Senior Principal Build Security Architect – Supply Chain

Docker, Inc.; Seattle, Northern (WA, KY); Híbrido; USD 219.000 - 352.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote-first by design

Flexible schedule

Generous PTO

Descripción de la vacante

Docker is seeking a Senior Principal Engineer to lead the technical vision for secure software delivery across Docker Desktop, Hub, Hardened Images, and related platforms. You will define trusted-by-default architectures and drive multi-year roadmaps with the SVP of Engineering.

You will architect systems to detect and prevent build-process threats, ensure verifiable provenance, and enable secure, fast developer workflows at scale.

Formación

• 12+ years of software engineering experience focusing on build security or SDLC tooling.
• Deep understanding of build process threat models and mitigations.
• Experience with artifact signing, attestations, SBOMs, and vulnerability intelligence.
• Knowledge of security frameworks and enterprise security requirements.

Responsabilidades

• Define multi-year technical vision for build security across Docker Desktop, Hub, and related platforms.
• Architect SBOM generation, provenance, and attestation infrastructure.
• Design interfaces for security tooling to embed into existing pipelines and registries.
• Drive policy enforcement and governance without fragmenting developer workflows.
• Mentor staff and principal engineers, shaping security roadmap.

Conocimientos

Build security

Supply chain security

SDLC tooling

API design

Architectural design

Cloud platforms

Leadership without authority

Educación

Bachelor's degree in CS/Engineering

Herramientas

AWS

GCP

Azure

Descripción del empleo

Docker is seeking a Senior Principal Engineer to lead the technical vision for secure software delivery across Docker Desktop, Hub, Hardened Images, and related platforms. You will define trusted-by-default architectures and drive multi-year roadmaps with the SVP of Engineering.

You will architect systems to detect and prevent build-process threats, ensure verifiable provenance, and enable secure, fast developer workflows at scale.