[Remote] Staff Software Engineer, Sandbox Secrets (West Coast)
Note: The job is a remote job and is open to candidates in USA. Docker is hiring a Staff Software Engineer for its Secrets team. The role focuses on building and leading secure, scalable secrets-management and credential-injection systems for Docker’s sandbox and agentic platform, while supporting enterprise security and governance.
Responsibilities
- Design, develop, and lead improvements to the secrets management and credential injection systems
- Investigate and resolve security, correctness, performance, and stability issues across cloud, macOS, Windows, and Linux
- Collaborate with peers, Product, and adjacent teams to evolve the architecture as requirements grow
- Mentor engineers on the team and set the bar in design reviews and code reviews
- Engage with the open source and agentic development community around sandboxing, MCP, and related ecosystems
- Participate in on-call rotations and respond to critical stability issues affecting users
- Document your work clearly and share knowledge with the rest of the team
Skills
- 8+ years of software engineering experience, with demonstrated technical leadership on production systems at scale
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
- Experience building developer tools, desktop applications, or runtime infrastructure used directly by developers
- Familiarity with the agentic software development ecosystem: how coding agents work and how tools like Claude Code, Codex, or similar agents interact with their environment
- Ability to reason about isolation and security boundaries: what a sandbox should and shouldn't expose, and how to make safe defaults obvious to users
- Experience driving architecture and technical strategy across multiple engineers or teams
- Strong written and verbal communication skills
- Comfortable working with a high degree of autonomy in a remote-first environment
- Strong proficiency in Go, Rust, and/or Java
- Experience with cryptographic key management systems and techniques (key wrapping, HSMs, cloud KMSes, etc.)
- Familiarity with best practices for protecting credentials and secret material at-rest and in transit
- Understanding of networking, TLS, HTTP, and the like
- Understanding of one or more OS-specific credential management capabilities
Benefits
- Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
- Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
- Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support – Set up your workspace for comfort and success.
- Technology stipend – Equivalent to US$100 net per month to help support your work.
- Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave – 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
- Docker swag – Because representing the whale never gets old.
Company Overview
Company H1B Sponsorship