs.
- Define SLOs and lead incident response and postmortems for major platform failures.
- Investigate toolchain, compiler, and dependency-resolution problems involving systems such as NuGet, Go modules, and Cargo.
Requirements
- 12+ years designing, building, and operating infrastructure for language ecosystems or developer platforms, with Principal-level cross-team scope.
- Direct experience onboarding or significantly extending platform support for a language ecosystem, ideally .NET/NuGet, Go/modules, or Rust/Cargo.
- Strong proficiency in Go.
- Experience automating manual remediation workflows while identifying appropriate human checkpoints.
- Deep experience with CI/CD, agentic pipelines, cloud-native infrastructure, infrastructure as code, containers, Kubernetes, Terraform, and pipeline tooling such as GitHub Actions, Argo, or Tekton.
- Demonstrated ability to diagnose and resolve toolchain, compiler, and packaging failures across multiple ecosystems.
- Excellent written communication in a remote, distributed environment.
- Preferred experience with software supply chain security, including SLSA, SBOMs, sigstore, provenance, attestations, and secure-by-default packaging.
- Preferred experience with Linux distributions, packaging, and reproducible build systems, including Alpine, Wolfi, Debian, Bazel, CMake, or Ninja.
- Preferred familiarity with AI/ML packaging and infrastructure using PyTorch and TensorFlow in cloud or Kubernetes environments.
Benefits
- Remote-first work with team meetup opportunities, bi-annual destination summits, and a monthly coworking, phone, and internet stipend.
- Stock options upon hire and promotion, participation in secondary offerings, and a 10-year exercise window.
- 100% covered health, vision, and dental insurance premiums for employees and dependents.
- Flexible time off.
- Paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents.
- The role is a full-time remote position.
Tech Stack
Argo CDBazelCMakeDockerGitHub ActionsGoJavaJavaScriptKubernetes.NETPythonPyTorchRustTektonTensorFlowTerraform
About Chainguard
Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Its customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. For more information, visit: https://www.chainguard.dev/