{"id":58671,"url":"https://alion.io/job/docker-senior-software-engineer-secure-build","title":"Senior Software Engineer, Secure Build","company":{"id":569,"name":"Docker","domain":"docker.com","url":"https://alion.io/company/docker","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":78,"open_postings":8,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["GB","US"],"hiring_countries_total":2,"salary":null,"salary_estimate":{"min_usd":96000,"max_usd":180000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":6,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Cosign","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Go","optional":false},{"name":"Kubernetes","optional":false},{"name":"Outlook","optional":false},{"name":"SBOM","optional":false},{"name":"Sigstore","optional":false},{"name":"SLSA","optional":false}],"status":"live","first_seen_at":"2026-08-14T15:17:23Z","employer_posted_date":"2026-08-14","last_verified_at":"2026-10-17T13:21:15Z","board_verified":true,"closed_at":null,"days_open":63,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":63},"description":"About Docker\nDocker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.\nWe are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.\n_______________________________________________________________________\nThe Secure Build team builds and operates the infrastructure behind Docker's container builds. The team owns Docker Build Cloud and Auto Builds while developing the next generation of trusted build and CI capabilities.\nSoftware is being changed faster than ever, but CI remains a bottleneck and a major trust boundary. Developers and software agents need to run build and test work quickly without exposing secrets, losing local-to-cloud parity or accepting an unverifiable result. Our direction is to make Docker the trusted place CI runs and turn that constraint into an accelerator.\nThe technical work spans Go services, container and build technology, cloud infrastructure, isolated execution and software supply-chain security. It also requires disciplined operation of the production systems customers rely on today. Docker Build Cloud and Auto Builds will need targeted reliability and operational improvements while useful capabilities evolve towards a coherent Secure Build platform.\nAs a Senior Software Engineer, you will turn these problems into practical product and technical outcomes. You will own substantial work from discovery and design through production, make sound security and reliability trade-offs, and stay close to the experience of developers and the agents they delegate work to.\nWe make extensive use of AI-assisted engineering tools. We expect engineers to use them thoughtfully, validate their output and remain accountable for the quality and security of what ships.\nSuccess in This Role Looks Like\nYou will succeed by becoming an end-to-end owner for secure, reliable build infrastructure. Within your first year, you should have delivered a material secure-build or CI capability, reduced operational risk in Docker Build Cloud or Auto Builds, and become a trusted partner to the teams and customers that consume the platform.\nResponsibilities\nTurn developer, agent and security problems into clear requirements, staged technical decisions and measurable outcomes.\n\nDesign, build and operate Go services and APIs that power Docker's build and secure-CI infrastructure.\n\nDevelop isolation, identity, policy, provenance, attestation and signing capabilities for trusted build and test jobs.\n\nWork with container, OCI, BuildKit, cloud and isolated-execution technologies to deliver secure and reproducible workflows.\n\nOwn features from technical design through rollout, observability, incident response and ongoing maintenance.\n\nKeep Docker Build Cloud and Auto Builds reliable, make targeted improvements that reduce operational load, and help their capabilities evolve towards the wider Secure Build direction.\n\nMake practical security trade-offs and use threat modelling to guide designs without blocking delivery.\n\nDesign for a clear developer experience, including workflows initiated or consumed by software agents.\n\nPartner with Product, Security, Developer Experience, Registry and other platform teams on end-to-end customer workflows.\n\nParticipate in the team's paid on-call rotation and drive improvements from incidents and recurring operational work.\n\nCommunicate decisions, risks and progress clearly in a remote, async-first environment.\n\nQualifications\nRequired\n6+ years of software engineering experience, with demonstrated technical leadership on production systems at scale.\n\nBachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience\n\nStrong backend engineering experience building and operating distributed systems in production.\n\nProduction experience with Go and the ability to write, test, review and debug maintainable Go services.\n\nExperience with containers and build or CI systems, such as OCI, BuildKit, Buildx, GitHub Actions or comparable platforms.\n\nExperience with cloud-native infrastructure and a major cloud platform.\n\nA strong operational mindset covering observability, reliability, incident response and on-call ownership.\n\nEvidence of taking a feature or service from an ambiguous problem through production operation and measurable results.\n\nWorking knowledge of security boundaries, identity, secrets and common software supply-chain risks.\n\nA strong product mindset and care for developer workflows, including experiences used by software agents.\n\nClear written and spoken communication suited to a remote, async-first company.\n\nHelpful, but not required\nExperience with Kubernetes.\n\nExperience with SLSA, in-toto, SBOM, VEX, Sigstore, cosign, provenance or artefact signing.\n\nExperience with sandboxing, microVMs, untrusted workload execution or multi-tenant infrastructure.\n\nExperience building hosted CI runners, remote builders or developer-platform infrastructure.\n\nExperience with agentic development workflows or building systems used programmatically by software agents.\n\nExperience evolving a legacy production system while delivering new capabilities.\n\nWhat to Expect\nFirst 30 Days\nBuild context on Docker Build Cloud, Auto Builds and the Secure Build product and technical direction.\n\nPair with the Secure Build team on core services, deployments and operational practices.\n\nShip a useful production change and take part in an operational review or incident-learning session.\n\nUnderstand the secure-CI threat model and build relationships with DHI, Registry and Developer Experience.\n\nFirst 90 Days\nOwn a secure-build feature or reliability improvement from problem definition through production.\n\nContribute materially to the secure-CI architecture, including isolation, identity, policy or signed evidence.\n\nDeliver an observable improvement to the reliability or operability of an existing build service.\n\nDemonstrate strong product judgement across developer and agent workflows.\n\nOne Year Outlook (First Year)\nBe a trusted senior technical owner on the Secure Build team.\n\nDeliver a material secure-CI or trusted-build capability used by customers or internal product teams.\n\nImprove the reliability and maintainability of Docker Build Cloud and Auto Builds while helping their useful capabilities converge with the wider platform.\n\nContribute to the team's architecture for isolated execution, brokered access and verifiable build outcomes.\n\nHelp establish strong product, design, review and operational practices as the team grows.\n\nDocker considers visa sponsorship on a case-by-case basis based on business needs.\nCompensation & Equity\nEU: €94,040 - €155,650+ equity\nUnited States: $160,900 - $260,700 + equity\n______________________________________________________________________\nPosting Information\nOpen vacancy: This posting is for an existing open role.\n\nAI in hiring: Docker may use AI-assisted tools during our recruiting process.\n\nInterview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.\n\n______________________________________________________________________\nPerks & Benefits\nRemote-first by design - Work from your home, with offices in Seattle and Paris for connection and collaboration.\n\nFlexibility that fits your life - We trust you to manage your schedule while delivering great work.\n\nTime to recharge - Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.\n\nHome office support - Set up your workspace for comfort and success.\n\nTechnology stipend - Equivalent to US$100 net per month to help support your work.\n\nLearning & development - Annual stipend for conferences, courses, certifications, and continued learning.\n\nParental leave - 16 weeks of paid parental leave after six months of employment.\n\nEquity for all full-time employees - Share in Docker's long-term success as we continue to grow.\n\nComprehensive benefits - Medical, retirement, and paid holidays vary by country.\n\nDocker swag - Because representing the whale never gets old.\n\nDocker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.","description_format":"text","description_chars":8949,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity","Home office","Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevOps & Platform Engineering","Virtualization & Containers","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-08-14T15:17:23Z"}],"visa":[],"liveness":{"score":39,"band":"fade","label":"Fading","p_open":1,"p_active":0.885,"p_room":0.44,"age_days":63,"expected_fill_days":58,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/docker-senior-software-engineer-secure-build","json_url":"https://alion.io/job/docker-senior-software-engineer-secure-build.json","meta":{"generated_at":"2026-10-17T13:27:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18062,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":569},"rest":"https://alion.io/mcp/rest/get_company?id=569"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdocker-senior-software-engineer-secure-build"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdocker-senior-software-engineer-secure-build"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdocker-senior-software-engineer-secure-build"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/docker-senior-software-engineer-secure-build\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdocker-senior-software-engineer-secure-build"}]}