Software Engineer (Libraries Platform)
Chainguard2 months ago
Remote, United KingdomSenior
Responsibilities
- Lead the design and implementation of services, pipelines, and package indexes for secure, reproducible library build, test, and distribution workflows.
- Automate artifact creation, updates, verification, vulnerability scanning, remediation, SBOM and provenance generation, and policy enforcement.
- Develop and validate novel security-fix automation, including AI-assisted patching, with testing and verification.
- Build and operate package indexes, registry mirrors, metadata services, and orchestration tooling for external customers and internal ecosystem teams.
- Develop Go-based internal developer tools and CLIs and integrate them with build systems and CI/CD across multiple ecosystems.
- Drive platform reliability, scalability, observability, SLOs, monitoring, alerting, incident response, and post-incident improvements.
- Debug production toolchain, compiler, dependency, packaging, CI/CD, and registry or package-index failures through lasting root-cause fixes.
- Partner with Java, JavaScript, Python/AI/ML, Platform, Delivery, Sustaining, and Security teams.
- Mentor and unblock engineers through design reviews, documentation, and hands-on debugging.
Requirements
- 5+ years designing, building, and operating infrastructure for language ecosystems or developer platforms.
- Strong proficiency in Go or readiness to ramp quickly.
- Experience owning developer tooling and automation such as plugins, CLIs, code generators, or custom pipelines.
- Strong background in CI/CD, cloud-native infrastructure, infrastructure as code, containers, Kubernetes, public cloud, and tools such as Terraform and GitHub Actions, Argo, or Tekton.
- Ability to debug and resolve complex toolchain, compiler, packaging, and infrastructure failures in production.
- Comfort with SRE, platform, and DevOps responsibilities including reliability, observability, and performance tuning.
- Excellent communication and collaboration in a remote, distributed environment.
- Ability to set technical direction, own critical outcomes, and work effectively in an early, high-impact area.
- Open-source contributions in ecosystem tooling, libraries, packaging, or related infrastructure are preferred.
- Experience with software supply-chain security, including SLSA, SBOMs, sigstore, provenance, attestations, or secure-by-default packaging, is preferred.
- Background with Linux distributions, packaging, and reproducible build systems such as Alpine, Wolfi, Debian, Bazel, CMake, or Ninja is preferred.
- Prior SRE, platform engineering, or DevOps experience owning infrastructure for developer productivity, CI/CD, or large language-ecosystem codebases is preferred.
Benefits
- Remote-first work with team meetups and bi-annual destination summits
- Monthly stipend for coworking spaces, phone, and internet costs
- Stock options upon hire and promotion, with participation in secondary offerings and a 10-year exercise window
- 100% covered health, vision, and dental insurance premiums for employees and dependents
- Flexible time off
- 18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents
Tech Stack
About Chainguard
Chainguard provides secure, hardened container images and production-ready builds of open source software for enterprises and developers, typically sold via subscriptions and support. Its offerings include Chainguard Images and tools for software supply chain security; the company also maintains Wolfi, a container-focused Linux distribution. Founded in 2021 and headquartered in Kirkland, WA, Chainguard’s customers include organizations such as OpenAI, Snowflake, and Hewlett Packard Enterprise.