← All roles

Senior Supply Chain Security Engineer (East Coast Preferred)

Docker· Engineering
Apply on company site
RemoteCA$210.6k - CA$341.7kFull-timePosted 5mo ago

About the role

Senior role within Docker's DHI Content team focusing on supply-chain security, open-source maintenance, and hardened content for packages, images, and Helm charts. Responsible for end-to-end ownership from upstream discovery to release and ongoing maintenance, with heavy emphasis on automation, AI-assisted engineering, and security evidence.

Responsibilities

  • Author and maintain definitions for hardened system packages and container images, including build steps, upstream tracking, multi-architecture support and reproducibility controls.
  • Adapt and maintain upstream Helm charts so they work correctly with DHI images under non-root, restricted and production-shaped Kubernetes security constraints.
  • Track upstream releases, semver patterns, monorepos, dependency chains and breaking changes, then make pragmatic decisions about when to update, patch, pin or deviate.
  • Triage and remediate vulnerabilities across OS packages, application dependencies, images and charts, including VEX and no-upstream-fix cases that require explicit security judgement.
  • Write and improve Go-based integration tests, validators and policy checks that prove packages, images and charts behave correctly in real environments.
  • Review human-authored and machine-authored pull requests against DHI standards, distinguish blocking issues from advice and give contributors a clear path forward.
  • Improve the DHI Factory by converting repeated work, review corrections and escaped defects into automation, tests, validators and reusable authoring patterns.
  • Help classify work into deterministic, specialist and judgement paths so people spend time where their expertise changes the outcome.
  • Partner with Product, Security, Support and customer-facing teams to turn demand and incidents into prioritised content and durable improvements.
  • Engage constructively with upstream maintainers when hardened deployment requirements expose issues or useful improvements.
  • Participate in the team's paid on-call rotation and drive learning from customer escalations, failed builds and content defects.
  • Communicate decisions, risks and progress clearly in a remote, async-first environment.

Qualifications

  • Strong experience with containers, Linux and Kubernetes in production or production-shaped environments.
  • Practical experience reading, adapting or maintaining Helm charts and diagnosing how chart templates, values and workload security settings affect deployment behaviour.
  • Experience maintaining software you did not originate, such as Linux packages, container images, open-source integrations, charts or a comparable downstream distribution.
  • Strong YAML and configuration-review skills, including care for conventions, consistency and downstream impact across a large catalogue.
  • Working knowledge of container and Kubernetes security, including non-root execution, UID and GID, capabilities, filesystem restrictions, image layers and multi-architecture builds.
  • Practical programming ability in Go or a comparable language, sufficient to write and review integration tests, validators and content automation.
  • Experience tracking upstream releases and reasoning about semver, breaking changes, dependency graphs and reproducible builds.
  • A maintainer mindset: you catch drift, improve patterns for the next contributor and consider the effect of a change across many downstream consumers.
  • Familiarity with GitHub-heavy open-source workflows, including pull requests, review, release tracking and upstream contribution.
  • Comfort using AI-assisted engineering critically while retaining ownership of security assertions, test evidence and release quality.
  • A strong operational mindset and clear written and spoken communication suited to a remote, async-first company.

Skills

Required:Containers, Linux and KubernetesHelm chartsGo programmingCI/CD and automation

Benefits

  • Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
  • Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
  • Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
  • Home office support – Set up your workspace for comfort and success.
  • Technology stipend – Equivalent to US$100 net per month to help support your work.
  • Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
  • Parental leave – 16 weeks of paid parental leave after six months of employment.
  • Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
  • Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
  • Docker swag – Representing the whale.
Last updated Aug 19, 2026. Interested? Apply on the company site.
Docker logo

About Docker

Accelerated Container Application Development

Docker is a platform designed to help developers build, share, and run container applications. We handle the tedious setup, so you can focus on the code.

ContainerizationDevOpsCloud InfrastructureSecurityOpen Source
Company profileWebsite

More open roles at Docker