Senior Software Engineer, Secure Build

About Docker

Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.

_______________________________________________________________________

The Secure Build team builds and operates the infrastructure behind Docker's container builds. The team owns Docker Build Cloud and Auto Builds while developing the next generation of trusted build and CI capabilities.

Software is being changed faster than ever, but CI remains a bottleneck and a major trust boundary. Developers and software agents need to run build and test work quickly without exposing secrets, losing local-to-cloud parity or accepting an unverifiable result. Our direction is to make Docker the trusted place CI runs and turn that constraint into an accelerator.

The technical work spans Go services, container and build technology, cloud infrastructure, isolated execution and software supply-chain security. It also requires disciplined operation of the production systems customers rely on today. Docker Build Cloud and Auto Builds will need targeted reliability and operational improvements while useful capabilities evolve towards a coherent Secure Build platform.

As a Senior Software Engineer, you will turn these problems into practical product and technical outcomes. You will own substantial work from discovery and design through production, make sound security and reliability trade-offs, and stay close to the experience of developers and the agents they delegate work to.

We make extensive use of AI-assisted engineering tools. We expect engineers to use them thoughtfully, validate their output and remain accountable for the quality and security of what ships.

Success in This Role Looks Like

You will succeed by becoming an end-to-end owner for secure, reliable build infrastructure. Within your first year, you should have delivered a material secure-build or CI capability, reduced operational risk in Docker Build Cloud or Auto Builds, and become a trusted partner to the teams and customers that consume the platform.

Responsibilities

Turn developer, agent and security problems into clear requirements, staged technical decisions and measurable outcomes.

Design, build and operate Go services and APIs that power Docker's build and secure-CI infrastructure.

Develop isolation, identity, policy, provenance, attestation and signing capabilities for trusted build and test jobs.

Work with container, OCI, BuildKit, cloud and isolated-execution technologies to deliver secure and reproducible workflows.

Own features from technical design through rollout, observability, incident response and ongoing maintenance.

Keep Docker Build Cloud and Auto Builds reliable, make targeted improvements that reduce operational load, and help their capabilities evolve towards the wider Secure Build direction.

Make practical security trade-offs and use threat modelling to guide designs without blocking delivery.

Design for a clear developer experience, including workflows initiated or consumed by software agents.

Partner with Product, Security, Developer Experience, Registry and other platform teams on end-to-end customer workflows.

Participate in the team's paid on-call rotation and drive improvements from incidents and recurring operational work.

Communicate decisions, risks and progress clearly in a remote, async-first environment.

Qualifications

Required