Principal Software Engineer (Libraries Platform)
Chainguardabout 2 hours ago
Base Salary
$229k - $258k/yr
Responsibilities
- Own the technical strategy for scaling the Libraries Platform across multiple ecosystems and define extensible, ecosystem-agnostic architecture.
- Lead end-to-end CVE remediation automation covering detection, patching, rebuild triggering, SBOM and provenance regeneration, policy verification, and release.
- Set direction for agentic and AI-driven security patch generation with automated validation, regression testing, provenance controls, and human checkpoints.
- Direct platform architecture across package indexing, build and packaging pipelines, registry mirrors, and orchestration tooling.
- Make build-versus-buy and sequencing decisions for bringing .NET, Go, and Rust onto the platform.
- Partner with Ecosystem, Platform, Delivery, Sustaining, and Security teams on roadmap and risk alignment.
- Mentor Staff and Senior Engineers, lead design reviews, and produce documentation and RFCs.
- Define SLOs and lead incident response and postmortems for major platform failures.
- Investigate toolchain, compiler, packaging, and dependency-resolution issues involving NuGet, Go modules, and Cargo.
Requirements
- 12+ years designing, building, and operating infrastructure for language ecosystems or developer platforms, with Principal-level scope across multiple teams.
- Direct experience adding or significantly extending support for a language ecosystem, ideally including .NET/NuGet, Go/modules, or Rust/Cargo.
- Strong proficiency in Go.
- Experience automating manual remediation workflows while determining where automation and human checkpoints are appropriate.
- Deep experience with CI/CD, agentic pipelines, cloud-native infrastructure, IaC, containers, Kubernetes, Terraform, and pipeline tooling such as GitHub Actions, Argo, or Tekton.
- Ability to diagnose and resolve toolchain, compiler, and packaging failures across multiple ecosystems and turn one-off fixes into systemic prevention.
- Excellent written communication in a remote, distributed environment.
- Nice to have: software supply-chain security experience with SLSA, SBOMs, sigstore, provenance, attestations, and secure-by-default packaging.
- Nice to have: experience with Linux distributions, packaging, and reproducible build systems including Alpine, Wolfi, Debian, Bazel, CMake, or Ninja.
- Nice to have: familiarity with AI/ML packaging and infrastructure using PyTorch or TensorFlow in cloud and Kubernetes environments.
Benefits
- Flexible remote-first work with team meetups, bi-annual destination summits, and a monthly coworking, phone, and internet stipend.
- Stock options upon hire and promotion, with participation in secondary offerings and a 10-year exercise period.
- 100% covered health, vision, and dental insurance premiums for employees and dependents.
- Unlimited flexible time off.
- Paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents.
- Base salary range of $229,000-$258,000 USD.
Tech Stack
Argo CDBazelCMakeDockerGitHub ActionsGoJavaJavaScriptKubernetes.NETPythonPyTorchRustTektonTensorFlowTerraform
About Chainguard
Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Its customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. For more information, visit: https://www.chainguard.dev/