Software Engineer (Libraries Platform)
Chainguard2 months ago
Base Salary
$121k - $142k/yr
Responsibilities
- Lead the design and implementation of services, pipelines, and package indexes for secure, reproducible library build, test, and distribution workflows.
- Automate artifact creation, updates, vulnerability scanning, remediation, verification, SBOM and provenance generation, and policy enforcement.
- Develop and validate AI-assisted security patch generation with testing and verification.
- Build and operate package indexes, registry mirrors, metadata services, and orchestration tooling.
- Develop internal developer tools and Go-based CLIs integrated with build systems and CI/CD across multiple ecosystems.
- Drive platform reliability, scalability, observability, SLOs, monitoring, alerting, incident response, and post-incident improvements.
- Resolve complex production issues involving toolchains, compilers, packaging, CI/CD, and package indexes.
- Partner with ecosystem, platform, delivery, sustaining, and security teams, and mentor engineers through design reviews, documentation, and debugging.
Requirements
- At least 5 years of experience designing, building, and operating infrastructure for language ecosystems or developer platforms.
- Strong proficiency in Go or readiness to ramp up quickly.
- Experience owning developer tooling and automation such as plugins, CLIs, code generators, or custom pipelines.
- Experience with CI/CD, cloud-native infrastructure, infrastructure as code, containers, Kubernetes, public cloud, and tools such as Terraform, GitHub Actions, Argo, or Tekton.
- Ability to debug and resolve complex toolchain, compiler, packaging, and infrastructure failures in production.
- Experience with reliability, observability, performance tuning, SRE, platform engineering, or DevOps responsibilities.
- Strong communication and collaboration skills in a remote, distributed environment.
- Nice to have: open-source contributions in ecosystem tooling, libraries, or packaging.
- Nice to have: software supply chain security experience with SLSA, SBOMs, sigstore, provenance, attestations, or secure-by-default packaging.
- Nice to have: experience with Linux distributions, packaging, and reproducible build systems such as Alpine, Wolfi, Debian, Bazel, CMake, or Ninja.
Benefits
- Remote-first work with team meetups, bi-annual destination summits, and a monthly coworking, phone, and internet stipend.
- Stock options upon hire and promotion, participation in secondary offerings, and a 10-year exercise window.
- 100% covered health, vision, and dental insurance premiums for employees and dependents.
- Flexible time off.
- Paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents.
Tech Stack
Argo CDAWSAzureBazelCMakeDockerGitHub ActionsGoGoogle Cloud PlatformJavaJavaScriptKubernetesLinuxPythonTektonTerraform
About Chainguard
Chainguard provides secure, hardened container images and production-ready builds of open source software for enterprises and developers, typically sold via subscriptions and support. Its offerings include Chainguard Images and tools for software supply chain security; the company also maintains Wolfi, a container-focused Linux distribution. Founded in 2021 and headquartered in Kirkland, WA, Chainguard’s customers include organizations such as OpenAI, Snowflake, and Hewlett Packard Enterprise.