170K–276K USD / year
Staff Software Engineer, Sandbox Secrets (West Coast)
BackendRemote — Western time zone, United States or Canada
Published on 2026-11-10
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build security systems for Docker’s sandbox environments, with a focus on secrets management and credential injection for AI agents and other workloads. The role spans developer-facing tools and scalable cloud services, with an emphasis on secure isolation, reliability, and usability.
About the company
Docker is a software platform that enables developers to automate the deployment, scaling, and management of applications using containerization technology. The company serves a wide range of industries by providing tools and services that facilitate development and operational efficiencies.
The team
Secrets team within Engineering, focused on sandbox security and credential management.
Stack
GoRustJavamacOSWindowsLinuxTLSHTTP
What you'll do
- Lead improvements to secrets management and credential injection systems.
- Resolve security, correctness, performance, and stability issues across cloud and desktop platforms.
- Drive architecture with Product and partner teams as requirements evolve.
- Mentor engineers and guide design and code reviews.
- Engage with open-source communities around sandboxing and MCP.
- Participate in on-call rotations and respond to critical stability issues.
What we're looking for
- 8+ years of software engineering experience and technical leadership on production systems at scale.
- Experience building developer tools, desktop applications, or runtime infrastructure.
- Familiarity with coding agents and the agentic development ecosystem.
- Ability to reason about sandbox isolation, security boundaries, and safe defaults.
- Experience driving architecture and technical strategy across engineers or teams.
- Bachelor’s degree in a related field or equivalent practical experience.
- Strong communication skills and comfort working autonomously in a remote-first environment.
Nice to have
- Proficiency in Go, Rust, or Java.
- Experience with cryptographic key management, HSMs, or cloud KMS services.
- Knowledge of protecting credentials at rest and in transit.
- Understanding of operating-system credential management capabilities.
Benefits
- Equity for full-time employees.
- Generous PTO, quarterly wellness days, and an end-of-year wellness break.
- Home office support and a US$100 monthly technology stipend.
- Annual learning and development stipend.
- 16 weeks of paid parental leave after six months.
- Medical, retirement, and paid holiday benefits, varying by country.