Staff Software Engineer

Chainguard

. Own major parts of the system end to end, from design through implementation, rollout, and operation.

Posted 11/6/2026full-timeRemote • United StatesLead💰 $205,000 - $231,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in software development and system architecture, with a strong focus on security, data confidentiality, and cloud infrastructure management. Capable of leading technical decisions and mentoring teams while effectively communicating complex security models to diverse stakeholders.

Highest-signal resume keywords

10+ Years Of Experience In Software DevelopmentProduction Services Security And Data ConfidentialityCloud Infrastructure On GCP And/or AWSProficiency With GoApplied Cryptography Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Software DevelopmentSystem DesignSecurity Model ExplanationAI Tooling ApplicationInfrastructure As Code (Terraform)VirtualizationWorkload IsolationEnvelope EncryptionKey ManagementConfidential Data Handling

Soft Skills

Strong Communication SkillsAutonomous WorkInitiative TakingMentoring

Tools & Technologies

GCPAWSTerraformKVMQEMUFirecrackerCloud HypervisorGVisorDiscoTech

Industry Keywords

Production ServicesData ConfidentialityThreat ModelsSecurity AuditingTechnical Debt

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud PlatformTerraformGo

About the role

Key responsibilities & impact

Own major parts of the system end to end, from design through implementation, rollout, and operation.
Build security into the foundation by protecting customer code end to end, implementing least-privilege access, and auditing system and operator activity.
Partner with Product and Security on threat models and reviews.
Make Chainguard Harness a reliable, observable, production-grade service.
Make long-term tradeoffs around scale, cost, technical debt, and build versus buy.
Work directly with customers, Product, and the field team.
Join customer calls and turn feedback into the roadmap.
Raise the team's standards through design documents, code review, and mentoring.
Demonstrate how AI tooling can help a small team move quickly without compromising security.
Own architecture and technical decisions while helping take the product from beta to a service that scales to more customers and environments.

Requirements

What you’ll need

10+ years of experience in software development.
Track record of building and operating production services where security and data confidentiality were hard requirements.
Experience designing systems that hold confidential customer data end to end.
Experience shipping software into air-gapped, disconnected, or highly restricted environments.
Deep experience with cloud infrastructure on GCP and/or AWS, including IAM, KMS, networking, and infrastructure as code (Terraform).
Hands-on experience with virtualization and workload isolation, such as KVM, QEMU, Firecracker, Cloud Hypervisor, gVisor, nested virtualization, or bare-metal hosts.
Working knowledge of applied cryptography: envelope encryption, key management and rotation, HSM/KMS-backed keys, and signing.
Proficiency with Go.
Experience with AI tooling and enthusiasm for applying it to hard problems; experience building agentic systems is a plus.
Strong communication skills and proficiency in English.
Ability to explain a security model to an engineer, security reviewer, and customer's CISO.
Ability to work autonomously, take initiative, and ask for help early.
Include the word DiscoTech in the resume.

Benefits

Comp & perks

Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
Receive stock options upon hire and promotion.
Participate in secondary offerings.
10 years to exercise stock options.
100% covered health, vision and dental insurance premiums for you and your dependents.
∞ Flexible Time Off.
18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents, usable all at once or throughout the child's first year.
Team meetup opportunities.
Bi-annual destination summits.
Monthly stipend for coworking spaces, phone and internet costs.