Docker - Staff Supply Chain Security Engineer, Docker Hardened Images

• 10+ years of backend engineering experience, including extensive work on production-grade, distributed systems at scale. • Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience. • Ability to set multi-quarter technical roadmaps and align stakeholders (engineering, product, and executives) on strategy and tradeoffs. • Deep expertise in the container and Kubernetes ecosystem: you have strong, grounded opinions about cert-manager, kyverno, grafana, istio, and similar projects, and you can reason about tradeoffs at the ecosystem level, not just the image level. • Mastery of container supply chain security concepts (provenance, attestation, SBOM, signing, SLSA) and experience driving posture decisions across an organization rather than implementing them on a single project. • Strong software engineering fundamentals: code review, testing, source control, CI/CD, and Go sufficient to shape infrastructure and harness design. • Track record of technical influence without authority across multiple teams or organizations, raising quality through design docs, standards, review, and mentorship. • Experience navigating upstream OSS communities as a decision-maker, representing a downstream organization's requirements and shaping upstream direction on security-relevant issues. • Comfort working across remote, distributed teams and communicating complex technical strategy clearly to both technical and non-technical audiences. • Experience as a package maintainer at a Linux distribution, Homebrew, or comparable ecosystem. • Hands-on experience implementing or operationalizing supply chain tooling (Sigstore, SBOM, SLSA) at org scale. • Experience in regulated environments (FedRAMP, FIPS, PCI) with direct exposure to compliance requirements shaping engineering decisions. • Prior Principal or Distinguished IC experience on a platform, security, or developer-tools team. • Experience engaging directly with enterprise customers on container security architecture. • Align with leadership on the most critical org-wide technical risks and opportunities in container supply chain security. • Develop a point of view on DHI's current architectural constraints and where the highest-leverage interventions are. • Begin mapping the cross-functional landscape: product priorities, upstream pressures, customer compliance signals, and engineering gaps. • Drive an architectural decision that unblocks multiple teams and reduces systemic risk across the catalogue. • Establish a feedback loop from customer, operational, and upstream signals into the multi-quarter roadmap. • Engage upstream OSS communities on at least one DHI-relevant issue with meaningful influence on direction. • Deliver a major platform or standards evolution with broad adoption across DHI and adjacent teams. • Create durable alignment across engineering, product, and security on catalogue architecture, supply chain posture, and hardening strategy. • Raise the technical ceiling for the engineers around you, measurably improving review quality, architectural consistency, and the team's ability to operate independently at a higher level.