Senior Supply Chain Security Engineer
Core
Maintaining a catalogue of security-hardened container images and Helm charts for regulated environments by adapting upstream open-source projects.
Role type
Senior IC supply chain security engineer (container/Kubernetes)
Builds
Docker Hardened Images (DHI) catalogue of minimal, secure container images and Helm charts
Domain
Cloud infrastructure, container security, open-source maintenance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Container and Kubernetes ecosystem expertise, YAML definition management, upstream OSS project maintenance, container security fundamentals, Go for integration testing, semver and dependency chain management, code review for security conventions
Preferred skills
Linux distribution package maintenance, Helm chart authorship, supply chain tooling (Sigstore, SBOM, SLSA), regulated environment experience
Technologies
Docker, Kubernetes, Helm, Go, cert-manager, grafana, kyverno, istio
Responsibilities
Authoring and maintaining image definition files to track upstream OSS releases, adapting upstream Helm charts for security constraints and Kubernetes compatibility, tracking upstream version releases and handling major version breaks, writing Go-based integration tests for images and charts, triaging CVEs and contributing to security hardening decisions, reviewing peer definitions and chart PRs for security and convention compliance
Seniority
Senior, hands-on IC
