Senior Principal Build Security Architect – Supply Chain

Docker, Inc.; Seattle, Northern (WA, KY); Hybride; USD 219 000 - 352 000; Plein temps

Avantages offerts par ce poste

Remote-first by design

Flexible schedule

Generous PTO

Résumé du poste

Docker is seeking a Senior Principal Engineer to lead the technical vision for secure software delivery across Docker Desktop, Hub, Hardened Images, and related platforms. You will define trusted-by-default architectures and drive multi-year roadmaps with the SVP of Engineering.

You will architect systems to detect and prevent build-process threats, ensure verifiable provenance, and enable secure, fast developer workflows at scale.

Qualifications

• 12+ years of software engineering experience focusing on build security or SDLC tooling.
• Deep understanding of build process threat models and mitigations.
• Experience with artifact signing, attestations, SBOMs, and vulnerability intelligence.
• Knowledge of security frameworks and enterprise security requirements.

Responsabilités

• Define multi-year technical vision for build security across Docker Desktop, Hub, and related platforms.
• Architect SBOM generation, provenance, and attestation infrastructure.
• Design interfaces for security tooling to embed into existing pipelines and registries.
• Drive policy enforcement and governance without fragmenting developer workflows.
• Mentor staff and principal engineers, shaping security roadmap.

Connaissances

Build security

Supply chain security

SDLC tooling

API design

Architectural design

Cloud platforms

Leadership without authority

Formation

Bachelor's degree in CS/Engineering

Outils

AWS

GCP

Azure

Description du poste

Docker is seeking a Senior Principal Engineer to lead the technical vision for secure software delivery across Docker Desktop, Hub, Hardened Images, and related platforms. You will define trusted-by-default architectures and drive multi-year roadmaps with the SVP of Engineering.

You will architect systems to detect and prevent build-process threats, ensure verifiable provenance, and enable secure, fast developer workflows at scale.