Staff Software Engineer, Chainguard Harness

Required

• 10+ years of experience in software development
• A track record of building and operating production services where security and data confidentiality were hard requirements, not afterthoughts
• Experience designing systems that hold confidential customer data end to end
• Experience shipping software into air-gapped, disconnected, or highly restricted environments
• Deep experience with cloud infrastructure on GCP and/or AWS, including IAM, KMS, networking, and infrastructure as code (Terraform)
• Hands-on experience with virtualization and workload isolation, such as KVM, QEMU, Firecracker or Cloud Hypervisor, gVisor, nested virtualization, or bare-metal hosts
• A working knowledge of applied cryptography: envelope encryption, key management and rotation, HSM/KMS-backed keys, and signing
• Proficiency with Go
• Experience with AI tooling and a genuine enthusiasm for applying it to hard problems; experience building agentic systems is a plus
• Strong communication skills and proficiency in English. You can explain a security model to an engineer, a security reviewer, and a customer's CISO, and you work autonomously, take initiative, and ask for help early.