Remote Senior Principal Engineer: Secure Build Chain

Docker, Inc; Seattle (WA); Remote; USD 219,000 - 352,000; Full time

Benefits offered by this job

Remote-first by design

Office in Seattle & Paris

Generous PTO

Equity

Job summary

Docker, Inc. is seeking a Senior Principal Engineer to shape the secure software delivery strategy across Docker Desktop, Hub, Hardened Images, and related platforms.

You will own multi-year architectural decisions, focusing on tamper-resistant delivery and trusted by default security. This role emphasizes leadership without direct people management, partnering with executives to align technical roadmaps with business goals.

Qualifications

• 12+ years of software engineering experience focusing on build security or SDLC tooling.
• Deep understanding of build process threat models and mitigations.
• Experience with artifact signing, attestations, SBOMs, dependency security, and vulnerability intelligence.
• Knowledge of SaaS security, enterprise billing, and secure-by-default architectures.

Responsibilities

• Define multi-year technical vision for build security and supply chain across Docker products.
• Architect provenance, attestation, and SBOM infrastructure for verifiable software delivery.
• Integrate security capabilities across the full software development lifecycle and enterprise workflows.
• Drive platform-wide security standards, policies, and enforcement with fast, unobtrusive controls.
• Mentor senior engineers and represent Docker externally in security communities.

Skills

Build security

Software supply chain

SDLC tooling

Threat modeling

API design

Distributed systems

Cloud platforms

Bachelor's degree in CS

Education

Bachelor's degree in CS, Engineering, or equivalent

Tools

AWS

GCP

Azure

Kubernetes

Job description

Docker, Inc. is seeking a Senior Principal Engineer to shape the secure software delivery strategy across Docker Desktop, Hub, Hardened Images, and related platforms.

You will own multi-year architectural decisions, focusing on tamper-resistant delivery and trusted by default security. This role emphasizes leadership without direct people management, partnering with executives to align technical roadmaps with business goals.