Staff Software Engineer, Containers

Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. Who we are Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. The role, in a nutshell Chainguard Containers is our core product, and this team builds it. As a Staff Software Engineer in Container Product Engineering you will design and ship the features, services, and build systems behind Chainguard Containers, and you will lead the small sub-teams of two to four engineers that own them. Chainguard is growing explosively. Every line of code is now written with AI in the loop, which means the foundation it runs on has to be secure by default. You will build that foundation: the hardened container images, the registry that serves them, and the tooling that lets engineers and AI agents adopt them. This is a product role with technical ownership. You will set direction for major new capabilities, make the architectural calls that affect the team and the teams next to it, and multiply the output of the engineers around you. You will stay hands-on: most of your week is still building. What the team owns • Product features for Chainguard Containers. Letting customers push their own images to our registry, Custom Assembly (customers compose images from our hardened packages), Helm charts, notifications, and compliance views such as STIG dashboards (STIG is the US government’s hardening standard). • The image build pipeline. The systems that turn packages from Wolfi, our Linux distribution, into signed and attested container images at scale, including moving image builds onto our own runner infrastructure. • Registry performance and distribution. Work such as lazy loading, so a container starts before its whole image has downloaded, and image signing with Sigstore. • Adoption tooling for engineers and AI agents. Migration tools that convert existing Dockerfiles to Chainguard Containers, and MCP servers (Model Context Protocol, the standard that lets AI agents call tools) so agents can discover and pull our images directly. What you’ll do • Architect and drive the delivery of major new features and services for Chainguard Containers, often spanning several engineers or teams, from concept through production and the first weeks of customer use. • Make and own the high-leverage trade-offs: which capability to build first, what to defer, when to re-platform and when not to. Write the decision down and bring dissenting engineers along. • Work with AI coding agents as part of how you build, review, and operate, and set the standard for how the team uses them safely as volume grows. • Follow a problem wherever it goes: into another team’s service, a customer call, a support ticket, or go-to-market data, and work across team boundaries to get ahead of planning cycles. • Mentor and level up other engineers through design review and pair work, and set the standard for how the team designs, builds, and ships. • Partner with Product and engineering leadership on roadmap, bringing a technical point of view to what we build, not only how. • Keep the systems you own healthy: observability, on-call, and the fixes that stop the same page from coming back. • Write clearly and often. Design notes, decision records, and status updates are how a remote team moves fast together. What we’re looking for • 5+ years building and operating software that paying customers use, including leading at least one multi-engineer project end to end, preferably at a startup or a company in hyper-growth. • High agency and urgency. You find a way, you do not wait to be unblocked, and you unblock others. • Judgment on trade-offs at the system level. You have made calls that moved a roadmap, and you can show what you gave up and why. • A systems thinker who designs for the whole path: build pipeline, registry, distribution, and the customer’s runtime, and who sees second-order effects before they land. • AI-native in how you build and lead. You use agentic coding tools daily and you have changed how a team works because of them. • Comfortable with ambiguity. You can turn a half-defined product goal into a concrete technical plan, and pivot when priorities shift. • Architectural depth in Go: you can design a Go service from scratch, not only contribute to one, plus strong API design, databases and caching, and cloud infrastructure on GCP or AWS. • Deep knowledge of containers, container registries, the OCI image format (Open Container Initiative, the standard for container images and registries), and Kubernetes. • A track record of mentoring engineers and raising technical practices across a team. • Low ego. You do what you say and say what you do, and you communicate early when the news is bad. • Excellent written English and experience working on a distributed, remote-first team. Nice to haves • Software supply chain security background: SBOMs (software bill of materials), Sigstore signing, or SLSA (Supply-chain Levels for Software Artifacts, a framework for build integrity). • Familiarity with Chainguard’s open-source tools: Wolfi, apko, and melange. • Terraform or other infrastructure-as-code experience. • Author of or maintainer of open-source projects. • A non-traditional path into engineering. We value people who learned by building. Location Remote. United States preferred; Also available to Canada, the United Kingdom, and Germany. We are unable to provide visa sponsorship or relocation for this role. Explore Our Work Dive into the practical side of what we do at Chainguard. These resources provide a hands-on look at our processes and offer an opportunity for in-depth understanding of our product offerings and the technology behind them. Chainguard Academy Base Salary Range $205,000—$231,000 USD About Us We live and breathe our company values: • We are customer obsessed — We focus on delivering solutions to our customers that create value and make their lives better. • We have a bias for intentional action — We prioritize, plan, try things, and fail fast. • We don’t take ourselves too seriously (but we do serious work) — We are solving an important problem which takes focus, but we also like to enjoy the journey. • We trust each other and assume good intentions — We’re transparent with decisions to empower team members to make well informed decisions. A few of the benefits we offer: • Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. • Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!). • 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck. • ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset. • 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child’s first year. If your experience is close but doesn’t fulfill all requirements, please apply. We’re building the best team in technology and are focused on hiring “Chainguardians” with unique backgrounds, perspectives, and experiences. Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard’s Global Candidate Privacy Notice. ©2026 Chainguard. All Rights Reserved.