{"id":4045692,"url":"https://alion.io/job/docker-staff-software-engineer-sandbox-secrets-west-coast","title":"Staff Software Engineer, Sandbox Secrets (West Coast)","company":{"id":569,"name":"Docker","domain":"docker.com","url":"https://alion.io/company/docker","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":10,"ghost_share":0,"stale_share":0.6,"repost_share":0.1,"time_to_fill_p50_days":58,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Claude Code","optional":false},{"name":"Docker","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"Linux","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"Rust","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-10T18:32:03Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T23:48:08Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Docker\nDocker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.\nWe are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.\n_______________________________________________________________________\nThe Role\nAs AI agents redefine software development, Docker is at the center of that shift, providing the local and cloud sandboxed environments that make interactive and autonomous agentic workflows trustworthy by default. At the heart of our trust model is the fact that user credentials and other sensitive secrets are injected at the sandbox layer and never exposed to an agent. An agent can never leak secrets it never sees.\nThe Secrets team builds the software that makes that possible, from easy-to-use SDKs to secure cloud services to high-performance network proxies. We operate at the intersection of the developer experience, enterprise governance, and security - delivering core security features that make Docker sandboxes the best way to run agents and other workloads safely.\nAs a Staff Software Engineer on the Secrets team, you’ll design and build core security systems that power Docker’s agentic platform and AI governance products. Your work will focus on creating scalable, reliable, and secure software that enables developers to safely run agentic workloads while allowing administrators to confidently manage their organization’s security posture.\nThe successful candidate is a technical, product-minded engineer with deep experience building secure software and scale-out cloud services and a track record of shipping critical infrastructure. They think naturally about isolation and security boundaries, understand the tradeoffs involved in running untrusted or semi-trusted workloads safely, and can reason confidently about a system that spans multiple surface areas.\nIf you thrive on solving security and usability challenges, are enthusiastic about agentic development but conscious of the risks it entails, and want to help shape the future of Docker’s platform, we’d love to hear from you.\nPlease note: this role is currently prioritizing candidates currently located in the Western time zone (US or Canada).\n_______________________________________________________________________\nResponsibilities\nDesign, develop, and lead improvements to the secrets management and credential injection systems.\n\nInvestigate and resolve security, correctness, performance, and stability issues across cloud, macOS, Windows, and Linux.\n\nCollaborate with peers, Product, and adjacent teams to evolve the architecture as requirements grow.\n\nMentor engineers on the team and set the bar in design reviews and code reviews.\n\nEngage with the open source and agentic development community around sandboxing, MCP, and related ecosystems.\n\nParticipate in on-call rotations and respond to critical stability issues affecting users.\n\nDocument your work clearly and share knowledge with the rest of the team.\n\n_______________________________________________________________________\nQualifications\nRequired\n8+ years of software engineering experience, with demonstrated technical leadership on production systems at scale.\n\nBachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience\n\nExperience building developer tools, desktop applications, or runtime infrastructure used directly by developers.\n\nFamiliarity with the agentic software development ecosystem: how coding agents work and how tools like Claude Code, Codex, or similar agents interact with their environment.\n\nAbility to reason about isolation and security boundaries: what a sandbox should and shouldn't expose, and how to make safe defaults obvious to users.\n\nExperience driving architecture and technical strategy across multiple engineers or teams.\n\nStrong written and verbal communication skills.\n\nComfortable working with a high degree of autonomy in a remote-first environment.\n\nPreferred\nStrong proficiency in Go, Rust, and/or Java\n\nExperience with cryptographic key management systems and techniques (key wrapping, HSMs, cloud KMSes, etc.)\n\nFamiliarity with best practices for protecting credentials and secret material at-rest and in transit\n\nUnderstanding of networking, TLS, HTTP, and the like.\n\nUnderstanding of one or more OS-specific credential management capabilities.\n\nVisa sponsorship: Docker considers visa sponsorship on a case-by-case basis based on business needs.\n_______________________________________________________________________\nCompensation & Equity\nAll full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location.\nUnited States: $170,350 - $275,550 base\n______________________________________________________________________\nPosting Information\nOpen vacancy: This posting is for an existing open role.\n\nAI in hiring: Docker may use AI-assisted tools during our recruiting process.\n\nInterview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.\n\n______________________________________________________________________\nPerks & Benefits\nRemote-first by design - Work from your home, with offices in Seattle and Paris for connection and collaboration.\n\nFlexibility that fits your life - We trust you to manage your schedule while delivering great work.\n\nTime to recharge - Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.\n\nHome office support - Set up your workspace for comfort and success.\n\nTechnology stipend - Equivalent to US$100 net per month to help support your work.\n\nLearning & development - Annual stipend for conferences, courses, certifications, and continued learning.\n\nParental leave - 16 weeks of paid parental leave after six months of employment.\n\nEquity for all full-time employees - Share in Docker's long-term success as we continue to grow.\n\nComprehensive benefits - Medical, retirement, and paid holidays vary by country.\n\nDocker swag - Because representing the whale never gets old.\n\nDocker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.","description_format":"text","description_chars":6991,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Home office","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevOps & Platform Engineering","Virtualization & Containers","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-11-10T23:48:08Z"}],"visa":[{"country":"US","licensed_sponsor":false,"adverts_offering_sponsorship_24m":22,"sanctioned_now":false,"evidence":"Offered visa sponsorship in 22 of its adverts here in 24 months","filings_12m":0,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":58,"reasons":["conf:1","win:early"],"computed_at":"2026-11-11T01:45:06Z"},"pay":null,"html_url":"https://alion.io/job/docker-staff-software-engineer-sandbox-secrets-west-coast","json_url":"https://alion.io/job/docker-staff-software-engineer-sandbox-secrets-west-coast.json","meta":{"generated_at":"2026-11-11T01:45:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":189,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":569},"rest":"https://alion.io/mcp/rest/get_company?id=569"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdocker-staff-software-engineer-sandbox-secrets-west-coast"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdocker-staff-software-engineer-sandbox-secrets-west-coast"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdocker-staff-software-engineer-sandbox-secrets-west-coast"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/docker-staff-software-engineer-sandbox-secrets-west-coast\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdocker-staff-software-engineer-sandbox-secrets-west-coast"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4045692}},{"tool":"search_jobs","arguments":{"company":"docker.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4045692},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}