Senior Software Engineer, Secure Policy

Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.

The Supply Chain Security group is rethinking software development and operations security with a holistic, developer-first approach. We’re building an end-to-end solution for securing the container ecosystem — from the developer’s inner loop to production — with automation, scalability, and ease-of-use at the center.

We’re looking for a Senior Backend Engineer who thrives at the intersection of large-scale infrastructure and security. The ideal candidate not only has experience building and running services at scale, but also understands the importance of security and policy enforcement in protecting modern software supply chains. You’ll collaborate with product managers, designers, and other engineers to deliver, secure, and evolve Docker’s registry and SaaS offerings — shaping the way developers around the world deliver containers more effectively and securely.

• Develop, deploy, and monitor microservices and serverless components in AWS.

• Build and improve automation tooling including GitHub Actions, Argo CD, and Grafana dashboards.

• Tackle high-performance engineering challenges to deliver container images and metadata efficiently and securely.

• Design and enforce security and compliance policies across delivery pipelines.

• Collectively own the security posture and developer experience of secure container images.

• Take part in on-call rotation for your team; respond to incidents, debug production issues, and drive continuous improvement of system reliability

• 6+ years of experience building, deploying, and monitoring microservices on top of cloud infrastructure (AWS, Azure, GCP, etc.).

• Proficiency in modern programming languages (we primarily use Go).

• Knowledge of relational and non-relational databases in high-volume environments.

• Strong grasp of software engineering best practices (code review, source control, CI/CD, testing).

• Comfortable working with autonomy across distributed, remote teams.

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience

• Bonus points: hands-on experience in infrastructure security, policy enforcement, or compliance frameworks (e.g., SLSA, SOC 2, FedRAMP).

• Meet the team and understand the mission.

• Explore the codebase and ship your first small change.

• Feel confident in a portion of the codebase.

• Ship a more significant change and demo it internally.

• Attend a customer call to learn how our registry supports real-world needs.

• Gain a working understanding of Docker personas and how they apply to the registry.

• Take ownership over a functional area (scope depends on level).

• Help shape the direction of Docker products, with a strong focus on security and policy enforcement.

• Collaborate across teams to deliver end-to-end features that strengthen supply chain

Docker considers sponsorship on a case-by-case basis based on business needs.

We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 13, 2024.

Please see the independent bias audit report covering our use of Covey here.

Perks

• Freedom & flexibility; fit your work around your life

• Designated quarterly Whaleness Days plus end of year Whaleness break

• Home office setup; we want you comfortable while you work

• 16 weeks of paid Parental leave

• Technology stipend equivalent to $100 net/month

• PTO plan that encourages you to take time to do the things you enjoy

• Training stipend for conferences, courses and classes

• Equity; we are a growing start-up and want all employees to have a share in the success of the company

• Docker Swag

• Medical benefits, retirement and holidays vary by country

• Remote-first culture, with offices in Seattle and Paris

Docker embraces diversity and equal opportunity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our company will be.

#LI-REMOTE