Senior Principal Engineer

Responsibilities

• Lead multi-year technical vision and strategy for build security and software supply chain security across Docker products.
• Architect provenance, attestations, artifact signing, verification, policy enforcement, SBOM generation, dependency analysis, and vulnerability intelligence systems.
• Define secure developer experiences and integrations across local development, CI/CD pipelines, registries, platforms, and production deployment.
• Establish company-wide architectural principles and security standards while driving shared security primitives across products.
• Lead cross-company technical initiatives, make major architectural decisions, and partner with the SVP of Engineering and executive team.
• Mentor Staff and Principal engineers and raise the organization’s technical bar without directly managing people.
• Represent Docker’s security architecture through publications, conference talks, standards bodies, and technical community engagement.
• Participate in on-call rotations, respond to incidents, debug production issues, and improve system reliability.

Requirements

• 12+ years of software engineering experience specializing in build security, software supply chain security, or SDLC tooling.
• Deep knowledge of build-process threat models and mitigations involving dependencies, environments, artifacts, and pipelines.
• Architectural experience with artifact signing, attestations, SBOMs, dependency security, CI/CD security, base image trust, or vulnerability intelligence.
• Expertise in API design, service architecture, scalable system integration, and large-scale distributed systems.
• Experience with AWS, GCP, Azure, and modern infrastructure.
• Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.
• Track record of creating strategic technical plans, translating business strategy into architectures and roadmaps, and enabling enterprise revenue or expansion.
• Experience with enterprise security and compliance requirements, including SOC 2 and ISO 27001, and with security tooling procurement and operation.
• Ability to lead large cross-company initiatives, influence technical direction without direct authority, partner with executives, build consensus, and mentor senior engineers.
• Preferred qualifications include experience at a security, developer tools, or infrastructure software company; Docker or Kubernetes experience; enterprise billing and revenue recognition experience; legacy-system migration experience; open-source security contributions; recognized technical leadership; and an advanced degree.

Benefits

• Remote-first work from home with offices in Seattle and Paris for collaboration.
• Flexible scheduling, generous PTO, quarterly Whaleness Days, and an end-of-year Whaleness break.
• Home office support and a technology stipend equivalent to US$100 net per month.
• Annual learning and development stipend for conferences, courses, certifications, and continued learning.
• 16 weeks of paid parental leave after six months of employment.
• Equity for all full-time employees, comprehensive country-specific medical and retirement benefits, paid holidays, and Docker swag.