Software Development
San Francisco, Headquarters
Remote
Full-time
Published on
June 4, 2024

Senior Software Engineer -DevOps & Container Image Curation

We are looking for a skilled DevOps Software Engineer to join our team and play a key role in building, maintaining, and optimizing curated container images across various operating systems and frameworks. You will work closely with infrastructure, platform, and security teams to ensure our Docker images are secure, reproducible, scalable, and CVE-free. Your work will power internal developer platforms, microservices, and Kubernetes-based deployments.

This is a contract role, based out of the European Union. Anticipated monthly rate starting at $8,000 to $8,400.

Minimum Requirements

  • Strong experience with Docker, container image optimization, and multi-stage builds.

  • Deep understanding of Kubernetes concepts, workload deployment, and container lifecycle.
  • Experience with Helm, Kustomize, or similar Kubernetes templating tools.

  • Experience with CI/CD tools (e.g., GitHub Actions, GitLab CI, Jenkins, Argo).

  • Familiarity with container security best practices, CVE scanning (e.g., Trivy, Clair, Grype), and SBOM generation.

  • Proficient in at least one scripting language (e.g., Python, Bash, or Go) to automate image creation and validation.

  • Comfortable working in Linux-based environments and managing OS-specific customizations.

Nice-to-Have

  • Experience working with Bazel, Makefiles, or custom build systems for managing large-scale image pipelines.

  • Familiarity with image registries (DockerHub, Harbor, ECR, etc.) and supply chain security (e.g., Cosign, Sigstore).

  • Previous experience curating images for high-scale environments or regulated industries.

Responsibilities

  • Design and build curated, minimal, and secure Docker images for a wide range of applications and environments (e.g., Alpine, Ubuntu, Python, Golang, Java).

  • Maintain a build pipeline (CI/CD) for container image creation, scanning (for CVEs), and publishing to internal or external registries.

  • Implement automation to manage image lifecycle: versioning, patching, and metadata tracking.

  • Collaborate with Security teams to harden images and ensure compliance with FIPS, CIS Benchmarks, and other regulatory standards.

  • Integrate image usage into Kubernetes clusters, including Helm chart compatibility and runtime observability.

  • Build and manage infrastructure-as-code (IaC) to support automated deployments and test environments.

  • Monitor and analyze image usage patterns and suggest optimizations.

  • Provide tooling and documentation to help developers consume curated images easily and safely.