Docker Staff Software Engineer at Docker on the Secrets team to design and build core security systems for Docker’s agentic platform. Focus on scalable, reliable, and secure software enabling safe agentic workloads.
Responsibilities
Design, develop, and lead improvements to the secrets management and credential injection systems.
Investigate and resolve security, correctness, performance, and stability issues across cloud, macOS, Windows, and Linux.
Collaborate with peers, Product, and adjacent teams to evolve the architecture as requirements grow.
Mentor engineers on the team and set the bar in design reviews and code reviews.
Engage with the open source and agentic development community around sandboxing, MCP, and related ecosystems.
Participate in on-call rotations and respond to critical stability issues affecting users.
Document your work clearly and share knowledge with the rest of the team.
Qualification
Bachelor’s degree in Computer ScienceExperience building developer toolsStrong proficiency in GoUnderstanding of networking
Required
8+ years of software engineering experience, with demonstrated technical leadership on production systems at scale.
Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience
Experience building developer tools, desktop applications, or runtime infrastructure used directly by developers.
Familiarity with the agentic software development ecosystem: how coding agents work and how tools like Claude Code, Codex, or similar agents interact with their environment.
Ability to reason about isolation and security boundaries: what a sandbox should and shouldn't expose, and how to make safe defaults obvious to users.
Experience driving architecture and technical strategy across multiple engineers or teams.
Strong written and verbal communication skills.
Comfortable working with a high degree of autonomy in a remote-first environment.
Preferred
Strong proficiency in Go, Rust, and/or Java
Experience with cryptographic key management systems and techniques (key wrapping, HSMs, cloud KMSes, etc.)
Familiarity with best practices for protecting credentials and secret material at-rest and in transit
Understanding of networking, TLS, HTTP, and the like.
Understanding of one or more OS-specific credential management capabilities.
Docker considers visa sponsorship on a case-by-case basis based on business needs.
