Principal Software Engineer (Libraries Platform)

Chainguard
United States
Workplace: RemoteFull timeUSD 229,000 - 258,000 annuallyFunction: Software EngineeringExperience: 12+ yearsSkills: ["Written communication","Mentorship","Technical leadership","System thinking","Remote collaboration"]

Set technical direction for Chainguard’s Libraries Platform, scaling a secure build-and-remediation factory across new language ecosystems. Lead the redesign of end-to-end CVE remediation automation—from detection through patch, rebuild, SBOM/provenance regeneration, policy verification, and release—with minimal human intervention. Drive agentic/AI-driven patch generation with safety guardrails, improve reliability and scalability, and mentor engineers through platform-wide architectural decisions.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Chainguard
Chainguard
9 hours ago

Principal Software Engineer (Libraries Platform)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Set technical direction for Chainguard’s Libraries Platform, scaling a secure build-and-remediation factory across new language ecosystems. Lead the redesign of end-to-end CVE remediation automation—from detection through patch, rebuild, SBOM/provenance regeneration, policy verification, and release—with minimal human intervention. Drive agentic/AI-driven patch generation with safety guardrails, improve reliability and scalability, and mentor engineers through platform-wide architectural decisions.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Own the technical strategy for multi-ecosystem scaling, generalizing package indexing, build orchestration, and metadata services to be ecosystem-agnostic where possible.
  • •Drive end-to-end CVE remediation automation from detection through verified, released fixes, including SBOM/provenance regeneration, policy verification, and rollout with minimal manual intervention.
  • •Set direction for agentic/AI-driven security patch generation when no upstream patch exists, designing guardrails such as automated validation, regression testing, provenance, and human checkpoints.
  • •Provide platform-wide technical direction across package indices, build/packaging pipelines, registry mirrors, and orchestration tooling serving external customers and internal teams.
  • •Improve reliability and scalability by defining SLOs, leading incident response and postmortems, and mentoring Staff and Senior Engineers while writing docs/RFCs.

Pay and Benefits

Salary: USD 229,000 - 258,000 annually
Perks:Remote WorkHealth InsuranceVisionDentalEquityPaid LeaveParental Leave

Key Requirements

  • •12+ years designing, building, and operating infrastructure for language ecosystems or developer platforms, with Principal-level scope across multiple teams.
  • •Experience onboarding or significantly extending platform support for new language ecosystems, ideally including .NET (NuGet), Go (modules), or Rust (Cargo).
  • •Strong proficiency in Go and the judgment to balance ecosystem idioms with platform consistency.
  • •Proven track record automating away manual remediation steps while knowing when human checkpoints are still necessary.
  • •Deep expertise in CI/CD, agentic pipelines, cloud-native infrastructure, and IaC (containers, Kubernetes, Terraform, and tools like GitHub Actions/Argo/Tekton).
Experience:12+ yearsDeveloper platformsCI/CDCloud-native infrastructureLanguage ecosystemsSecurity automation
Skills:Written communicationMentorshipTechnical leadershipSystem thinkingRemote collaboration
Tech Stack:GoRust.NETNuGetGo modulesCargoCI/CDDockerOCIKubernetesTerraformGitHub ActionsArgoTektonSBOMProvenanceSLSASigstoreLinuxBazel

Company Brief

Chainguard
Builds software supply chain security solutions for containerized and Kubernetes-native environments, offering tools for secure builds, attestations, vulnerability scanning, and policy enforcement to help organizations deploy trustworthy software at scale.
Industry: Cybersecurity
Company Size: Medium (51 to 250 employees)
Growth: Scaleup
Funding: Series C
Headquarters: Seattle, United States
Founded: 2020
WebsiteLinkedIn