Senior Principal Engineer, Docker and Ecosystem

Docker; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Docker is seeking a Senior Principal Engineer to serve as the technical visionary and architect for secure software delivery across its product portfolio. You will define verifiable, tamper-resistant software delivery at Docker's scale and drive the architecture to make it real for developers and enterprise customers.

You will set multi-year technical direction, influence product strategy with the SVP of Engineering, and establish company-wide security standards while ensuring Docker remains at

Responsibilities

• Lead multi-year technical vision for build security and supply chain across Docker Desktop, Hub, Hardened Images, Verified Publishing, and monetization platforms.
• Define and sequence trusted-by-default architecture for 20M developers.
• Partner with the SVP of Engineering to convert commercial strategy into multi-year technical roadmaps.
• Establish company-wide architectural principles and security standards.
• Identify high-leverage platform investments that enhance security across Docker products.
• Proactively position architecture ahead of evolving supply chain threats and regulatory demands.

Job description

About Docker

Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.

The Opportunity

Docker is seeking a Senior Principal Engineer to serve as the technical visionary and architect for how software gets built, verified, and trusted. Every day, millions of developers pull images, install dependencies, and ship builds to production. Each of those steps is a place where something can go wrong, or be made to go wrong. Compromised base images, malicious packages, tampered build steps, unsigned artifacts moving through pipelines nobody is watching. The industry calls this the software supply chain, and it has become one of the most consequential unsolved problems in software engineering.

This role sits in Docker and Ecosystems, the group that owns Docker's most well known products and our emerging content and SDLC business. You will own the technical strategy for secure software delivery across all of it, defining what verifiable, tamper-resistant software delivery looks like at Docker' s scale, then driving the architecture that makes it real for every developer and every enterprise customer using our products.

You will set multi-year technical direction, make architectural decisions that shape Docker's product portfolio, and work directly with the SVP of Engineering and executive team on strategy. You will not manage people. You will change what the industry considers table stakes.

What You'll Do

Technical Vision and Strategy

Lead multi-year technical vision for build security and supply chain across Docker Desktop, Hub, Hardened Images, Verified Publishing, and monetization platforms.

Define and sequence "trusted by default" architecture for 20M developers.

Partner with the SVP of Engineering to convert commercial strategy into multi-year technical roadmaps.

Establish company-wide architectural principles and security standards.

Identify high-leverage platform investments that enhance security across all Docker products.

Proactively position architecture ahead of evolving supply chain threats and regulatory demands.

Build Security Architecture

Architect systems to detect and prevent build-process threats like compromised dependencies, malicious steps, tampered artifacts, and untrusted images.

Design provenance and attestation infrastructure ensuring Docker artifact