About the role

Role Overview

Join Chainguard as a Senior Software Engineer on the Libraries Platform team. You’ll lead the architecture and implementation of the platform that continuously builds, verifies, and serves secure open-source libraries to external customers and internal teams.

Responsibilities

Design and implement core platform components: services, APIs, pipelines, and the package index for secure, reproducible build/test/distribution across ecosystems (Java, JavaScript, Python/AI/ML and beyond).
Build and maintain automation for artifact creation, updates, and verification, including:
- vulnerability scanning and remediation workflows
- SBOM and provenance generation
- policy enforcement across the library catalog
- AI-assisted patch generation (generate security fixes, not only apply upstream patches) with testing/verification to build trust
Develop and operate shared platform services such as package indexes, registry mirrors, metadata services, and orchestration tooling.
Create internal developer tools and CLIs (often in Go) integrating with build systems and CI/CD for multiple ecosystems.
Drive reliability and observability: define SLOs, build monitoring/alerting, lead incident response, and improve after incidents.
Troubleshoot production dependency/build issues (toolchains/compilers, CI/CD flakiness, registry/package index edge cases).
Partner cross-functionally with ecosystem, Platform, Delivery, Sustaining, and Security teams.
Mentor and unblock engineers via design reviews, documentation, and hands-on debugging.

Requirements

3–5 years designing, building, and operating infrastructure for language ecosystems or developer platforms (e.g., build systems, package registries, CI/CD for widely used libraries/services).
Strong proficiency in Go (or strong readiness to ramp quickly).
Proven track record owning developer tooling and automation (plugins, CLIs, code generators, or similar).

Nice-to-haves

Experience with security and supply-chain automation such as vulnerability verification, SBOM/provenance, and policy enforcement.
Experience operating CI/CD and registry/index systems at scale with strong reliability/observability practices.

About Chainguard

Chainguard is a security-focused company providing trusted, production-ready builds of open source software. It helps organizations build faster, stay compliant, and reduce risk by delivering hardened artifacts and automating verification and vulnerability workflows across ecosystems.

Software Engineer (Libraries Platform)

Tags