Principal Software Engineer (Libraries Platform)
Chainguardabout 2 hours ago
Responsibilities
- Define the architecture and technical strategy for scaling the Libraries Platform across multiple language ecosystems, including .NET, Go, and Rust.
- Redesign CVE remediation workflows to automate detection, patching, rebuilding, SBOM and provenance regeneration, policy verification, and release.
- Set direction for agentic and AI-driven security patch generation with validation, regression testing, provenance, and human checkpoints.
- Guide platform-wide architecture across package indexing, build and packaging pipelines, registry mirrors, and orchestration tooling.
- Make build-versus-buy and sequencing decisions for onboarding new ecosystem toolchains, packaging systems, and dependency models.
- Partner with Ecosystem, Platform, Delivery, Sustaining, and Security teams to align platform strategy and roadmap.
- Mentor Staff and Senior Engineers, lead major design reviews, and produce documentation and RFCs.
- Define platform SLOs and lead incident response and postmortems for consequential failures.
- Investigate difficult toolchain, compiler, and dependency-resolution issues, including NuGet, Go modules, and Cargo.
Requirements
- 12+ years designing, building, and operating infrastructure for language ecosystems or developer platforms, with demonstrated Principal-level scope across multiple teams.
- Direct experience standing up or significantly extending platform support for a language ecosystem, ideally .NET with NuGet, Go modules, or Rust Cargo.
- Strong proficiency in Go.
- Track record of automating manual remediation workflows while identifying appropriate human checkpoints.
- Deep experience with CI/CD, agentic pipelines, cloud-native infrastructure, and infrastructure as code, including Docker/OCI, Kubernetes, Terraform, and pipeline tooling such as GitHub Actions, Argo, or Tekton.
- Ability to diagnose and resolve toolchain, compiler, and packaging failures across multiple ecosystems and turn fixes into systemic prevention.
- Excellent written communication in a remote, distributed environment.
- Preferred experience with software supply-chain security, including SLSA, SBOMs, sigstore, provenance, attestations, and secure-by-default packaging.
- Preferred experience with Linux distributions, packaging, and reproducible build systems such as Alpine, Wolfi, Debian, Bazel, CMake, or Ninja.
- Preferred familiarity with AI/ML packaging and infrastructure using PyTorch or TensorFlow in cloud and Kubernetes environments.
- Applicants whose experience does not fulfill every requirement are encouraged to apply.
Benefits
- Remote-first work arrangement with team meetup opportunities and bi-annual destination summits.
- Monthly stipend for coworking spaces, phone, and internet costs.
- Stock options upon hire and promotion, with participation in secondary offerings and 10 years to exercise options.
- 100% covered health, vision, and dental insurance premiums for employees and dependents.
- Flexible time off.
- Paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents.
Tech Stack
Argo CDBazelCMakeDockerGitHub ActionsGoJavaJavaScriptKubernetesLinux.NETPythonPyTorchRustTektonTensorFlowTerraform
About Chainguard
Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Its customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. For more information, visit: https://www.chainguard.dev/