Senior Software Engineer, Secure Policy

Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.

We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.

The Supply Chain Security group is rethinking software development and operations security with a holistic, developer-first approach. We’re building an end-to-end solution for securing the container ecosystem — from the developer’s inner loop to production — with automation, scalability, and ease-of-use at the center.

We’re looking for a Senior Backend Engineer who thrives at the intersection of large-scale infrastructure and security. The ideal candidate not only has experience building and running services at scale, but also understands the importance of security and policy enforcement in protecting modern software supply chains. You’ll collaborate with product managers, designers, and other engineers to deliver, secure, and evolve Docker’s registry and SaaS offerings — shaping the way developers around the world deliver containers more effectively and securely.

• →

  Develop, deploy, and monitor microservices and serverless components in AWS.

• →

  Build and improve automation tooling including GitHub Actions, Argo CD, and Grafana dashboards.

• →

  Tackle high-performance engineering challenges to deliver container images and metadata efficiently and securely.

• →

  Design and enforce security and compliance policies across delivery pipelines.

• →

  Collectively own the security posture and developer experience of secure container images.

• →

  Take part in on-call rotation for your team; respond to incidents, debug production issues, and drive continuous improvement of system reliability

• 6+ years of experience building, deploying, and monitoring microservices on top of cloud infrastructure (AWS, Azure, GCP, etc.).

• Proficiency in modern programming languages (we primarily use Go).

• Knowledge of relational and non-relational databases in high-volume environments.

• Strong grasp of software engineering best practices (code review, source control, CI/CD, testing).

• Comfortable working with autonomy across distributed, remote teams.

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience

We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 13, 2024.

Please see the independent bias audit report covering our use of Covey here.