{"id":2756332,"url":"https://alion.io/job/chainguard-principal-software-engineer-containers","title":"Principal Software Engineer, Containers","company":{"id":581,"name":"Chainguard","domain":"chainguard.dev","url":"https://alion.io/company/chainguard","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":81,"open_postings":9,"ghost_share":0,"stale_share":0.778,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":229000,"max":258000,"currency":"USD","period":"year","gross":null,"usd_annual":258000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Canva","optional":false},{"name":"GCP","optional":false},{"name":"Helm","optional":false},{"name":"Linux","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OpenAI","optional":false},{"name":"Sigstore","optional":false},{"name":"Snowflake","optional":false},{"name":"containerd","optional":true},{"name":"Kubernetes","optional":true},{"name":"SLSA","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-16T23:35:20Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-17T15:14:42Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. \nOur customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake.\nChainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.\nWho we are\nChainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk.\nOur customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake.\nChainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.\nThe role, in a nutshell\nChainguard Containers is our core product, and this team builds it. As Principal Software Engineer in Container Product Engineering you will be the most senior individual contributor on a team of about fifteen engineers, setting the technical direction for the product and leading its largest, most consequential projects from idea to customer.\nChainguard is growing explosively. Every line of code is now written with AI in the loop, which means the foundation it runs on has to be secure by default. You will shape that foundation: the hardened container images, the registry that serves them, and the tooling that lets engineers and AI agents adopt them.\nThis is a technical leadership role, not a management role. You will work directly with engineering and product leaders to form the roadmap, then lead engineers across sub-teams to execute it. You will stay hands-on: you write and review code every week, and the hardest problems land on your desk first.\nWhat the team owns\n Product features for Chainguard Containers. Letting customers push their own images to our registry, Custom Assembly (customers compose images from our hardened packages), Helm charts, notifications, and compliance views such as STIG dashboards (STIG is the US government's hardening standard).\nThe image build pipeline. The systems that turn packages from Wolfi, our Linux distribution, into signed and attested container images at scale, including moving image builds onto our own runner infrastructure.\nRegistry performance and distribution. Work such as lazy loading, so a container starts before its whole image has downloaded, and image signing with Sigstore.\n Adoption tooling for engineers and AI agents. Migration tools that convert existing Dockerfiles to Chainguard Containers, and MCP servers (Model Context Protocol, the standard that lets AI agents call tools) so agents can discover and pull our images directly.\nWhat you'll do\nSet the technical direction for Chainguard Containers: the architecture of the build pipeline, the registry, and the adoption tooling over the next one to three years, written down and defended in the open.\nForm the roadmap with engineering and product leaders, then execute it. Turn ambiguous business goals into sequenced, staffed technical plans, and own the delivery of the largest multi-team projects from concept through production and adoption.\nMake and own the trade-offs that shape the product: build versus buy, when to re-platform and when not to, what to cut to hit a date. Write the decision down and bring dissenting engineers along.\nLead through other engineers. Set the design bar, review the designs and code that matter most, and grow the Staff and Senior engineers around you into the next generation of technical leaders.\nWork with AI coding agents as part of how you build, review, and operate, and set the standard for how the whole team uses them safely as volume grows.\nFollow a problem wherever it goes: another team's service, a customer escalation, a support ticket, or go-to-market data, and work across team and company boundaries to get ahead of planning cycles.\nRepresent Chainguard in the container and open source ecosystem: upstream work, standards conversations, talks, and the customer conversations where credibility is the product.\nKeep the systems you own healthy: observability, on-call, and the structural fixes that stop whole classes of incidents.\nWhat we're looking for\n10+ years building and operating software that paying customers use, including several years as the technical lead of large, multi-team projects at a startup or a company in hyper-growth.\nClosely relevant experience in what we do: container images, container registries and the OCI image format (Open Container Initiative, the standard for container images and registries), Linux distributions or package management, build systems, or software supply chain security.\nKnown in the field. Your work is visible outside your employer: open source you maintain, standards you helped shape, talks or writing that other engineers cite, or systems the industry knows you built.\nA track record of technical leadership without authority: you have set direction for a team you did not manage, and the team delivered.\nExperience forming and executing roadmaps with engineering and product leaders, including saying no, re-sequencing, and holding a date.\nJudgment on trade-offs at the product level. You have made calls that moved a company's roadmap, and you can show what you gave up and why.\nA systems thinker who designs for the whole path, from upstream source through build, signing, distribution, and the customer's runtime, and who sees second-order effects before they land.\nHigh agency and urgency. You find a way, you do not wait to be unblocked, and you unblock others.\nAI-native in how you build and lead. You use agentic coding tools daily and you have changed how a team works because of them.\nArchitectural depth in Go: you can design a Go service from scratch, plus strong API design, databases and caching, and cloud infrastructure on GCP or AWS.\nLow ego. You do what you say and say what you do, and you communicate early when the news is bad.\nExcellent written English and experience leading on a distributed, remote-first team.\nNice to haves\nDeep software supply chain security background: SBOMs (software bill of materials), Sigstore signing, or SLSA (Supply-chain Levels for Software Artifacts, a framework for build integrity).\nMaintainer of, or significant contributor to, Chainguard's open-source tools (Wolfi, apko, melange) or neighboring projects such as containerd, Kubernetes, or OCI specifications.\nExperience taking a product from early customers to broad adoption.\nTerraform or other infrastructure-as-code experience.\nA non-traditional path into engineering. We value people who learned by building.\nLocation\nRemote. United States preferred; Open to Canada, the United Kingdom, and Germany. We are unable to provide visa sponsorship or relocation for this role.\nExplore Our Work\nDive into the practical side of what we do at Chainguard. These resources provide a hands-on look at our processes and offer an opportunity for in-depth understanding of our product offerings and the technology behind them.\n Chainguard Academy\nhttps://www.chainguard.dev\nBase Salary Range\n$229,000—$258,000 USD\nAbout Us\nWe live and breathe our company values:\nWe are customer obsessed - We focus on delivering solutions to our customers that create value and make their lives better.\nWe have a bias for intentional action - We prioritize, plan, try things, and fail fast.\nWe don't take ourselves too seriously (but we do serious work) - We are solving an important problem which takes focus, but we also like to enjoy the journey.\nWe trust each other and assume good intentions - We're transparent with decisions to empower team members to make well informed decisions.\nA few of the benefits we offer:\nFlexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.\n Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!).\n100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck.\n∞ Flexible Time Off: Take the time you need - to do our best work, we need to recharge and reset.\n 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.\nIf your experience is close but doesn't fulfill all requirements, please apply. We're building the best team in technology and are focused on hiring \"Chainguardians\" with unique backgrounds, perspectives, and experiences.\nChainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.\nBy submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard's Global Candidate Privacy Notice.\n©2026 Chainguard. All Rights Reserved.","description_format":"text","description_chars":10046,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Dental insurance","Equity","Flexible time off","Health insurance","Parental leave","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Application Security","DevSecOps","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-10-17T01:57:54Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":262500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":43,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":258000,"is_top_pay":true},"html_url":"https://alion.io/job/chainguard-principal-software-engineer-containers","json_url":"https://alion.io/job/chainguard-principal-software-engineer-containers.json","meta":{"generated_at":"2026-10-17T15:43:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21317,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":581},"rest":"https://alion.io/mcp/rest/get_company?id=581"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fchainguard-principal-software-engineer-containers"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fchainguard-principal-software-engineer-containers"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fchainguard-principal-software-engineer-containers"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/chainguard-principal-software-engineer-containers\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fchainguard-principal-software-engineer-containers"}]}