Docker - Senior Supply Chain Security Engineer (East Coast Preferred)

• Strong experience with containers, Linux and Kubernetes in production or production-shaped environments. • Practical experience reading, adapting or maintaining Helm charts and diagnosing how chart templates, values and workload security settings affect deployment behaviour. • Experience maintaining software you did not originate, such as Linux packages, container images, open-source integrations, charts or a comparable downstream distribution. • Strong YAML and configuration-review skills, including care for conventions, consistency and downstream impact across a large catalogue. • Working knowledge of container and Kubernetes security, including non-root execution, UID and GID, capabilities, filesystem restrictions, image layers and multi-architecture builds. • Practical programming ability in Go or a comparable language, sufficient to write and review integration tests, validators and content automation. • Experience tracking upstream releases and reasoning about semver, breaking changes, dependency graphs and reproducible builds. • A maintainer mindset: you catch drift, improve patterns for the next contributor and consider the effect of a change across many downstream consumers. • Familiarity with GitHub-heavy open-source workflows, including pull requests, review, release tracking and upstream contribution. • Comfort using AI-assisted engineering critically while retaining ownership of security assertions, test evidence and release quality. • A strong operational mindset and clear written and spoken communication suited to a remote, async-first company. • Experience as a maintainer for Alpine, Debian, Fedora, Wolfi, Homebrew or another package ecosystem. • Helm chart authorship or meaningful contribution to an upstream chart. • Experience with SBOMs, VEX, SLSA, Sigstore, cosign, provenance or artefact signing. • Experience with apk, deb, rpm, Go modules, Maven or Gradle, npm, pip, Cargo or other dependency ecosystems. • Experience building automation for package, image or chart creation, validation and release. • Experience with FIPS, FedRAMP, PCI or other regulated and security-conscious environments. • Build context on the DHI catalogue, its package, image and chart definitions, the DHI Factory and the team's definition of done. • Pair across both image and Helm chart work and ship a useful production change. • Learn the build, test, signing, publishing and vulnerability-remediation workflows. • Take part in reviews and an incident, escalation or failed-build learning session. • Own a complex image and chart addition or update from upstream analysis through release. • Resolve a meaningful CVE, dependency or compatibility problem with clear evidence and customer impact in mind. • Improve at least one factory control, integration test, validator or reusable content pattern. • Review across artefact types and help another engineer take on a broader piece of work. • One Year Outlook (First Year) • Be a trusted senior owner across hardened packages, images and Helm charts. • Deliver material catalogue growth or quality improvements without increasing human effort linearly with demand. • Reduce recurring manual work by moving a class of changes into a proven automated path. • Improve DHI's security posture, content availability and release reliability for customers. • Raise review quality and grow the team's ability to work across artefact and dependency ecosystems. • Docker considers visa sponsorship on a case-by-case basis based on business needs.