Staff Software Engineer, Chainguard Harness
Chainguard5 hours ago
Base Salary
$205k - $231k/yr
Responsibilities
- Own major parts of the system end to end, from design through implementation, rollout, and operation.
- Protect customer code through least-privilege access, comprehensive auditing, threat modeling, and security reviews.
- Make Harness reliable, observable, scalable, cost-effective, and production-grade.
- Work directly with customers, Product, and the field team to translate feedback into the product roadmap.
- Raise the engineering bar through design documents, code review, mentoring, and effective AI tooling practices.
Requirements
- 10+ years of software development experience.
- Track record of building and operating production services where security and data confidentiality are hard requirements.
- Experience designing systems that handle confidential customer data end to end.
- Experience shipping software into air-gapped, disconnected, or highly restricted environments.
- Deep experience with GCP and/or AWS cloud infrastructure, including IAM, KMS, networking, and Terraform.
- Hands-on experience with virtualization and workload isolation such as KVM, QEMU, Firecracker, Cloud Hypervisor, gVisor, nested virtualization, or bare-metal hosts.
- Working knowledge of applied cryptography, including envelope encryption, key management and rotation, HSM/KMS-backed keys, and signing.
- Proficiency with Go.
- Experience with AI tooling; experience building agentic systems is a plus.
- Strong communication skills, English proficiency, autonomy, initiative, and willingness to ask for help early.
- Preferred experience in offensive security, vulnerability research, penetration testing, or application security.
- Preferred experience running arbitrary third-party code across many languages and build systems.
- Preferred familiarity with CVE and OSV formats, vulnerability triage and deduplication, and coordinated disclosure.
- Preferred experience distributing self-hosted software using Kubernetes, Helm, signed artifacts, SBOMs, and supply-chain provenance.
- Preferred experience with GitHub or GitLab app integrations and evaluating LLM output quality and model cost at scale.
Benefits
- Remote-first work with team meetups, bi-annual destination summits, and a monthly coworking, phone, and internet stipend.
- Stock options upon hire and promotion, participation in secondary offerings, and 10 years to exercise options.
- 100% company-paid health, vision, and dental insurance premiums for employees and dependents.
- Flexible time off.
- Paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents, usable at once or throughout the child's first year.
Tech Stack
Categories
About Chainguard
Chainguard provides secure, hardened container images and production-ready builds of open source software for enterprises and developers, typically sold via subscriptions and support. Its offerings include Chainguard Images and tools for software supply chain security; the company also maintains Wolfi, a container-focused Linux distribution. Founded in 2021 and headquartered in Kirkland, WA, Chainguard’s customers include organizations such as OpenAI, Snowflake, and Hewlett Packard Enterprise.