Docker - Senior Principal Engineer, Docker and Ecosystem
Requirements
• Domain Expertise • 12+ years of software engineering experience specializing in build security, software supply chain security, or SDLC tooling • build security, software supply chain security, or SDLC tooling • Deep understanding of build process threat models across dependencies, environments, artifacts, and pipelines, along with effective mitigations • Architectural experience in artifact signing, attestations, SBOMs, dependency security, CI/CD security, base image trust, or vulnerability intelligence • Practical knowledge of supply chain security frameworks and standards • Expertise in API design, service architecture, and scalable system integration • Proven record delivering large-scale distributed systems for millions of users and enterprise customers • Experience with major cloud platforms (AWS, GCP, Azure) and modern infrastructure • Bachelor's degree in CS, Engineering, or equivalent practical experience • Strategic and Business Impact • Proven track record creating strategic technical plans that enable revenue, expansion, or enterprise deals • Experience converting business strategy into technical architectures and roadmaps • Understanding of SaaS business models, enterprise sales, and how security impacts commercial outcomes • Experience leading build-vs-buy decisions for core platform components • Leadership and Influence • Ability to lead large, cross-company technical initiatives across multiple engineering teams • Experience partnering with VPs and executives to define and execute technical strategy • Proven ability to influence technical direction and build consensus without direct authority • Strong communication skills for presenting to executives and driving organization-wide alignment • Experience mentoring senior engineers and developing technical leaders • Enterprise Context • Experience building products that serve enterprise customers with complex security and compliance requirements • Knowledge of enterprise security requirements and compliance frameworks such as SOC 2 and ISO 27001, and their architectural implications • Understanding of how enterprise security teams evaluate, procure, and operate tooling • Preferred • Scale experience at a security, developer tools, or infrastructure software company • Experience with containers (Docker, Kubernetes) or developer platforms • Experience with complex enterprise billing, contracts, usage pricing, and revenue recognition • Proven ability to migrate legacy systems without disrupting business operations • Contributions to open-source security tools or supply chain security standards • Recognized technical leader via speaking, publishing, or open-source work • Advanced degree in CS, Engineering, or a related field • What Success Looks Like • Security Posture • Security Posture • Artifacts produced through Docker carry verifiable provenance by default, not by opt-in configuration • Build-time threat classes are addressed architecturally rather than through detection after the fact • Developers keep security controls enabled because the controls are fast and unobtrusive • Business Enablement • Business Enablement • Security and governance capabilities directly unblock enterprise revenue • New product SKUs launch in weeks instead of months through the billing platform • Usage-based billing supports monetization of new security and AI product lines • Platform Leverage • Platform Leverage • Product teams ship enterprise-ready, secure-by-default features in under two weeks rather than months • Platform systems achieve 99.9%+ uptime for business-critical workflows • Organizational Impact • Recognized across Docker as the definitive technical authority on build and supply chain security • Multiple Staff and Principal engineers developed who can own major domains • Docker's voice carries weight in the external supply chain security conversation • Docker considers visa sponsorship on a case-by-case basis based on business needs.
Responsibilities
• Technical Vision and Strategy • Lead multi-year technical vision for build security and supply chain across Docker Desktop, Hub, Hardened Images, Verified Publishing, and monetization platforms. • Define and sequence "trusted by default" architecture for 20M developers. • Partner with the SVP of Engineering to convert commercial strategy into multi-year technical roadmaps. • Establish company-wide architectural principles and security standards. • Identify high-leverage platform investments that enhance security across all Docker products. • Proactively position architecture ahead of evolving supply chain threats and regulatory demands. • Build Security Architecture • Architect systems to detect and prevent build-process threats like compromised dependencies, malicious steps, tampered artifacts, and untrusted images. • Design provenance and attestation infrastructure ensuring Docker artifacts carry verifiable build history. • Define artifact signing, verification, and policy enforcement across local workflows and CI/CD pipelines. • Architect SBOM generation, dependency analysis, and vulnerability intelligence for complete software visibility. • Align with and help shape emerging supply chain security standards. • Ensure security controls remain fast and unobtrusive so developers keep them enabled. • SDLC and Developer Workflow Integration • Architect how Docker's security capabilities integrate across the full software development lifecycle, from local development through CI/CD to production deployment • Design the interfaces and contracts that let Docker's tooling embed into the pipelines, registries, and platforms customers already run, rather than asking them to rebuild around us • Define the developer experience for security tooling, where the secure path is the fast path and the default path • Architect policy and enforcement models that satisfy enterprise security and compliance requirements without fragmenting the developer workflow • Drive convergence of security capabilities across Docker products, replacing product-specific implementations with shared platform primitives • Technical Excellence and Influence • Work with leaders across engineering to drive strategy and execution • Mentor and develop Staff and Principal engineers, raising the technical bar across the organization • Represent Docker's security architecture externally through blog posts, conference talks, standards bodies, and technical community engagement • Participate in executive-level discussions, providing architectural perspective on business decisions • Take part in on-call rotation for your team, respond to incidents, debug production issues, and drive continuous improvement of system reliability
Benefits
• United States: $219K – $352K + equity • United States: • ______________________________________________________________________ • Open vacancy: This posting is for an existing open role. • Open vacancy: • AI in hiring: Docker may use AI-assisted tools during our recruiting process. • AI in hiring: • Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. • Interview recordings: • Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. • Remote-first by design • Flexibility that fits your life – We trust you to manage your schedule while delivering great work. • Flexibility that fits your life • Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. • Time to recharge • Technology stipend – Equivalent to US$100 net per month to help support your work. • Technology stipend • US$100 net per month • Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. • Learning & development • Parental leave – 16 weeks of paid parental leave after six months of employment. • Parental leave • Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. • Equity for all full-time employees • Comprehensive benefits – Medical, retirement, and paid holidays vary by country. • Docker swag – Because representing the whale never gets old. • Docker swag
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT