Staff Software Engineer, Sandbox Secrets (West Coast)

The role

You will design and build core security systems for Docker's agentic platform and AI governance products. This role focuses on creating scalable, reliable, and secure software for secrets management and credential injection.

What you will do

• Design, develop, and lead improvements to secrets management and credential injection systems.
• Investigate and resolve security, correctness, performance, and stability issues across cloud, macOS, Windows, and Linux.
• Collaborate with peers, Product, and adjacent teams to evolve architecture.
• Mentor engineers on the team and set the bar in design reviews and code reviews.
• Engage with the open source and agentic development community.
• Participate in on-call rotations and respond to critical stability issues.
• Document work clearly and share knowledge with the team.

Required qualifications

• 8+ years of software engineering experience with technical leadership on production systems at scale.
• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
• Experience building developer tools, desktop applications, or runtime infrastructure used directly by developers.
• Familiarity with the agentic software development ecosystem.
• Ability to reason about isolation and security boundaries.
• Experience driving architecture and technical strategy across multiple engineers or teams.
• Strong written and verbal communication skills.
• Comfortable working with a high degree of autonomy in a remote-first environment.

Nice to have

• Strong proficiency in Go, Rust, and/or Java
• Experience with cryptographic key management systems and techniques (key wrapping, HSMs, cloud KMSes, etc.)
• Familiarity with best practices for protecting credentials and secret material at-rest and in transit
• Understanding of networking, TLS, HTTP, and the like.
• Understanding of one or more OS-specific credential management capabilities.

Benefits

• Remote-first by design
• Flexibility to manage your schedule
• Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break
• Home office support
• Technology stipend equivalent to US$100 net per month
• Annual stipend for conferences, courses, certifications, and continued learning
• 16 weeks of paid parental leave after six months of employment
• Equity for all full-time employees
• Medical, retirement, and paid holidays vary by country
• Docker swag

Before you apply

• Docker considers visa sponsorship on a case-by-case basis based on business needs.
• Docker may use AI-assisted tools during the recruiting process.
• Candidates will be invited to opt in to interview recordings.

About the company

Docker is a globally distributed, remote-first team building tools that define how software gets built and delivered. Their products include Docker Desktop, Docker Hub, and Docker Scout.