Principal Software Engineer (Libraries Platform)

Chainguard
Canada
Workplace: RemoteFull timeFunction: Software EngineeringSkills: ["Written communication","Mentorship","Technical leadership","Strategic decision-making"]

Lead technical strategy for a multi-ecosystem Libraries Platform that continuously builds, verifies, and serves open-source libraries. Own platform architecture for onboarding new ecosystems and redesign CVE remediation workflows to automate detection-to-verified-release with minimal human intervention. Drive agentic/AI-driven patch generation with safe guardrails, set direction across build, packaging, indexing, registry mirrors, and orchestration, and ensure reliability at scale while mentoring engineers through RFCs and design reviews.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Chainguard
Chainguard
9 hours ago

Principal Software Engineer (Libraries Platform)

âś“ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Lead technical strategy for a multi-ecosystem Libraries Platform that continuously builds, verifies, and serves open-source libraries. Own platform architecture for onboarding new ecosystems and redesign CVE remediation workflows to automate detection-to-verified-release with minimal human intervention. Drive agentic/AI-driven patch generation with safe guardrails, set direction across build, packaging, indexing, registry mirrors, and orchestration, and ensure reliability at scale while mentoring engineers through RFCs and design reviews.
Location: Canada
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Own technical strategy for multi-ecosystem scaling, generalizing package indexing, build orchestration, and metadata services across ecosystems.
  • •Drive end-to-end CVE remediation automation from detection through patched, rebuilt, verified, and released fixes including SBOM/provenance regeneration and policy verification.
  • •Set direction for agentic/AI-driven patch generation when upstream patches don’t exist, designing guardrails for validation, regression testing, provenance, and human checkpoints.
  • •Set platform-wide technical direction for the package index, build/packaging pipelines, registry mirrors, and orchestration tooling serving external customers and internal teams.
  • •Ensure reliability and scalability by defining SLOs, leading incident response and postmortems, mentoring Staff/Senior Engineers, and authoring docs/RFCs.

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceVisionDentalEquityPaid LeaveParental Leave

Key Requirements

  • •12+ years designing, building, and operating infrastructure for language ecosystems or developer platforms (build systems, package registries, or CI/CD).
  • •Demonstrated Principal-level scope: setting technical direction across multiple teams, not just owning a single system.
  • •Experience onboarding new toolchains/packaging models into an existing platform, ideally including .NET (NuGet), Go (modules), or Rust (Cargo).
  • •Strong proficiency in Go, with judgment on when to bend ecosystem idioms vs. keep platform consistency.
  • •Deep CI/CD, agentic pipelines, cloud-native infrastructure, and IaC experience at scale (containers, Kubernetes, Terraform, and pipeline tooling like GitHub Actions/Argo/Tekton).
Experience:Open sourceDeveloper platformsCI/CDCloud-native infrastructureSoftware supply chain
Skills:Written communicationMentorshipTechnical leadershipStrategic decision-making
Languages:English
Tech Stack:GoRust.NETNuGetGo modulesCargoDockerOCIKubernetesTerraformGitHub ActionsArgoTektonSBOMProvenanceSLSASigstoreAttestationsLinuxAlpine

Company Brief

Chainguard
Builds software supply chain security solutions for containerized and Kubernetes-native environments, offering tools for secure builds, attestations, vulnerability scanning, and policy enforcement to help organizations deploy trustworthy software at scale.
Industry: Cybersecurity
Company Size: Medium (51 to 250 employees)
Growth: Scaleup
Funding: Series C
Headquarters: Seattle, United States
Founded: 2020
WebsiteLinkedIn