Skip to content
ChainguardChainguard

Software Engineer

Senior Software Engineer building the platform that powers secure, reproducible builds and distribution of open-source libraries across Java, JavaScript, Python/AI/ML ecosystems at Chainguard. Lead services, automation, pipelines, and developer tooling with a focus on supply-chain security, CVE remediation, and AI-assisted patching.

About the job

What you’ll do

  • Lead the design and implementation of core components of the Libraries Platform including the services, pipelines, and package index that power secure, reproducible build, test, and distribution workflows for libraries across multiple ecosystems (Java, JavaScript, Python/AI/ML).
  • Design and maintain automation for artifact creation, updates, and verification, including vulnerability scanning, remediation workflows, SBOM and provenance generation, and policy enforcement across our library catalog.
  • Build toward novel patch generation. Develop and validate automation that generates security fixes — including AI-assisted patching — rather than only applying upstream patches, with the testing and verification needed to trust the result.
  • Build and operate shared platform services such as package indexes, registry mirrors, metadata services, and orchestration tooling that serve both external customers and internal ecosystem teams.
  • Develop internal developer tools and CLIs (often in Go) that improve how we build, test, and ship libraries at scale, including integration with build systems and CI/CD for multiple ecosystems.
  • Drive reliability, scalability, and observability for the Libraries platform: define SLOs, build monitoring and alerting, and lead incident response and post‑incident improvements.
  • Solve complex dependency and build issues in production environments, from toolchain and compiler problems to CI/CD flakiness and registry/package index edge cases.
  • Partner closely with ecosystem teams (Java, JavaScript, Python/AI/ML), Platform, Delivery, Sustaining, and Security to ensure the platform meets reliability, security, and product requirements.
  • Mentor and unblock other engineers through design reviews, documentation, and hands‑on debugging, helping to “code culture” into how we build and run our libraries platform.

What we’re looking for

  • 5+ years designing, building, and operating infrastructure for language ecosystems or developer platforms, such as build systems, package registries, or CI/CD for widely used libraries or services.
  • Strong proficiency in Go (Golang) or strong readiness to ramp quickly.
  • Proven track record building and owning developer tooling and automation (plugins, CLIs, code generators, or custom pipelines) that improve how engineers build and ship software at scale.
  • Strong background in CI/CD, cloud‑native infrastructure, and IaC: containers (Docker/OCI, Kubernetes), public cloud (GCP, AWS, Azure), and tools like Terraform and GitHub Actions/Argo/Tekton (or equivalents).
  • Demonstrated ability to debug and resolve complex toolchain, compiler, packaging, and infrastructure failures in production, and to drive those issues to root cause and lasting fixes.
  • Comfortable working across SRE / platform / DevOps style responsibilities, including reliability, observability, and performance tuning for critical services and pipelines.
  • Excellent communication in a remote, distributed environment, with a bias toward documentation, clarity, and collaboration across product, infra, and security teams.
  • An ownership mindset: you set technical direction, own critical outcomes, and are comfortable in an early, high‑impact area where engineers help shape both the roadmap and the culture.

Nice to have

  • Open source contributions in ecosystem tooling, libraries, or packaging (Java, JavaScript, Python/ML, or related infra).
  • Experience with software supply chain security: SLSA, SBOMs, sigstore, provenance, attestations, or secure‑by‑default packaging practices.
  • Background with Linux distributions, packaging, and reproducible build systems (e.g., Alpine, Wolfi, Debian Bazel, CMake, Ninja).
  • Prior experience in SRE, platform engineering, or DevOps roles where you owned infrastructure for developer productivity, CI/CD, or large language‑ecosystem codebases.

Compensation

Base Salary Range $121,000—$142,000 USD

Benefits

  • Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
  • Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options.
  • 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents.
  • ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
  • 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.

Skills

Go, Kubernetes, Docker, Terraform, AWS, GCP, Azure, GitHub Actions, CI/CD, Sbom, Slsa, Sigstore

Prove AI

Prove AI

United States

Site Reliability Engineer
$120k+/yrRemote5+ YOEDevOps / SRE

The Site Reliability Engineer designs and operates highly available AWS infrastructure, observability systems, Kubernetes platforms, and automation while participating in incident response. Senior candidates require at least five years of relevant experience; the role also has an IC3 track requiring three years.

Kong

Kong

United States

Site Reliability Engineer 2
$123k+/yrRemoteDevOps / SRE

Operate and scale Kong’s multi-region SaaS platform across major cloud providers, Kubernetes, and distributed data systems. The role requires strong infrastructure automation, observability, CI/CD, and production reliability experience, with participation in a global on-call rotation.

PagerDuty

PagerDuty

Atlanta, GA

Site Reliability Engineer II
$113k+/yrHybrid3+ YOEDevOps / SRE

Operates and evolves foundational networking, compute, Kubernetes, and ingress infrastructure for PagerDuty’s real-time platform. Requires 3+ years in SRE, DevOps, or platform engineering, with Linux production operations, cloud infrastructure, programming, and Infrastructure as Code experience.

Mercor

Mercor

San Francisco, CA
Infrastructure Engineer
$130k+/yrOn-siteDevOps / SRE

Builds and scales highly available infrastructure using AWS, Terraform, and Docker to support rapid growth and AI workloads. Collaborates with product and research teams on architectures, CI/CD, monitoring, and performance optimization.

Mercor

Mercor

San Francisco, CA

Member of Technical Staff, Mercor Enterprise Platform
$130k+/yrOn-site5+ YOEDevOps / SRE

Build and operate Mercor’s enterprise agent platform across security, routing, isolated execution, orchestration, deployment, and production scalability. The role requires 5+ years building high-scale platforms, architectural ownership, and experience with core infrastructure primitives across multiple clouds.