Senior Supply Chain Security Engineer (East Coast Preferred)
Docker · Remote · Canada · United States ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior level role
- Fully remote (US/Canada)
- Go + Kubernetes
- Supply chain security
- Visa sponsorship possible
Join the DHI Content team to build and maintain Docker Hardened Images, a catalog of secure system packages and Helm charts for regulated environments. You will drive the transition to a machine-first factory, using automation and AI-assisted engineering to ensure trustworthy software delivery.
What you'll do
- Author and maintain definitions for hardened system packages and container images
- Adapt upstream Helm charts for non-root and restricted Kubernetes environments
- Track upstream releases and manage dependency chains and breaking changes
- Triage and remediate vulnerabilities across OS packages and application dependencies
- Write Go-based integration tests and validators for content quality
- Review pull requests and guide contributors on DHI standards
- Automate repeated work and improve the DHI Factory tooling
- Partner with Product and Security teams to prioritize content improvements
- Participate in paid on-call rotation and handle customer escalations
What you'll need
- Strong experience with containers, Linux, and Kubernetes in production
- Practical experience maintaining and adapting Helm charts
- Experience maintaining downstream distributions or open-source integrations
- Strong YAML skills and attention to configuration consistency
- Knowledge of container security, including non-root execution and capabilities
- Programming ability in Go for writing tests and automation
- Experience tracking upstream releases and reproducible builds
- Familiarity with GitHub workflows and open-source contribution
- Comfort using AI-assisted engineering while retaining ownership
- Clear written communication for remote, async-first collaboration
Nice to have
- Maintainer experience with Alpine, Debian, Fedora, or Wolfi
- Helm chart authorship or contributions to upstream charts
- Experience with SBOMs, VEX, SLSA, Sigstore, or cosign
- Familiarity with apk, deb, rpm, or other dependency ecosystems
- Experience building automation for package or image creation
- Knowledge of FIPS, FedRAMP, or PCI compliance requirements
Stack
- Docker
- Kubernetes
- Helm
- Go
- Linux
- GitHub
How you'll work
- Remote-first company with offices in Seattle and Paris
- Flexible schedule management
- Paid on-call rotation required
- Async-first communication culture
What you get
- Generous PTO and quarterly Whaleness Days
- Home office support and monthly technology stipend
- Annual learning and development stipend
- 16 weeks paid parental leave after six months
- Equity for all full-time employees
- Comprehensive medical and retirement benefits
- Visa sponsorship considered case-by-case