Software Engineer (Libraries Platform)

Stack

Responsibilities

• ▹Leads design and implementation of core Libraries Platform components: services, pipelines, and package index across ecosystems (Java, JavaScript, Python/AI/ML)
• ▹Designs and maintains automation for artifact creation, updates, and verification, including vulnerability scanning, SBOM and provenance generation
• ▹Develops and validates automation that generates AI-assisted security patches
• ▹Builds and operates shared platform services (package indexes, registry mirrors, metadata services)
• ▹Develops internal developer tools and CLIs, often in Go
• ▹Drives reliability, scalability, and observability: defines SLOs, builds monitoring, leads incident response
• ▹Solves complex dependency and build issues in production
• ▹Mentors and unblocks other engineers through design reviews and documentation

Requirements

• ▹5+ years designing, building, and operating infrastructure for language ecosystems or developer platforms (build systems, package registries, CI/CD)
• ▹Strong proficiency in Go (Golang) or strong readiness to ramp quickly
• ▹Proven track record building and owning developer tooling and automation (plugins, CLIs, code generators)
• ▹Strong background in CI/CD, cloud-native infrastructure, and IaC: containers (Docker/OCI, Kubernetes), public cloud (GCP, AWS, Azure), Terraform, GitHub Actions/Argo/Tekton
• ▹Demonstrated ability to debug and resolve complex toolchain, compiler, and packaging failures to root cause
• ▹Excellent communication in a remote, distributed environment

Nice to have

• ▹Open source contributions in ecosystem tooling, libraries, or packaging
• ▹Experience with software supply chain security: SLSA, SBOMs, sigstore, provenance
• ▹Background with Linux distributions, packaging, and reproducible build systems (Alpine, Wolfi, Debian, Bazel, CMake, Ninja)
• ▹Prior experience in SRE, platform engineering, or DevOps roles

Soft skills

What we offer

• ▹Flexible, remote-first culture with team meetups and monthly coworking/phone/internet stipend
• ▹Stock options upon hire and promotion, with 10 years to exercise
• ▹100% covered health, vision, and dental insurance for employees and dependents
• ▹Unlimited flexible time off
• ▹18 weeks paid parental leave (12 weeks for non-birthing parents)

About the company

Chainguard is the trusted source for open source, delivering hardened, secure, production-ready builds relied on by software engineers and AI agents. Customers include Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake.