Senior Supply Chain Security Engineer — Remote & Equity

docker; Canada; Remote; CAD 211,000 - 342,000; Full time

Benefits offered by this job

Remote-first by design

Time to recharge

Equity for all full-time employees

Learning & development stipend

Parental leave - 16 weeks

Job summary

Docker in Canada seeks a Senior Supply Chain Security Engineer to own hardened content from discovery through release. You’ll work across packages, images and Helm charts, shape the DHI Factory, and drive automation to reduce manual effort while improving security and release quality.

You will collaborate with Product, Security, and Support to translate incidents into durable improvements and partner with upstream maintainers to influence deployment requirements.

Qualifications

• Strong experience with containers, Linux and Kubernetes in production-like environments.
• Practical experience reading, adapting or maintaining Helm charts and diagnosing deployment security.
• Experience maintaining software you did not originate, such as Linux packages, container images, charts or downstream distributions.
• Strong YAML and configuration-review skills with focus on conventions and downstream impact.
• Working knowledge of container and Kubernetes security, including non-root execution and multi-arch builds.
• Go programming ability to write and review integration tests and content automation.
• Experience tracking upstream releases and semver, breaking changes and dependency graphs.

Responsibilities

• Author and maintain hardened system package and container image definitions, including builds and upstream tracking.
• Adapt and maintain upstream Helm charts to work with DHI images under Kubernetes security constraints.
• Track upstream releases, semver patterns and dependencies; decide on updates, patches or deviations.
• Triage and remediate vulnerabilities across OS packages, images and charts, including no-upstream-fix cases.
• Write and improve Go-based integration tests, validators and policy checks for content correctness.
• Review PRs against DHI standards, differentiate blocking issues from advice, guide contributors.
• Automate repeated work to improve the DHI Factory and create reusable patterns.
• Collaborate with Product, Security and Support to turn incidents into durable improvements.
• Engage with upstream maintainers on deployment requirements and improvements.
• Participate in paid on-call rotation and share lessons from outages and defects.
• Communicate decisions and progress clearly in a remote async-first environment.

Skills

Containers

Kubernetes

Helm charts

Go programming

Security

Upstream releases

GitHub workflows

Tools

GitHub

Job description

Docker in Canada seeks a Senior Supply Chain Security Engineer to own hardened content from discovery through release. You’ll work across packages, images and Helm charts, shape the DHI Factory, and drive automation to reduce manual effort while improving security and release quality.

You will collaborate with Product, Security, and Support to translate incidents into durable improvements and partner with upstream maintainers to influence deployment requirements.