Senior Principal Engineer, Docker and Ecosystem
Docker · Seattle, WA
About this role
**Senior Principal Engineer, Docker and Ecosystem** ## About Docker Docker is a developer tooling platform trusted by **20M+ monthly users** and **20B+ container image pulls**. Developers rely on Docker to **build, share, and run** applications across products including **Docker Desktop, Docker Hub, and Docker Scout**. Docker is a **globally distributed, remote-first** team building the tools that define how software gets built and delivered—especially as **AI agents** increase the need for **sandboxed environments, verified images, and secure infrastructure**. ## The Opportunity Docker is seeking a **Senior Principal Engineer** to serve as the **technical visionary and architect** for how software gets **built, verified, and trusted**. This role focuses on the **software supply chain** problem—where compromised base images, malicious packages, tampered build steps, and unsigned artifacts can undermine trust. You will own the **technical strategy for secure software delivery** across Docker’s products and emerging content/SDLC business, setting **multi-year direction** and partnering with the **SVP of Engineering** and executive leadership. > Note: This role is **not people management**. ## What You’ll Do ### Technical Vision & Strategy - Lead a **multi-year vision** for build security and supply chain across **Docker Desktop, Hub, Hardened Images, Verified Publishing**, and monetization platforms - Define and sequence **“trusted by default”** architecture for **20M developers** - Partner with the SVP of Engineering to translate commercial strategy into technical roadmaps - Establish company-wide **architectural principles** and **security standards** - Identify high-leverage platform investments to enhance security across Docker products - Stay ahead of evolving supply chain threats and regulatory demands ### Build Security Architecture - Architect systems to detect and prevent build-process threats (compromised dependencies, malicious steps, tampered artifacts, untrusted images) - Design **provenance and attestation** infrastructure for verifiable build history - Define **artifact signing, verification, and policy enforcement** across local workflows and CI/CD - Architect **SBOM generation**, dependency analysis, and vulnerability intelligence - Align with and help shape emerging supply chain security standards - Ensure security controls are **fast and unobtrusive** so developers keep them enabled ### SDLC & Developer Workflow Integration - Architect integration across the full SDLC: **local development → CI/CD → production deployment** - Define interfaces/contracts so Docker tooling works with pipelines/registries/platforms customers already run - Design developer experience so the **secure path is the fast/default path** - Architect policy/enforcement models that meet enterprise security & compliance needs without fragmenting workflows - Drive convergence across Docker products using shared platform primitives ### Technical Excellence & Influence - Work with engineering leaders to drive strategy and execution - Mentor and develop **Staff and Principal engineers** to raise the technical bar - Represent Docker’s security architecture externally (blogs, talks, standards bodies, community engagement) - Participate in executive-level discussions with architectural perspective - Participate in on-call rotation: respond to incidents, debug production issues, and improve reliability ## What You’ll Bring ### Domain Expertise - **
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.